Edit tour

Windows Analysis Report
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false

Overview

General Information

Sample URL:	https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false
Analysis ID:	1545028
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5016 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6300 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&followup=https%3A%2F%2Fdrive.google.com%2Fdrive%2Fsearch%3Fusp%3Dmanage_all_todos_url%26q%3Dfollowup%3Aactionitems%26usp_dm%3Dfalse&ifkv=AcMMx-dkbT1EKYig-mZKamstwwRpvT9OAP6dN0sCy-8yjnfkdQIE6DS_zfp02WRKUw6ctfUBuB1GJA&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-248754756%3A1730249662773894&ddm=1	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49804 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=CaKvCrz62QhObKQjJbHAPi1B1EqjiHofYXb0FRCHXQyqsJRuQhgTnZnnY3YSj96GXS3aittQ8ZAagcHnSBeGH4new5zrXFywdDxWJV3r7KadqccM30yRkUDx-W0bkskmzKyl03EcKX669LBwHbaDPc_P53CZCEiH4Elda6JvfMyAcI6eBLgorWdM3g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: chromecache_69.2.dr

String found in binary or memory: _.rq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.rq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.rq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.rq(_.Aq(c))+"&hl="+_.rq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.rq(m)+"/chromebook/termsofservice.html?languageCode="+_.rq(d)+"&regionCode="+_.rq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 491sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Goog-AuthUser: 0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=XrHpwm1OJso40CsWmXEAmIgR-Oe3EG8WvrtsuJYqb1duR3Frt5Y_Xk5Q2EJMGIO8jBefztTkvEkxpuTIyrww1-kFkyc9DZ1EUaLyy9s06WLhYFghFW3MKKsG52y7dmGip6P-Xz__rwbwmfo2jWjIsGaabguBbzN4_h7Lqunps-dBNvnfOA

Source: chromecache_69.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_69.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_84.2.dr, chromecache_72.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_69.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_72.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_69.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_84.2.dr, chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_84.2.dr, chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_72.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_69.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_84.2.dr, chromecache_72.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_69.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_71.2.dr, chromecache_69.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.60:443 -> 192.168.2.4:49804 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@22/44@12/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false	0%	Virustotal		Browse

Source	Detection	Scanner	Link
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
www3.l.google.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://play.google/intl/	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://policies.google.com/privacy/google-partners	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://policies.google.com/privacy/additional	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://support.google.com/accounts?hl=	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://support.google.com/accounts?p=new-si-ui	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false		unknown
www3.l.google.com	142.250.186.142	true	false	0%, Virustotal, Browse	unknown
play.google.com	142.250.181.238	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
drive.google.com	142.250.184.206	true	false		unknown
www.google.com	142.250.186.36	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false		unknown
accounts.youtube.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Reputation
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	unknown
https://www.google.com/favicon.ico	false	unknown
https://play.google.com/log?hasfast=true&authuser=0&format=json	false	unknown
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google/intl/	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_69.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://youtube.com/t/terms?gl=	chromecache_71.2.dr, chromecache_69.2.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_69.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_84.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/google-partners	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_71.2.dr, chromecache_69.2.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://g.co/recover	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy/additional	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_84.2.dr, chromecache_72.2.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_71.2.dr, chromecache_69.2.dr	false		unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_69.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_71.2.dr, chromecache_69.2.dr	false		unknown
https://support.google.com/accounts?hl=	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms/location	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts?p=new-si-ui	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_71.2.dr, chromecache_69.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
142.250.181.238	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.184.206	drive.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545028
Start date and time:	2024-10-30 01:53:20 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@22/44@12/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.184.238, 64.233.166.84, 34.104.35.123, 142.250.185.67, 216.58.212.170, 142.250.185.202, 142.250.186.106, 142.250.185.138, 142.250.185.234, 142.250.184.202, 172.217.18.10, 142.250.185.170, 142.250.186.170, 172.217.16.202, 142.250.186.42, 142.250.186.138, 142.250.186.74, 142.250.184.234, 216.58.206.42, 142.250.181.234, 142.250.74.195, 4.245.163.56, 199.232.210.172, 192.229.221.95, 20.242.39.171, 74.125.71.84, 20.3.187.198, 216.58.206.67, 108.177.15.84
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.330530390622009
Encrypted:	false
SSDEEP:	96:o5lRPTSqt6ab3hfWVB9BGagA4r+PN8wzLmw8MXVh1SE62X01IjCZTlUUvhUw:KLTRtTbxfaP4r+PNNp827013WiD
MD5:	9C1379B14E7D8DE2A5C348530567294C
SHA1:	B0FAC210C06372EE36131A1F0D6D1A5700A1E677
SHA-256:	E040C618411B6C566442FA9AB8F3A6AD5CFB5693AC9AD88B496BCB70D7BB7F26
SHA-512:	7BC8ECF9C5CD2358C791BC35C0478E77C25FBE07DA4F70DF1148AFB2567ED8B05493704E4783B60E0F508E0A0F2254CC8F81336716673ED6A6E45F22AD11D63C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.TNa=_.z("wg1P6b",[_.zB,_.Wn,_.eo]);._.k("wg1P6b");.var D7a;D7a=_.zh(["aria-"]);._.jK=function(a){_.Y.call(this,a.Ga);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Lc=a.Ea.Af;this.cb=a.Ea.focus;this.Hc=a.Ea.Hc;this.ea=this.aj();a=-1*parseInt(_.So(this.aj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.So(this.aj().el(),"marginBottom")\|\|"0",10);this.Ua={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ha=a?1:b?2:0;this.ka=!1;this.Da=1;this.Ha!==1&&(this.aa=this.Ta("U0exHf").children().Wc(0),_.Ju(this,.E7a(this,this.aa.el())));_.jG(this.xa())&&(a=this.xa().el(),b=this.Fe.bind(this),a.__soy_skip_handler=b)};_.K(_.jK,_.Y);_.jK.Ca=function(){return{Ea:{Af:_.QF,focus:_.BF,Hc:_.Ru}}};_.jK.prototype.Bz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.tA)?(a=a.data.tA,this.Da=a==="MOUS

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.411206759866473
Encrypted:	false
SSDEEP:	48:o7QNEoXxS9DeZW/5jNQ8jsW98HwLot5N0GApDWLEfiUYj5ViAeFIpofNVCpXtc6b:oBoXkAS5jO2eQk9MaLKDYjji9WtxOw
MD5:	02404FB6DEC63E7E1B4266DD85AB4D2D
SHA1:	A3094B8AC7E57094CA9DB92CCF6C958DC3A79B5B
SHA-256:	24A8424A3A1549C1B64CF7AF25FF8B2A7ACFF65FE09391898787D7DFE7DF63EE
SHA-512:	1DB4F4DBD6AFA9E4C490E3898D28BDC5D5B28B9281E0CD8B3454EC0666ACE1D966AFB89CA9E73F68410E6C36AFCB1AB8C761494A82C8938A11B9C2BD6EBDCD23
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var KA=function(a){_.X.call(this,a.Ga)};_.K(KA,_.X);KA.Ca=_.X.Ca;KA.prototype.iT=function(a){return _.cf(this,{Ya:{gU:_.Ql}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.yi(function(e){window._wjdc=function(f){d(f);e(DKa(f,b,a))}}):DKa(c,b,a)})};var DKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.gU.iT(c)};.KA.prototype.aa=function(a,b){var c=_.Ura(b).Gk;if(c.startsWith("$")){var d=_.Fm.get(a);_.Gq[b]&&(d\|\|(d={},_.Fm.set(a,d)),d[c]=_.Gq[b],delete _.Gq[b],_.Hq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Ufa,KA);._.l();._.k("SNUn3");._.CKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var EKa=function(a){var b=_.Fq(a);return b?new _.yi(function(c,d){var e=function(){b=_.Fq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9211
Entropy (8bit):	5.403144080712633
Encrypted:	false
SSDEEP:	192:O2NBVKgWaMHDQSluvaY3WH9Pq29xqVInHXC5FfedegZ5cGNJgT5qE:OQj9WaMHDQSluzWc2XqKny5FfedYKJgH
MD5:	3BDD0797E3F47D042547F18D71EE34A8
SHA1:	C413AE90057D0B60541A6BA3EC0ABE0DC90EC300
SHA-256:	06756530B44B27DC53E2F6B00C9C397279EF148D13888B2DA2AB3EBB3955A69D
SHA-512:	31E25FFEA428D024D1D59222FD595E50D3EE8D3F3FB8E2C92F3AC0B2AEA7CF18C486987473306F41FA42E950A66B2930B7F738EBCFC30D89B0D0A8E9556EA1D5
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.kOa=_.z("SD8Jgb",[]);._.lX=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.Tp&&b.ia&&b.ia===_.C)b=_.$a(b.Bv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.mX=function(a){var b=_.Yo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Wo([_.ql("span")]);_.Zo(b,"jsslot","");a.empty().append(b);return b};_.kPb=function(a){return a===null\|\|typeof a==="string"&&_.Wi(a)};._.k("SD8Jgb");._.vX=function(a){_.Y.call(this,a.Ga);this.Xa=a.controller.Xa;this.ld=a.controllers.ld[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.xa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.vX,_.Y);_.vX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.Rv},header:{jsname:"tJHJj",ctor:_.Rv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	1459
Entropy (8bit):	5.309070279638537
Encrypted:	false
SSDEEP:	24:kMYD7DObSukYqTZqNJHY/sM/cOxeNm1IxyMj3xu6mszt0hGbfk9EGbdSFrkR+OYM:o7DObzH5RFNlk0nms0hGbM9EGbdSuReM
MD5:	DCCB922E3A6095C342C8048FBC1A57BB
SHA1:	3E5066418A533AE2580976CB5438688C509954B0
SHA-256:	42F52BFBA7DDB9D025D47CB693F2D9557B87B07EC2FE4570B6234E6ABFF2EEE1
SHA-512:	F4CDB2C5FBAE73D2672E9BDEBCB2ED6901FAD90D81324147E0BB124CC55E0A32121D261E0404598DD077E404298D88DC7B25BC956F5884D5904D0FF708201BAF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Ym);._.l();._.k("P6sQOc");.var A0a=!!(_.Vh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Ba=b;this.ka=c;this.Da=d;this.Ha=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.zT(),function(e){b[e]=!0});var c=a.sT(),d=a.uT();return new C0a(a.mQ(),c.aa()1E3,a.ZS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},FH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ha[b]:!0};var GH=function(a){_.X.call(this,a.Ga);this.da=a.Ea.uW;this.ea=a.Ea.metadata;a=a.Ea.pia;this.fetch=a.fetch.bind(a)};_.K(GH,_.X);GH.Ca=function(){return{Ea:{uW:_.y0a,metadata:_.v0a,pia:_.o0a}}};GH.prototype.aa=function(a,b){if(this.ea.getType(a.Pd())!==1)return _.nn(a);var c=this.da.UV;return(c=c?D0a(c):null)&&FH(c)?_.cza(a,E0a(this,a,b,c)):_.nn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.274746330890097
Encrypted:	false
SSDEEP:	48:o75Ne77VN1jSuQwYd7X8yfMxIF4Nz7dj7D8vb0zrw:oUjSu/O7X8TmM4mw
MD5:	BAC2A8D818336644857F66AFEC6545F0
SHA1:	FF21FC653100DE6BFCD7AA3614D5692E034C0FED
SHA-256:	8F81785330D23FF4B9282F16CC10428886B9A339BD4606AA1D1FD2521F43F947
SHA-512:	2850697C72C64020A6DD5ADE88332FAAF74B47515855094247A5D61E4AE5B19EF59167C931F6068C7E41934B751781D9EB3F48B8EA3F33ADFE7070AE3C191767
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.IA=function(a){_.X.call(this,a.Ga);this.aa=a.Ya.cache};_.K(_.IA,_.X);_.IA.Ca=function(){return{Ya:{cache:_.Gt}}};_.IA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.jb.kc(b.nb));c&&this.aa.FH(c)},this);return{}};_.Nu(_.dma,_.IA);._.l();._.k("ZDZcre");.var XH=function(a){_.X.call(this,a.Ga);this.Tm=a.Ea.Tm;this.l5=a.Ea.metadata;this.aa=a.Ea.bu};_.K(XH,_.X);XH.Ca=function(){return{Ea:{Tm:_.BH,metadata:_.v0a,bu:_.yH}}};XH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.l5.getType(c.Pd())===2?b.Tm.Qb(c):b.Tm.fetch(c);return _.cm(c,_.CH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,XH);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var EH=function(a){_.X.call(this,a.Ga);this.aa=a.Ea.qR};_.K(EH,_.X);EH.Ca=func

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	1459
Entropy (8bit):	5.309070279638537
Encrypted:	false
SSDEEP:	24:kMYD7DObSukYqTZqNJHY/sM/cOxeNm1IxyMj3xu6mszt0hGbfk9EGbdSFrkR+OYM:o7DObzH5RFNlk0nms0hGbM9EGbdSuReM
MD5:	DCCB922E3A6095C342C8048FBC1A57BB
SHA1:	3E5066418A533AE2580976CB5438688C509954B0
SHA-256:	42F52BFBA7DDB9D025D47CB693F2D9557B87B07EC2FE4570B6234E6ABFF2EEE1
SHA-512:	F4CDB2C5FBAE73D2672E9BDEBCB2ED6901FAD90D81324147E0BB124CC55E0A32121D261E0404598DD077E404298D88DC7B25BC956F5884D5904D0FF708201BAF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.v0a=new _.uf(_.Ym);._.l();._.k("P6sQOc");.var A0a=!!(_.Vh[1]&1);var C0a=function(a,b,c,d,e){this.ea=a;this.Ba=b;this.ka=c;this.Da=d;this.Ha=e;this.aa=0;this.da=B0a(this)},D0a=function(a){var b={};_.Oa(a.zT(),function(e){b[e]=!0});var c=a.sT(),d=a.uT();return new C0a(a.mQ(),c.aa()1E3,a.ZS(),d.aa()1E3,b)},B0a=function(a){return Math.random()Math.min(a.BaMath.pow(a.ka,a.aa),a.Da)},FH=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ha[b]:!0};var GH=function(a){_.X.call(this,a.Ga);this.da=a.Ea.uW;this.ea=a.Ea.metadata;a=a.Ea.pia;this.fetch=a.fetch.bind(a)};_.K(GH,_.X);GH.Ca=function(){return{Ea:{uW:_.y0a,metadata:_.v0a,pia:_.o0a}}};GH.prototype.aa=function(a,b){if(this.ea.getType(a.Pd())!==1)return _.nn(a);var c=this.da.UV;return(c=c?D0a(c):null)&&FH(c)?_.cza(a,E0a(this,a,b,c)):_.nn(a)};.var E0a=function(a,b,c,d){return c.then(function(e){return e},function(e){

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	706623
Entropy (8bit):	5.597666377132177
Encrypted:	false
SSDEEP:	6144:T9QR/xRXXuQTw7I3eK1HNrBS8rsQR7KGZsNr+ByFFp85RIa21T8DjUJwPrRopw3C:Tcp+Qs7k15P54+BIp85uaPJk
MD5:	14115B70DC7DE5F94A07FD64C98332A5
SHA1:	F61D4E1F0B23CAF3A0C0E95A7337F4E7DD7FA347
SHA-256:	C96AAC1203E0252264E167EC82C0BABF85BEBEE5F6E2C5402E4582E7DAC0DF85
SHA-512:	4A0A8275BFB9CC1FBA4402301EEE84053C72B05BB5F12BB3811DE7286FCAC7C50E12C48B90496D94F3E87F2E4542A2F0A0685B81F36982A0EE2BF153776EE29C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	706623
Entropy (8bit):	5.597666377132177
Encrypted:	false
SSDEEP:	6144:T9QR/xRXXuQTw7I3eK1HNrBS8rsQR7KGZsNr+ByFFp85RIa21T8DjUJwPrRopw3C:Tcp+Qs7k15P54+BIp85uaPJk
MD5:	14115B70DC7DE5F94A07FD64C98332A5
SHA1:	F61D4E1F0B23CAF3A0C0E95A7337F4E7DD7FA347
SHA-256:	C96AAC1203E0252264E167EC82C0BABF85BEBEE5F6E2C5402E4582E7DAC0DF85
SHA-512:	4A0A8275BFB9CC1FBA4402301EEE84053C72B05BB5F12BB3811DE7286FCAC7C50E12C48B90496D94F3E87F2E4542A2F0A0685B81F36982A0EE2BF153776EE29C
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	downloaded
Size (bytes):	752652
Entropy (8bit):	5.793251500403412
Encrypted:	false
SSDEEP:	3072:7vjVHescksEmGTMYswXX5b+qLj/RPkzetF8c5WoSdwvnhPagW7kW73SgTdImXhgu:75/9DQYswXBj/zb8QEOudJMDdQs8ciWg
MD5:	FF6E94280290E5E5CE2225CF91FA729B
SHA1:	AB423FBFE0D56B9CA2617241B347070082A3011C
SHA-256:	337B836E3A46BA9ACFC58E08F2E4E4D5C81A9A279E00B0CF031F15E75A61A439
SHA-512:	BE3AB5C53919E709392C5B1043B18D6B4C3E9E8E16ED9DEDCD907937C36C8818DAFCD61C373605ABD01853A406D643A141AF7612366E6ED6108317FF09875E74
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlFnxruYfmGABH-IYL17WbYoKRdhRw/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x13c60ec4, 0x2046d86, 0x1a787f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x1b, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Qb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,nca,oca,pca,qca,rca,u

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.330530390622009
Encrypted:	false
SSDEEP:	96:o5lRPTSqt6ab3hfWVB9BGagA4r+PN8wzLmw8MXVh1SE62X01IjCZTlUUvhUw:KLTRtTbxfaP4r+PNNp827013WiD
MD5:	9C1379B14E7D8DE2A5C348530567294C
SHA1:	B0FAC210C06372EE36131A1F0D6D1A5700A1E677
SHA-256:	E040C618411B6C566442FA9AB8F3A6AD5CFB5693AC9AD88B496BCB70D7BB7F26
SHA-512:	7BC8ECF9C5CD2358C791BC35C0478E77C25FBE07DA4F70DF1148AFB2567ED8B05493704E4783B60E0F508E0A0F2254CC8F81336716673ED6A6E45F22AD11D63C
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.TNa=_.z("wg1P6b",[_.zB,_.Wn,_.eo]);._.k("wg1P6b");.var D7a;D7a=_.zh(["aria-"]);._.jK=function(a){_.Y.call(this,a.Ga);this.Ma=this.Ba=this.aa=this.viewportElement=this.Pa=null;this.Lc=a.Ea.Af;this.cb=a.Ea.focus;this.Hc=a.Ea.Hc;this.ea=this.aj();a=-1*parseInt(_.So(this.aj().el(),"marginTop")\|\|"0",10);var b=parseInt(_.So(this.aj().el(),"marginBottom")\|\|"0",10);this.Ua={top:a,right:0,bottom:b,left:0};a=_.hf(this.getData("isMenuDynamic"),!1);b=_.hf(this.getData("isMenuHoisted"),!1);this.Ha=a?1:b?2:0;this.ka=!1;this.Da=1;this.Ha!==1&&(this.aa=this.Ta("U0exHf").children().Wc(0),_.Ju(this,.E7a(this,this.aa.el())));_.jG(this.xa())&&(a=this.xa().el(),b=this.Fe.bind(this),a.__soy_skip_handler=b)};_.K(_.jK,_.Y);_.jK.Ca=function(){return{Ea:{Af:_.QF,focus:_.BF,Hc:_.Ru}}};_.jK.prototype.Bz=function(a){var b=a.source;this.Pa=b;var c;((c=a.data)==null?0:c.tA)?(a=a.data.tA,this.Da=a==="MOUS

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.5220418074499
Encrypted:	false
SSDEEP:	48:o74vw9VwMdRtDosjw1FeEfXQ4DsFIEKUv807rhmRnVJXWYWIpWb6pVagyNNx8rF6:oUvw9VwMdRtvw1Fe8XtInBRxQJWA7fRw
MD5:	22AAFE864CCCCCCF22F8F144EE5E63F4
SHA1:	49DCE0BB861077CC3FE42B0489662D5B9C8D80D7
SHA-256:	AEEA634E9C434795D834450825E4A9819DE519976DD89BC743073869C0BD9433
SHA-512:	961BAB9A626DFC1B364F9BD41E90578BD2F43D101679B79F6B48A777AC25027AAC94C6CDE8DD1E656A0CA762E5705531639F3989BF5C92A7F6B55F9AF335B612
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.hk(a,1)},zu=function(a){this.Fa=_.u(a,0,zu.messageId)};_.K(zu,_.w);zu.prototype.Ia=function(){return _.Yj(this,1)};zu.prototype.Va=function(a){return _.sk(this,1,a)};zu.messageId="f.bo";var Au=function(){_.Gm.call(this)};_.K(Au,_.Gm);Au.prototype.Ad=function(){this.xU=!1;Kya(this);_.Gm.prototype.Ad.call(this)};Au.prototype.aa=function(){Lya(this);if(this.WD)return Mya(this),!1;if(!this.FW)return Bu(this),!0;this.dispatchEvent("p");if(!this.vQ)return Bu(this),!0;this.EN?(this.dispatchEvent("r"),Bu(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.rp(a.c6);a.mR!=null&&_.co(b,"authuser",a.mR);return b},Mya=function(a){a.WD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Rk(a.vQ);_.xn(b,(0,_.gg)(a.ea,a),"POST",c)};.Au.prototype.ea=function(a){a=a.target;Lya(this);if(_.An(a)){this.gL=0;if(this.EN)this.WD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	33446
Entropy (8bit):	5.393729723477154
Encrypted:	false
SSDEEP:	768:Tg8lYdJkNKZczRnYYCJoaMLRFXaaUTtNbR38yqbVfSTWHUKuJ:TvOYCmFXaaUTH2ygsTUe
MD5:	9CEBD0460ED4EB506F746542E3D7898C
SHA1:	91E6E466D790E02E89148E418176E0778C7DB428
SHA-256:	B4D36FB36DC95AEFAD9E424F63348AD0D2CF7BBD9A6BD3C7C3565B0E45156901
SHA-512:	05EADFCD70CBC6FBCD725670AD4D3F9B89C78CFE0D3A533F8129BE6290B6A43B9B6E85F34833D82309E3785079179DF679ECD8EDF20956B7D4DB182457CD0948
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Zua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.rp("//www.google.com/images/cleardot.gif");_.Cp(c)}this.ka=c};_.h=Zua.prototype;_.h.fd=null;_.h.n_=1E4;_.h.vB=!1;_.h.jR=0;_.h.BK=null;_.h.PV=null;_.h.setTimeout=function(a){this.n_=a};_.h.start=function(){if(this.vB)throw Error("hc");this.vB=!0;this.jR=0;$ua(this)};_.h.stop=function(){ava(this);this.vB=!1};.var $ua=function(a){a.jR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Jm((0,_.gg)(a.XH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Yka,a),a.aa.onerror=(0,_.gg)(a.Xka,a),a.aa.onabort=(0,_.gg)(a.Wka,a),a.BK=_.Jm(a.Zka,a.n_,a),a.aa.src=String(a.ka))};_.h=Zua.prototype;_.h.Yka=function(){this.XH(!0)};_.h.Xka=function(){this.XH(!1)};_.h.Wka=function(){this.XH(!1)};_.h.Zka=function(){this.XH(!1)};._.h.XH=function(a){ava(this);a?(this.vB=!1,this.da.call(this.ea,!0)):this.jR<=0?$ua(this):(this.vB=!1,

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.274746330890097
Encrypted:	false
SSDEEP:	48:o75Ne77VN1jSuQwYd7X8yfMxIF4Nz7dj7D8vb0zrw:oUjSu/O7X8TmM4mw
MD5:	BAC2A8D818336644857F66AFEC6545F0
SHA1:	FF21FC653100DE6BFCD7AA3614D5692E034C0FED
SHA-256:	8F81785330D23FF4B9282F16CC10428886B9A339BD4606AA1D1FD2521F43F947
SHA-512:	2850697C72C64020A6DD5ADE88332FAAF74B47515855094247A5D61E4AE5B19EF59167C931F6068C7E41934B751781D9EB3F48B8EA3F33ADFE7070AE3C191767
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.Cg(_.Yla);_.IA=function(a){_.X.call(this,a.Ga);this.aa=a.Ya.cache};_.K(_.IA,_.X);_.IA.Ca=function(){return{Ya:{cache:_.Gt}}};_.IA.prototype.execute=function(a){_.Db(a,function(b){var c;_.ef(b)&&(c=b.jb.kc(b.nb));c&&this.aa.FH(c)},this);return{}};_.Nu(_.dma,_.IA);._.l();._.k("ZDZcre");.var XH=function(a){_.X.call(this,a.Ga);this.Tm=a.Ea.Tm;this.l5=a.Ea.metadata;this.aa=a.Ea.bu};_.K(XH,_.X);XH.Ca=function(){return{Ea:{Tm:_.BH,metadata:_.v0a,bu:_.yH}}};XH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Db(a,function(c){var d=b.l5.getType(c.Pd())===2?b.Tm.Qb(c):b.Tm.fetch(c);return _.cm(c,_.CH)?d.then(function(e){return _.Id(e)}):d},this)};_.Nu(_.ima,XH);._.l();._.k("K5nYTd");._.u0a=new _.uf(_.ema);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var EH=function(a){_.X.call(this,a.Ga);this.aa=a.Ea.qR};_.K(EH,_.X);EH.Ca=func

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	2130
Entropy (8bit):	5.320106218751151
Encrypted:	false
SSDEEP:	48:o7IN/7bL3A8FrJ/ZOBSXuiiPEGmt78SOTdhf63a/rKCLyrw:oMbLjFXO+VGmNUTTXDLOw
MD5:	117CBF76CFBA252455DC160A563F4090
SHA1:	665D28BC6571CAE462834A16946D309631B905AB
SHA-256:	1EBE77A6D2ECF0CE288934D1643ADC3E93B1996148CA1955F6DA74C446E16C40
SHA-512:	16635460A6D20FC0A348570DDA35C8DE3FA9A5AA1E6B8EA627EF64F8FC91458441653B3AB8D70BCE615072C33B5B4E8C226DD7D805FB24F3D3B90C48DB4F89B7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.wZ=function(a){_.X.call(this,a.Ga);this.window=a.Ea.window.get();this.xc=a.Ea.xc};_.K(_.wZ,_.X);_.wZ.Ca=function(){return{Ea:{window:_.Qu,xc:_.uF}}};_.wZ.prototype.Hp=function(){};_.wZ.prototype.addEncryptionRecoveryMethod=function(){};_.xZ=function(a){return(a==null?void 0:a.zp)\|\|function(){}};_.yZ=function(a){return(a==null?void 0:a.r4)\|\|function(){}};_.$Sb=function(a){return(a==null?void 0:a.xq)\|\|function(){}};._.aTb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.bTb=function(a){setTimeout(function(){throw a;},0)};_.wZ.prototype.lP=function(){return!0};_.wZ.prototype.aa=function(a,b,c){b=this.xc;var d=b.kJ,e=new _.jF;a=_.iF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Un,_.wZ);._.wZ.prototype.aa=function(a,b,c){b=b===void 0?"":

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.5220418074499
Encrypted:	false
SSDEEP:	48:o74vw9VwMdRtDosjw1FeEfXQ4DsFIEKUv807rhmRnVJXWYWIpWb6pVagyNNx8rF6:oUvw9VwMdRtvw1Fe8XtInBRxQJWA7fRw
MD5:	22AAFE864CCCCCCF22F8F144EE5E63F4
SHA1:	49DCE0BB861077CC3FE42B0489662D5B9C8D80D7
SHA-256:	AEEA634E9C434795D834450825E4A9819DE519976DD89BC743073869C0BD9433
SHA-512:	961BAB9A626DFC1B364F9BD41E90578BD2F43D101679B79F6B48A777AC25027AAC94C6CDE8DD1E656A0CA762E5705531639F3989BF5C92A7F6B55F9AF335B612
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var Jya=function(){var a=_.Le();return _.hk(a,1)},zu=function(a){this.Fa=_.u(a,0,zu.messageId)};_.K(zu,_.w);zu.prototype.Ia=function(){return _.Yj(this,1)};zu.prototype.Va=function(a){return _.sk(this,1,a)};zu.messageId="f.bo";var Au=function(){_.Gm.call(this)};_.K(Au,_.Gm);Au.prototype.Ad=function(){this.xU=!1;Kya(this);_.Gm.prototype.Ad.call(this)};Au.prototype.aa=function(){Lya(this);if(this.WD)return Mya(this),!1;if(!this.FW)return Bu(this),!0;this.dispatchEvent("p");if(!this.vQ)return Bu(this),!0;this.EN?(this.dispatchEvent("r"),Bu(this)):Mya(this);return!1};.var Nya=function(a){var b=new _.rp(a.c6);a.mR!=null&&_.co(b,"authuser",a.mR);return b},Mya=function(a){a.WD=!0;var b=Nya(a),c="rt=r&f_uid="+_.Rk(a.vQ);_.xn(b,(0,_.gg)(a.ea,a),"POST",c)};.Au.prototype.ea=function(a){a=a.target;Lya(this);if(_.An(a)){this.gL=0;if(this.EN)this.WD=!1,this.dispatchEvent("r"

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	4068
Entropy (8bit):	5.366545307570018
Encrypted:	false
SSDEEP:	96:GFISRYkTSNcp+/FtEcSbIyANc4xN+t4Bw:EIuYknGFtErbIyAawo7
MD5:	F8531ECA17EA73AD90EA1C03C0BDCB6A
SHA1:	ADA4AC23F286BB4A02993C3D7FD7FBAEDEB871F3
SHA-256:	EAAC5D95FEAC17A44DEBC0D3B11F37C3CFB4D65E4F023DEE480EDD486D060892
SHA-512:	AE93355441203B3C12526185028BAE946A6C3B1010FF196B399D29A7F1B996F667A822F556BC20BEAF7DC5E27A47C6B1BD4B45DFF45218F449DC5325B003D8BC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Ga)};_.K(Tu,_.X);Tu.Ca=_.X.Ca;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.eza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var $za=function(a){var b=function(d){_.mo(d)&&(_.mo(d).Nc=null,_.ev(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},qv=function(a){_.Mt.call(this,a.Ga);this.Ra=this.dom=null;if(this.Wl()){var b=_.Xm(this.Ch(),[_.cn,_.bn]);b=_.Ai([b[_.cn],b[_.bn]]).then(function(c){this.Ra=c[0];this.dom=c[1]},null,this);_.Ju(this,b)}this.Sa=a.Wm.Qfa};_.K(qv,_.Mt);qv.Ca=function(){return{Wm:{Qfa:function(a){return _.Ze(a)}}}};qv.prototype.eq=function(a){return this.Sa.eq(a)};.qv.prototype.getData=function(a){return this.Sa.getData(a)};qv.prototype.Xo=function(){_.lu(this.d

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2859)
Category:	downloaded
Size (bytes):	21769
Entropy (8bit):	5.406292813816537
Encrypted:	false
SSDEEP:	384:i0o6vuD5Z8gDU49ImcEGbio7LR8Bob6mZusxTuFjURVyK3e2:i0o6vuBU49ImFiXLCBbmcsxTsjYoK3e2
MD5:	DF035812B5EF1A999475962CFA2778CB
SHA1:	C79D342B8968BBF97024E82276B82CF618DF3132
SHA-256:	E4940A93FFD848ECE6D30955ED8103B0859B495573806D1FA1E030F28B02D313
SHA-512:	41334E9810323C8C6F213FCA36DE8217B9DE2457FE649F114925B7EAC83B41E68E67D954B73C667C6750AF96CC6EC1CE4EA3F0B88A2F566E4E2BEE21E9F555C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Ij(this,3)});_.Hz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Hz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Iz=function(){this.ka=!0;var a=_.Nj(_.Ak(_.Ge("TSDtV",window),_.fza),_.Uu,1,_.Hj())[0];if(a){var b={};for(var c=_.n(_.Nj(a,_.gza,2,_.Hj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.ek(e,1).toString();switch(_.Kj(e,_.Vu)){case 3:b[d]=_.ck(e,_.Bj(e,_.Vu,3));break;case 2:b[d]=_.ek(e,_.Bj(e,_.Vu,2));break;case 4:b[d]=_.gk(e,_.Bj(e,_.Vu,4));break;case 5:b[d]=_.lk(e,5,_.Vu);break;case 6:b[d]=_.mk(e,_.mf,6,_.Vu);break;case 8:e=_.Mj(e,_.hza,8,_.Vu);switch(_.Kj(e,_.Wu)){case 1:b[d]=_.lk(e,1,_.Wu);.break;default:throw Error("od`"+_.Kj(e,_.Wu));}break;default:throw Error("od`"+_.Kj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9211
Entropy (8bit):	5.403144080712633
Encrypted:	false
SSDEEP:	192:O2NBVKgWaMHDQSluvaY3WH9Pq29xqVInHXC5FfedegZ5cGNJgT5qE:OQj9WaMHDQSluzWc2XqKny5FfedYKJgH
MD5:	3BDD0797E3F47D042547F18D71EE34A8
SHA1:	C413AE90057D0B60541A6BA3EC0ABE0DC90EC300
SHA-256:	06756530B44B27DC53E2F6B00C9C397279EF148D13888B2DA2AB3EBB3955A69D
SHA-512:	31E25FFEA428D024D1D59222FD595E50D3EE8D3F3FB8E2C92F3AC0B2AEA7CF18C486987473306F41FA42E950A66B2930B7F738EBCFC30D89B0D0A8E9556EA1D5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.kOa=_.z("SD8Jgb",[]);._.lX=function(a,b){if(typeof b==="string")a.Mc(b);else if(b instanceof _.Tp&&b.ia&&b.ia===_.C)b=_.$a(b.Bv()),a.empty().append(b);else if(b instanceof _.Va)b=_.$a(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Xf");};_.mX=function(a){var b=_.Yo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Wo([_.ql("span")]);_.Zo(b,"jsslot","");a.empty().append(b);return b};_.kPb=function(a){return a===null\|\|typeof a==="string"&&_.Wi(a)};._.k("SD8Jgb");._.vX=function(a){_.Y.call(this,a.Ga);this.Xa=a.controller.Xa;this.ld=a.controllers.ld[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.xa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.K(_.vX,_.Y);_.vX.Ca=function(){return{controller:{Xa:{jsname:"n7vHCb",ctor:_.Rv},header:{jsname:"tJHJj",ctor:_.Rv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.852645816977233
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2xCKsJJuYHSKnZ:lFJuuVTBpnu4SKZ
MD5:	3D76DE7C583DA8ED6D1D5AB91239F88B
SHA1:	A0818EFD94EFC525EBF513EDE7CADE6D038DF57A
SHA-256:	E9FBC4E9A936269D7CC25B32C7910F3861CA3D3AE84907A34D613442E44A01E1
SHA-512:	0DA8AD357DFCEB655865C834BFAF7EABE3762DB13EF9BE681F2426540E767C8F3779D1E90D9DACB3040363F72A263DA9FA4F61EEA72C21DC07DED17488207504
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4kI18qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (557)
Category:	dropped
Size (bytes):	752652
Entropy (8bit):	5.793251500403412
Encrypted:	false
SSDEEP:	3072:7vjVHescksEmGTMYswXX5b+qLj/RPkzetF8c5WoSdwvnhPagW7kW73SgTdImXhgu:75/9DQYswXBj/zb8QEOudJMDdQs8ciWg
MD5:	FF6E94280290E5E5CE2225CF91FA729B
SHA1:	AB423FBFE0D56B9CA2617241B347070082A3011C
SHA-256:	337B836E3A46BA9ACFC58E08F2E4E4D5C81A9A279E00B0CF031F15E75A61A439
SHA-512:	BE3AB5C53919E709392C5B1043B18D6B4C3E9E8E16ED9DEDCD907937C36C8818DAFCD61C373605ABD01853A406D643A141AF7612366E6ED6108317FF09875E74
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x13c60ec4, 0x2046d86, 0x1a787f88, 0x11406f40, 0x72102, 0x0, 0x4000000, 0x1b, 0x30f, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Qa,Ua,gaa,iaa,mb,qaa,waa,Caa,Kaa,Maa,Paa,Lb,Qaa,Qb,Tb,Ub,Raa,Saa,Vb,Taa,Uaa,Vaa,Zb,$aa,bba,hc,ic,jc,gba,hba,lba,nba,pba,qba,uba,xba,rba,wba,vba,tba,sba,yba,Cba,Gba,Hba,Eba,Ic,Jc,Kba,Mba,Rba,Sba,Tba,Uba,Vba,Wba,Pba,Qba,Yba,hd,aca,bca,dca,fca,eca,hca,ica,jca,kca,nca,oca,pca,qca,rca,u

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	2130
Entropy (8bit):	5.320106218751151
Encrypted:	false
SSDEEP:	48:o7IN/7bL3A8FrJ/ZOBSXuiiPEGmt78SOTdhf63a/rKCLyrw:oMbLjFXO+VGmNUTTXDLOw
MD5:	117CBF76CFBA252455DC160A563F4090
SHA1:	665D28BC6571CAE462834A16946D309631B905AB
SHA-256:	1EBE77A6D2ECF0CE288934D1643ADC3E93B1996148CA1955F6DA74C446E16C40
SHA-512:	16635460A6D20FC0A348570DDA35C8DE3FA9A5AA1E6B8EA627EF64F8FC91458441653B3AB8D70BCE615072C33B5B4E8C226DD7D805FB24F3D3B90C48DB4F89B7
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.wZ=function(a){_.X.call(this,a.Ga);this.window=a.Ea.window.get();this.xc=a.Ea.xc};_.K(_.wZ,_.X);_.wZ.Ca=function(){return{Ea:{window:_.Qu,xc:_.uF}}};_.wZ.prototype.Hp=function(){};_.wZ.prototype.addEncryptionRecoveryMethod=function(){};_.xZ=function(a){return(a==null?void 0:a.zp)\|\|function(){}};_.yZ=function(a){return(a==null?void 0:a.r4)\|\|function(){}};_.$Sb=function(a){return(a==null?void 0:a.xq)\|\|function(){}};._.aTb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.bTb=function(a){setTimeout(function(){throw a;},0)};_.wZ.prototype.lP=function(){return!0};_.wZ.prototype.aa=function(a,b,c){b=this.xc;var d=b.kJ,e=new _.jF;a=_.iF(e,7,a);d.call(b,305,a,c,void 0)};_.Nu(_.Un,_.wZ);._.wZ.prototype.aa=function(a,b,c){b=b===void 0?"":

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	33446
Entropy (8bit):	5.393729723477154
Encrypted:	false
SSDEEP:	768:Tg8lYdJkNKZczRnYYCJoaMLRFXaaUTtNbR38yqbVfSTWHUKuJ:TvOYCmFXaaUTH2ygsTUe
MD5:	9CEBD0460ED4EB506F746542E3D7898C
SHA1:	91E6E466D790E02E89148E418176E0778C7DB428
SHA-256:	B4D36FB36DC95AEFAD9E424F63348AD0D2CF7BBD9A6BD3C7C3565B0E45156901
SHA-512:	05EADFCD70CBC6FBCD725670AD4D3F9B89C78CFE0D3A533F8129BE6290B6A43B9B6E85F34833D82309E3785079179DF679ECD8EDF20956B7D4DB182457CD0948
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Zua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.rp("//www.google.com/images/cleardot.gif");_.Cp(c)}this.ka=c};_.h=Zua.prototype;_.h.fd=null;_.h.n_=1E4;_.h.vB=!1;_.h.jR=0;_.h.BK=null;_.h.PV=null;_.h.setTimeout=function(a){this.n_=a};_.h.start=function(){if(this.vB)throw Error("hc");this.vB=!0;this.jR=0;$ua(this)};_.h.stop=function(){ava(this);this.vB=!1};.var $ua=function(a){a.jR++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.Jm((0,_.gg)(a.XH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.gg)(a.Yka,a),a.aa.onerror=(0,_.gg)(a.Xka,a),a.aa.onabort=(0,_.gg)(a.Wka,a),a.BK=_.Jm(a.Zka,a.n_,a),a.aa.src=String(a.ka))};_.h=Zua.prototype;_.h.Yka=function(){this.XH(!0)};_.h.Xka=function(){this.XH(!1)};_.h.Wka=function(){this.XH(!1)};_.h.Zka=function(){this.XH(!1)};._.h.XH=function(a){ava(this);a?(this.vB=!1,this.da.call(this.ea,!0)):this.jR<=0?$ua(this):(this.vB=!1,

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2859)
Category:	dropped
Size (bytes):	21769
Entropy (8bit):	5.406292813816537
Encrypted:	false
SSDEEP:	384:i0o6vuD5Z8gDU49ImcEGbio7LR8Bob6mZusxTuFjURVyK3e2:i0o6vuBU49ImFiXLCBbmcsxTsjYoK3e2
MD5:	DF035812B5EF1A999475962CFA2778CB
SHA1:	C79D342B8968BBF97024E82276B82CF618DF3132
SHA-256:	E4940A93FFD848ECE6D30955ED8103B0859B495573806D1FA1E030F28B02D313
SHA-512:	41334E9810323C8C6F213FCA36DE8217B9DE2457FE649F114925B7EAC83B41E68E67D954B73C667C6750AF96CC6EC1CE4EA3F0B88A2F566E4E2BEE21E9F555C4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Uu.prototype.da=_.ca(41,function(){return _.Ij(this,3)});_.Hz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b;this.flagNameForDebugging=void 0};_.Hz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.Iz=function(){this.ka=!0;var a=_.Nj(_.Ak(_.Ge("TSDtV",window),_.fza),_.Uu,1,_.Hj())[0];if(a){var b={};for(var c=_.n(_.Nj(a,_.gza,2,_.Hj())),d=c.next();!d.done;d=c.next()){var e=d.value;d=_.ek(e,1).toString();switch(_.Kj(e,_.Vu)){case 3:b[d]=_.ck(e,_.Bj(e,_.Vu,3));break;case 2:b[d]=_.ek(e,_.Bj(e,_.Vu,2));break;case 4:b[d]=_.gk(e,_.Bj(e,_.Vu,4));break;case 5:b[d]=_.lk(e,5,_.Vu);break;case 6:b[d]=_.mk(e,_.mf,6,_.Vu);break;case 8:e=_.Mj(e,_.hza,8,_.Vu);switch(_.Kj(e,_.Wu)){case 1:b[d]=_.lk(e,1,_.Wu);.break;default:throw Error("od`"+_.Kj(e,_.Wu));}break;default:throw Error("od`"+_.Kj(e,_.Vu));}}}else b={};this.ea=b;this.token=a?a.da():null};_

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.411206759866473
Encrypted:	false
SSDEEP:	48:o7QNEoXxS9DeZW/5jNQ8jsW98HwLot5N0GApDWLEfiUYj5ViAeFIpofNVCpXtc6b:oBoXkAS5jO2eQk9MaLKDYjji9WtxOw
MD5:	02404FB6DEC63E7E1B4266DD85AB4D2D
SHA1:	A3094B8AC7E57094CA9DB92CCF6C958DC3A79B5B
SHA-256:	24A8424A3A1549C1B64CF7AF25FF8B2A7ACFF65FE09391898787D7DFE7DF63EE
SHA-512:	1DB4F4DBD6AFA9E4C490E3898D28BDC5D5B28B9281E0CD8B3454EC0666ACE1D966AFB89CA9E73F68410E6C36AFCB1AB8C761494A82C8938A11B9C2BD6EBDCD23
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.FTeHN54Z0KM.es5.O/ck=boq-identity.AccountsSignInUi.76Upe3Ni9S0.L.B1.O/am=xA7Gk2EbgYD4h6cBvQFFAiEHAAAAAAAAAEBsAAAADwM/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlEe14yoNz_jsmJyeSIaVe8arBPpyQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var KA=function(a){_.X.call(this,a.Ga)};_.K(KA,_.X);KA.Ca=_.X.Ca;KA.prototype.iT=function(a){return _.cf(this,{Ya:{gU:_.Ql}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.yi(function(e){window._wjdc=function(f){d(f);e(DKa(f,b,a))}}):DKa(c,b,a)})};var DKa=function(a,b,c){return(a=a&&a[c])?a:b.Ya.gU.iT(c)};.KA.prototype.aa=function(a,b){var c=_.Ura(b).Gk;if(c.startsWith("$")){var d=_.Fm.get(a);_.Gq[b]&&(d\|\|(d={},_.Fm.set(a,d)),d[c]=_.Gq[b],delete _.Gq[b],_.Hq--);if(d)if(a=d[c])b=_.ff(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.Nu(_.Ufa,KA);._.l();._.k("SNUn3");._.CKa=new _.uf(_.Dg);._.l();._.k("RMhBfe");.var EKa=function(a){var b=_.Fq(a);return b?new _.yi(function(c,d){var e=function(){b=_.Fq(a);var f=_.aga(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	dropped
Size (bytes):	4068
Entropy (8bit):	5.366545307570018
Encrypted:	false
SSDEEP:	96:GFISRYkTSNcp+/FtEcSbIyANc4xN+t4Bw:EIuYknGFtErbIyAawo7
MD5:	F8531ECA17EA73AD90EA1C03C0BDCB6A
SHA1:	ADA4AC23F286BB4A02993C3D7FD7FBAEDEB871F3
SHA-256:	EAAC5D95FEAC17A44DEBC0D3B11F37C3CFB4D65E4F023DEE480EDD486D060892
SHA-512:	AE93355441203B3C12526185028BAE946A6C3B1010FF196B399D29A7F1B996F667A822F556BC20BEAF7DC5E27A47C6B1BD4B45DFF45218F449DC5325B003D8BC
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Cg(_.sqa);._.k("sOXFj");.var Tu=function(a){_.X.call(this,a.Ga)};_.K(Tu,_.X);Tu.Ca=_.X.Ca;Tu.prototype.aa=function(a){return a()};_.Nu(_.rqa,Tu);._.l();._.k("oGtAuc");._.eza=new _.uf(_.sqa);._.l();._.k("q0xTif");.var $za=function(a){var b=function(d){_.mo(d)&&(_.mo(d).Nc=null,_.ev(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},qv=function(a){_.Mt.call(this,a.Ga);this.Ra=this.dom=null;if(this.Wl()){var b=_.Xm(this.Ch(),[_.cn,_.bn]);b=_.Ai([b[_.cn],b[_.bn]]).then(function(c){this.Ra=c[0];this.dom=c[1]},null,this);_.Ju(this,b)}this.Sa=a.Wm.Qfa};_.K(qv,_.Mt);qv.Ca=function(){return{Wm:{Qfa:function(a){return _.Ze(a)}}}};qv.prototype.eq=function(a){return this.Sa.eq(a)};.qv.prototype.getData=function(a){return this.Sa.getData(a)};qv.prototype.Xo=function(){_.lu(this.d

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 01:54:16.098918915 CET	49675	443	192.168.2.4	173.222.162.32
Oct 30, 2024 01:54:18.677807093 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.677860022 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:18.677951097 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.678070068 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.678112984 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:18.678178072 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.678267956 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.678289890 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:18.678508043 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:18.678530931 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.533622026 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.533987999 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.534018040 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.535222054 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.535305977 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.537784100 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.537864923 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.539217949 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.539474010 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.539491892 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.539995909 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.540066957 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.540242910 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.540332079 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.540719032 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.540730000 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.541032076 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.541094065 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.541269064 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.541336060 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.581950903 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.582060099 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.582072973 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.628218889 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.931679964 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.972244978 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.972265959 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.981806040 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:19.981916904 CET	443	49736	142.250.184.206	192.168.2.4
Oct 30, 2024 01:54:19.982003927 CET	49736	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:54:21.777143002 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:21.777245998 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:21.777317047 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:21.801161051 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:21.801203012 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.028294086 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.028357983 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:22.028572083 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.051805019 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.051835060 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:22.655734062 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.656595945 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:22.656656027 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.657640934 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.657731056 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:22.665776014 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:22.665855885 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.706865072 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:22.706899881 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:22.759094000 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:22.902528048 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:22.902600050 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.906205893 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.906220913 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:22.906450987 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:22.946583986 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.949645042 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:22.991338015 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.192785978 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.192867041 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.193008900 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.193047047 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.193067074 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.193078041 CET	49742	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.193084955 CET	443	49742	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.232876062 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.232918024 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:23.233067989 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.233633041 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:23.233694077 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.088700056 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.088794947 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.092510939 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.092533112 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.092962027 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.094480991 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.139329910 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.340384007 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.340542078 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.340867996 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.341551065 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.341551065 CET	49744	443	192.168.2.4	184.28.90.27
Oct 30, 2024 01:54:24.341593027 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:24.341619968 CET	443	49744	184.28.90.27	192.168.2.4
Oct 30, 2024 01:54:32.651223898 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:32.651309967 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:32.651489019 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:33.517461061 CET	49741	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:33.517509937 CET	443	49741	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:33.652297974 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:33.652333975 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:33.652719021 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:33.653068066 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:33.653083086 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.518882990 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.519081116 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.519097090 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.519515038 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.519582033 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.520239115 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.520288944 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.523605108 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.523673058 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.523881912 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.523891926 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.561538935 CET	49723	80	192.168.2.4	88.221.110.91
Oct 30, 2024 01:54:34.567126989 CET	80	49723	88.221.110.91	192.168.2.4
Oct 30, 2024 01:54:34.567361116 CET	49723	80	192.168.2.4	88.221.110.91
Oct 30, 2024 01:54:34.598478079 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.820740938 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.820976019 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.821043968 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.821083069 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.821185112 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.821225882 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.821233988 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.821281910 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.829030991 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.829083920 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.838156939 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.838191032 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.838207960 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.838216066 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.838299990 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.941406965 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941468954 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.941468954 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941479921 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941521883 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.941555977 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941598892 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.941838980 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941891909 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.941905975 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941945076 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.941993952 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.945182085 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.945260048 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.955065966 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.955122948 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.964118958 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.964179039 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.964191914 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.964216948 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.964653015 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.972664118 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.972737074 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.972743988 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.980073929 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.980160952 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.980169058 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.988817930 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:34.988900900 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:34.988913059 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:35.012260914 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:35.012317896 CET	443	49770	142.250.186.142	192.168.2.4
Oct 30, 2024 01:54:35.012367964 CET	49770	443	192.168.2.4	142.250.186.142
Oct 30, 2024 01:54:35.269716024 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.269731998 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:35.269817114 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.278855085 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.278882980 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:35.913311005 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.913345098 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:35.913687944 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.915194035 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:35.915210009 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.135237932 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.135510921 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.135519981 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.136042118 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.136123896 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.137053967 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.137124062 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.138175011 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.138273954 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.138385057 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.183332920 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.302644968 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.302664995 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.489026070 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.489042997 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.492777109 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.492861032 CET	443	49778	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.492923975 CET	49778	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.494421005 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.494452953 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.494524002 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.495359898 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.495387077 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.777873039 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.803500891 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.803525925 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.803965092 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.804020882 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.804667950 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.804711103 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.805967093 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.806032896 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.806416035 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:36.806422949 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:36.927541971 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.098756075 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.100509882 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.100565910 CET	443	49779	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.100642920 CET	49779	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.106967926 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.107007027 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.107083082 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.109359026 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.109376907 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.369781971 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.370388985 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.370402098 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.370907068 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.371244907 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.371922970 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.372092009 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.372549057 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.372549057 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.372569084 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.372597933 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.372634888 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.579392910 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.579720020 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.688188076 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.803632021 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.803652048 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.805037975 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.805113077 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.805311918 CET	443	49788	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.805355072 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.805681944 CET	49788	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.875433922 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:37.875458002 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:37.875539064 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:37.879560947 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:37.879591942 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:37.984693050 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.985168934 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.985193014 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.985693932 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.985966921 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.986690044 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.986862898 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.987080097 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.987080097 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.987096071 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:37.987154961 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:37.987159014 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.031331062 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.114382029 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:38.114394903 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.227543116 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:38.276890039 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.412600040 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.412683010 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:38.423451900 CET	49789	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:38.423474073 CET	443	49789	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:38.443922043 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:38.443949938 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:38.444008112 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:38.444303036 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:38.444317102 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:38.736291885 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.736756086 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:38.736783981 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.738058090 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.738135099 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:38.739332914 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.739396095 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:38.739789009 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:38.739878893 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.740920067 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:38.740936995 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:38.817167997 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.016539097 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.016671896 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.016727924 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.016771078 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.018599033 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.018677950 CET	443	49793	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.018742085 CET	49793	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.020011902 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.020051956 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.020122051 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.020984888 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.021001101 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.306469917 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.307002068 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.307019949 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.307472944 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.308579922 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.308657885 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.309233904 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.355329037 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556210995 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556268930 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556308031 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556346893 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556376934 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.556395054 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.556405067 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.558063030 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.558104038 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.558276892 CET	443	49794	142.250.186.36	192.168.2.4
Oct 30, 2024 01:54:39.559669971 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.559925079 CET	49794	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:54:39.577967882 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:39.578007936 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:39.578147888 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:39.578319073 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:39.578346014 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:39.898900986 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.899234056 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.899252892 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.899766922 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.900055885 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.900758982 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.900844097 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.901151896 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.901151896 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:39.901165962 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:39.901231050 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.107377052 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.107739925 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:40.179627895 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.179727077 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.180135012 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:40.180150986 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.181159019 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:40.181235075 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.181540966 CET	443	49796	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:40.181631088 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:40.181631088 CET	49796	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:40.453730106 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.461796045 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.461816072 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.462876081 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.462954998 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.463833094 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.463892937 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.464184999 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.464204073 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.598253012 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.710733891 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.710798979 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.710839987 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.710843086 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.710855961 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.710894108 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.710922956 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.750382900 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.750399113 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.752084017 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:40.752130985 CET	443	49797	172.217.18.4	192.168.2.4
Oct 30, 2024 01:54:40.752192020 CET	49797	443	192.168.2.4	172.217.18.4
Oct 30, 2024 01:54:42.149554968 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:42.149633884 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:42.150002956 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:42.150662899 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:42.150695086 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.018539906 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.018831968 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.018848896 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.019211054 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.019541979 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.019603014 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.019716024 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.019742966 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.019748926 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.298424959 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.348870039 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.348912954 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.349462032 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.349548101 CET	443	49798	142.250.181.238	192.168.2.4
Oct 30, 2024 01:54:43.349628925 CET	49798	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:54:43.353204966 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:43.353235960 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:43.353352070 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:43.353583097 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:43.353595972 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.226557016 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.226900101 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.226913929 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.227438927 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.227499962 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.228442907 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.228492975 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.228663921 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.228743076 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.228857994 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.228863955 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.270461082 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.528855085 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.528911114 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.528996944 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.529010057 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.534979105 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.535020113 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.535156012 CET	443	49799	142.250.185.142	192.168.2.4
Oct 30, 2024 01:54:44.535248995 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:54:44.535248995 CET	49799	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:04.593100071 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:55:04.593159914 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:55:06.482297897 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:06.482388020 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:06.482471943 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:06.483572960 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:06.483609915 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.180556059 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.180588007 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.180655956 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.182341099 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.182354927 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.336002111 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.362471104 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.362510920 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.363878965 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.363965034 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.366381884 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.366451979 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.369402885 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.369580984 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.369678020 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.369700909 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.369729042 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.414617062 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.414639950 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.652173042 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.698262930 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.698290110 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.730233908 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.730276108 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.730452061 CET	443	49800	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:07.730542898 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:07.730542898 CET	49800	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.040437937 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.041033030 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.041052103 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.041414976 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.042053938 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.042117119 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.042515039 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.042923927 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.042929888 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.090462923 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.090507984 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.090817928 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.094240904 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.094259024 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.324287891 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.366750956 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.366764069 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.366991043 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.367042065 CET	443	49801	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:08.367150068 CET	49801	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:08.989428997 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.989897013 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.989932060 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.990468025 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.990535975 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.991476059 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.991528034 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.992036104 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.992117882 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:08.992369890 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:08.992378950 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:09.039417982 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:09.275221109 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:09.275368929 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:09.275415897 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:09.275434971 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:09.277578115 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:09.277642012 CET	443	49802	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:09.277777910 CET	49802	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:11.583460093 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:11.583489895 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:11.583590031 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:11.583945036 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:11.583960056 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.332453966 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.332561016 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.334728956 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.334738970 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.335035086 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.345563889 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.391330004 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.569775105 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.569827080 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.569869041 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.569947958 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.569947958 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.569960117 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.570014954 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.595655918 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.595679998 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.595721960 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.595741987 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.595783949 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.595794916 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.688730001 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.688755989 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.688807011 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.688817978 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.688853025 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.688898087 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.714718103 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.714740038 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.714812040 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.714832067 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.715117931 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.716090918 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.716099024 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.716182947 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.716188908 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.716320992 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.718066931 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.718086004 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.718216896 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.718223095 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.718314886 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.808541059 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.808569908 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.808705091 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.808705091 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.808732986 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.808780909 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.833237886 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.833259106 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.833324909 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.833332062 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.833431959 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.834228992 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.834249020 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.834332943 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.834332943 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.834340096 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.834486961 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.835366964 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.835386992 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.835437059 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.835443974 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.835473061 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.835473061 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.836815119 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.836833954 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.836875916 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.836889029 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.836900949 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.836930990 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.837723017 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.837740898 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.837801933 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.837801933 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.837807894 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.837990046 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.838692904 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.838711977 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.838793039 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.838793039 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.838802099 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.838891983 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.926924944 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.927014112 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.927016973 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.927102089 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.927153111 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.927170038 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.927177906 CET	49804	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.927182913 CET	443	49804	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.978034019 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.978060961 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.978255987 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.978296995 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.978328943 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.978543043 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.978837013 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.978851080 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.979510069 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.979523897 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.980190992 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.980199099 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.980293036 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.980467081 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.980477095 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.982434034 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.982502937 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.982589006 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.983771086 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.983778954 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.983793020 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.983808041 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:12.983884096 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.984057903 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:12.984074116 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.719629049 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.720206976 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.720207930 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.720232010 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.720699072 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.720722914 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.720973015 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.720980883 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.721255064 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.721261978 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.721268892 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.721560001 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.721585989 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.721946001 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.721951008 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.732316017 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.732671022 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.732693911 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.733237028 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.733242035 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.771624088 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.772500038 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.772514105 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.773179054 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.773186922 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847529888 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847604036 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847661972 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.847676992 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847712040 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.847717047 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847784042 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.847837925 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.848062992 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.848078012 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.848099947 CET	49806	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.848105907 CET	443	49806	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.851814032 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.851867914 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.851919889 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.851979017 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.851978064 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.851999044 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.852029085 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.852102041 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.852147102 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.852163076 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.852165937 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.852191925 CET	49809	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.852200985 CET	443	49809	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.853342056 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.853364944 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.853420019 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.853746891 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.853758097 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.853770018 CET	49808	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.853775024 CET	443	49808	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.853873968 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.853885889 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.855284929 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.855310917 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.855477095 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.855658054 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.855674028 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.856321096 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.856345892 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.856401920 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.856508017 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.856518984 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.864263058 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.864468098 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.864511967 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.864546061 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.864552021 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.864562988 CET	49805	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.864566088 CET	443	49805	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.867291927 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.867325068 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.867383003 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.867501020 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.867511988 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.909651995 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.909687042 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.909744024 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.909753084 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.909770012 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.909806967 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.909967899 CET	49807	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.909971952 CET	443	49807	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.913104057 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.913114071 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:13.913167953 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.913305044 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:13.913311958 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.582113028 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.585947037 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.585973024 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.588732004 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.588740110 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.606146097 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.606739044 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.607012987 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.607589960 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.607589960 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.607611895 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.607620955 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.620565891 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.620584011 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.621308088 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.621314049 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.625716925 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.625741959 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.626373053 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.626389027 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.687553883 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.688519955 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.688549995 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.689327002 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.689332962 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.714507103 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.714584112 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.715600967 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.715600967 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.715743065 CET	49812	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.715754986 CET	443	49812	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.718849897 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.718883991 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.719204903 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.719715118 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.719729900 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.737329960 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.737621069 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.737941027 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.737979889 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.737979889 CET	49813	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.737991095 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.737998962 CET	443	49813	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.740695953 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.740767002 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.741050959 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.741147041 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.741179943 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.751394987 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.751559973 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.751656055 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.751656055 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.752295971 CET	49810	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.752306938 CET	443	49810	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.754174948 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.754208088 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.754419088 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.754419088 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.754451036 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.756072044 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.756134033 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.756280899 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.756280899 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.756309986 CET	49811	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.756326914 CET	443	49811	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.758501053 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.758532047 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.758708954 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.758708954 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.758759022 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.827625036 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.828067064 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.828572035 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.828572035 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.828748941 CET	49814	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.828761101 CET	443	49814	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.832257986 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.832288027 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:14.832509995 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.836529970 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:14.836540937 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.450809956 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.451385021 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.451405048 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.452029943 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.452035904 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.474056959 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.474739075 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.474787951 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.475224018 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.475236893 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.499188900 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.499623060 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.499654055 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.500252008 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.500257015 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.505306959 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.505788088 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.505819082 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.506531954 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.506542921 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.570966005 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.571986914 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.572004080 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.572736979 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.572741032 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.582176924 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.582226992 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.582356930 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.582494020 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.582511902 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.582521915 CET	49815	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.582529068 CET	443	49815	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.587703943 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.587750912 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.587817907 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.587954044 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.587968111 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.604901075 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.605104923 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.605166912 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.605262041 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.605304003 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.605330944 CET	49816	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.605348110 CET	443	49816	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.607903004 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.607916117 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.607985020 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.608138084 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.608149052 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.630372047 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.630798101 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.630850077 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.630922079 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.630935907 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.630947113 CET	49817	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.630951881 CET	443	49817	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.635613918 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.635627985 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.635689020 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.635823011 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.635834932 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.636506081 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.636749983 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.636812925 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.636850119 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.636850119 CET	49818	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.636868954 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.636889935 CET	443	49818	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.639189005 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.639197111 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.639266968 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.639410019 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.639420033 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.718518019 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.718575954 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.718627930 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.732350111 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.732357979 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.732366085 CET	49819	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.732372999 CET	443	49819	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.743849993 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.743899107 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:15.744149923 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.745909929 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:15.745929003 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.324265003 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.324887991 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.324933052 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.325541973 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.325556040 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.338340998 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.338815928 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.338830948 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.339402914 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.339407921 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.361428976 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.361830950 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.361843109 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.362425089 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.362430096 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.374691010 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.375276089 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.375307083 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.375945091 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.375956059 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.456079006 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.456207037 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.456361055 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.456428051 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.456428051 CET	49820	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.456455946 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.456485033 CET	443	49820	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.460006952 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.460030079 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.460165024 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.460347891 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.460361958 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.469526052 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.469583988 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.469691992 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.469770908 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.469782114 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.469793081 CET	49821	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.469796896 CET	443	49821	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.472448111 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.472532034 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.472621918 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.472771883 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.472810030 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.486347914 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.486748934 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.486785889 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.487180948 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.487193108 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.496381044 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.496680021 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.496748924 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.496997118 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.497006893 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.497011900 CET	49823	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.497014999 CET	443	49823	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.499708891 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.499726057 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.499919891 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.500225067 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.500236988 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.508090973 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.508259058 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.508325100 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.509469032 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.509469032 CET	49822	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.509488106 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.509509087 CET	443	49822	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.520229101 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.520256042 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.520342112 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.520473003 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.520487070 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.623632908 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.623697042 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.623809099 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.623967886 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.623980045 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.623992920 CET	49824	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.623997927 CET	443	49824	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.627162933 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.627187014 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:16.627264023 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.627444029 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:16.627454042 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.202775955 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.203334093 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.203361034 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.203892946 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.203901052 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.222131014 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.222693920 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.222714901 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.223182917 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.223191023 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.233479023 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.234297991 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.234313011 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.234811068 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.234816074 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.274682045 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.275295973 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.275327921 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.275785923 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.275791883 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.335902929 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.336091042 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.336148977 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.336414099 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.336431980 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.336445093 CET	49826	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.336452007 CET	443	49826	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.340835094 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.340866089 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.341054916 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.341226101 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.341239929 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.362535954 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.362538099 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.362672091 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.362731934 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.362864017 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.362875938 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.362884998 CET	49827	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.362890005 CET	443	49827	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.363111019 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.363121986 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.363671064 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.363675117 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.365719080 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.365772963 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.365953922 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.366096020 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.366126060 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.377572060 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.377736092 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.378489971 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.378489971 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.378489971 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.379955053 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.379981041 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.380095959 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.380218983 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.380234003 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.419338942 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.419491053 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.419548035 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.419575930 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.419590950 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.419604063 CET	49828	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.419610977 CET	443	49828	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.421899080 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.421935081 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.422153950 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.422267914 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.422292948 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.496639013 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.496814966 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.496860027 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.496887922 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.496897936 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.496906996 CET	49829	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.496912003 CET	443	49829	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.499135971 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.499161005 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.499258041 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.499413967 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.499428034 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:17.681185007 CET	49825	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:17.681196928 CET	443	49825	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.086735964 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.087302923 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.087321043 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.087862968 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.087867975 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.100956917 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.101334095 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.101361990 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.101984978 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.101990938 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.103741884 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.104242086 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.104273081 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.104621887 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.104633093 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.155145884 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.155505896 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.155536890 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.155953884 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.155965090 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.219023943 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.219135046 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.219223022 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.219481945 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.219481945 CET	49831	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.219497919 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.219506979 CET	443	49831	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.223264933 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.223304033 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.223388910 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.223690987 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.223718882 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.230545044 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.230773926 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.230834007 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.230943918 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.230958939 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.230968952 CET	49833	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.230974913 CET	443	49833	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.234019995 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.234035969 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.234121084 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.234321117 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.234330893 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.239438057 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.244390965 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.244415045 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.244889021 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.244894028 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.245767117 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.246002913 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.246290922 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.246340990 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.246340990 CET	49832	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.246375084 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.246403933 CET	443	49832	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.249412060 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.249448061 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.249655962 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.249803066 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.249829054 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.293121099 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.293272018 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.293344021 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.293390036 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.293390036 CET	49834	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.293409109 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.293431044 CET	443	49834	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.296128988 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.296139002 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.296200991 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.296382904 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.296392918 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.372859955 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.373150110 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.373199940 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.373260975 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.373277903 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.373290062 CET	49835	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.373296022 CET	443	49835	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.375808954 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.375833988 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.375929117 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.376059055 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.376072884 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.946587086 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.962182999 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.962256908 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.962898016 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.962918043 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.980458975 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.981277943 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.981312037 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:18.982006073 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:18.982017040 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.000624895 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.001303911 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.001317978 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.002238989 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.002243042 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.031167030 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.031805992 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.031820059 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.032852888 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.032855988 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.089797974 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.089932919 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.090028048 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.092902899 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.092933893 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.093005896 CET	49836	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.093023062 CET	443	49836	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.103956938 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.104012012 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.104099989 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.104259968 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.104291916 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.106237888 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.107386112 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.107408047 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.108396053 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.108401060 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.121553898 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.121769905 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.121839046 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.122092009 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.122107983 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.122143030 CET	49838	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.122154951 CET	443	49838	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.127404928 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.127424002 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.127684116 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.127945900 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.127959013 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.132180929 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.132280111 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.132390022 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.134764910 CET	49837	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.134769917 CET	443	49837	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.139276028 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.139302969 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.139417887 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.139524937 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.139549971 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.164144039 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.164287090 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.164361954 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.166785955 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.166790009 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.166811943 CET	49839	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.166815996 CET	443	49839	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.170608997 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.170618057 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.170677900 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.171062946 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.171072006 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.237396955 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.237629890 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.237673998 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.237766027 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.237775087 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.237787962 CET	49840	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.237791061 CET	443	49840	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.275991917 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.276042938 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.276124001 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.276648998 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.276681900 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.845168114 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.846944094 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.846982956 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.848862886 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.848875046 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.868737936 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.869512081 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.869541883 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.870476961 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.870696068 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.870707035 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.871397972 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.871418953 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.871862888 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.871869087 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.909301996 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.910551071 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.910566092 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.911506891 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.911510944 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.977389097 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.977693081 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.977761984 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.977895021 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.977895021 CET	49841	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.977931976 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.977961063 CET	443	49841	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.981358051 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.981368065 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.981440067 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.981590986 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.981597900 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.999644041 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.999690056 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:19.999742031 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.999963999 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.999963999 CET	49843	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:19.999982119 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.000005007 CET	443	49843	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.002228022 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.002291918 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.002345085 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.002630949 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.002656937 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.002685070 CET	49842	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.002692938 CET	443	49842	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.003395081 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.003463984 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.003537893 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.003812075 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.003859997 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.004954100 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.004988909 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.005060911 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.005163908 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.005178928 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.018033028 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.018531084 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.018572092 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.019026995 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.019054890 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.045907021 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.046078920 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.046144962 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.046217918 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.046224117 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.046233892 CET	49844	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.046236992 CET	443	49844	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.048520088 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.048551083 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.048623085 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.048734903 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.048759937 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.146601915 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.146825075 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.146924973 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.147936106 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.147937059 CET	49845	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.147964001 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.147989988 CET	443	49845	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.150414944 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.150441885 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.150510073 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.150691032 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.150703907 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.713308096 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.714051962 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.714068890 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.718590021 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.718595028 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.724797010 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.725809097 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.725836039 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.727018118 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.727030993 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.732553959 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.733386040 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.733448982 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.736614943 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.736630917 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.789768934 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.790335894 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.790365934 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.791201115 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.791209936 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.845326900 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.846033096 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.846268892 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.846321106 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.846321106 CET	49846	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.846328020 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.846333027 CET	443	49846	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.851011992 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.851048946 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.853672028 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.854948997 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.854986906 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.855005026 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.855011940 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.855084896 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.855211973 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.855211973 CET	49848	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.855232954 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.855243921 CET	443	49848	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862059116 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862093925 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862119913 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862129927 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862224102 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862227917 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862479925 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862495899 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862586021 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862586021 CET	49847	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.862622976 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.862648964 CET	443	49847	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.869419098 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.869445086 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.869534016 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.869710922 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.869725943 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.892103910 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.916101933 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:20.916125059 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.938158989 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.944633961 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:20.945971966 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.075026035 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.075042009 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.201903105 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.202088118 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.202361107 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.274857998 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.274857998 CET	49849	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.274904013 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.274930954 CET	443	49849	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.352283955 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.352310896 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.352344990 CET	49850	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.352358103 CET	443	49850	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.377846003 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.377873898 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.378731966 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.380507946 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.380523920 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.380866051 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.381628036 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.381643057 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.381804943 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.381823063 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.490072966 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:55:21.490246058 CET	443	49735	142.250.184.206	192.168.2.4
Oct 30, 2024 01:55:21.490310907 CET	49735	443	192.168.2.4	142.250.184.206
Oct 30, 2024 01:55:21.580530882 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.581367016 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.581381083 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.582254887 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.582259893 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.584204912 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.585354090 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.585386038 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.586204052 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.586219072 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.615073919 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.615968943 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.615995884 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.616494894 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.616501093 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.707734108 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.708453894 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.708556890 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.708879948 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.708879948 CET	49852	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.708899975 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.708909035 CET	443	49852	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.712084055 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.712109089 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.712178946 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.712423086 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.712441921 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.713490009 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.713574886 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.713646889 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.713716030 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.713732004 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.713746071 CET	49851	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.713758945 CET	443	49851	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.715948105 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.715976000 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.716056108 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.716214895 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.716228962 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.746874094 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.746992111 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.747039080 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.747076988 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.747076988 CET	49853	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.747087955 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.747097969 CET	443	49853	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.749181986 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.749193907 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:21.749249935 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.749406099 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:21.749413967 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.079346895 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.079391956 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:22.079482079 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.079767942 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.079788923 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:22.099802017 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.102024078 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.102052927 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.103955030 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.103960991 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.125129938 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.125511885 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.125534058 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.126332045 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.126337051 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.211076975 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 01:55:22.218842983 CET	80	49724	93.184.221.240	192.168.2.4
Oct 30, 2024 01:55:22.218904972 CET	49724	80	192.168.2.4	93.184.221.240
Oct 30, 2024 01:55:22.229527950 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.229578972 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.229624987 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.255582094 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.255719900 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.255820990 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.337740898 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.337755919 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.337770939 CET	49855	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.337778091 CET	443	49855	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.340409994 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.340435028 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.340472937 CET	49854	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.340481043 CET	443	49854	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.379204988 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.379236937 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.379304886 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.382128954 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.382174015 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.382240057 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.382637024 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.382653952 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.382900953 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.382915974 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.568201065 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.569581985 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.569597006 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.570470095 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.570475101 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.572918892 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.573507071 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.573530912 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.578627110 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.578634024 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.700751066 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.700804949 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.700884104 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.704798937 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.705622911 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.705831051 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.706115961 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.737447977 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.737447977 CET	49857	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.737466097 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.737474918 CET	443	49857	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.740098953 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.740098953 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.740114927 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.740125895 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.740859985 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.740859985 CET	49856	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.740871906 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.740883112 CET	443	49856	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.861179113 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.861222982 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.861340046 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.872657061 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.872679949 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.875794888 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.875808001 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.875833035 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.875894070 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.875933886 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.875965118 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.875976086 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.876193047 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.882297993 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.882297993 CET	49858	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.882308960 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.882319927 CET	443	49858	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.914649963 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.914685011 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.918158054 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.938641071 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:22.938657045 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:22.982670069 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:22.983294010 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.983329058 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:22.984200954 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:22.984309912 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.985027075 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:22.985086918 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:23.025243044 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:23.025254011 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:23.075186968 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:23.292087078 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.292676926 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.292723894 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.293317080 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.293332100 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.310184002 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.310633898 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.310647964 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.310988903 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.311000109 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.422923088 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.423073053 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.423199892 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.423475981 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.423475981 CET	49860	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.423517942 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.423554897 CET	443	49860	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.430649042 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.430675983 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.431025028 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.443588972 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.444010973 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.444051981 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.449347973 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.449362040 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.456552029 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.456598997 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.456614017 CET	49861	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.456619978 CET	443	49861	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.469279051 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.469341040 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.469419003 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.469769001 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.469801903 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.594769001 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.595241070 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.595247984 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.595705986 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.595711946 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.617660046 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.618165016 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.618227959 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.618618965 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.618632078 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.671844959 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.672341108 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.672399998 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.672895908 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.672909021 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.722908974 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.723766088 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.723819971 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.723865986 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.723879099 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.723889112 CET	49863	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.723895073 CET	443	49863	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.729387045 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.729413033 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.729490042 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.729938030 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.729950905 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.747847080 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.747909069 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.747967005 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.748115063 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.748115063 CET	49862	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.748164892 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.748189926 CET	443	49862	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.750752926 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.750798941 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.750876904 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.751005888 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.751034975 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.875077963 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.875508070 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.875576019 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.875684977 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.875684977 CET	49864	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.875720024 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.875747919 CET	443	49864	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.878815889 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.878860950 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.878921032 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.879168987 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:23.879183054 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:23.977376938 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:23.977416992 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:23.977488041 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:23.977874994 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:23.977890015 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.183140993 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.183840990 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.183852911 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.184279919 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.184286118 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.221914053 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.222311020 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.222356081 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.222713947 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.222726107 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.314759016 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.314966917 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.315143108 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.315198898 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.315206051 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.315227032 CET	49865	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.315232992 CET	443	49865	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.319226980 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.319256067 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.319329023 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.319562912 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.319574118 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.450254917 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.450364113 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.450741053 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.450742006 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.450900078 CET	49866	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.450922966 CET	443	49866	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.453564882 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.453577042 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.453671932 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.453833103 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.453843117 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.457649946 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.458026886 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.458039999 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.458492994 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.458498955 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.503120899 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.503969908 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.503969908 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.504010916 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.504048109 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.587750912 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.587949991 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.588850975 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.588891029 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.588891029 CET	49867	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.588896990 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.588905096 CET	443	49867	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.591442108 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.591525078 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.591665983 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.591758966 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.591794968 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.608103037 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.608417988 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.608434916 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.608782053 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.608787060 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.635822058 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.635998964 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.636209011 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.636257887 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.636257887 CET	49868	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.636286974 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.636317015 CET	443	49868	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.638128042 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.638137102 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.638231993 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.638314962 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.638324022 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.737231016 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.737407923 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.737972975 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.738017082 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.738017082 CET	49869	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.738029957 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.738038063 CET	443	49869	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.740708113 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.740776062 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.740896940 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.742716074 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:24.742750883 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:24.825900078 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.826320887 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.826339960 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.826673031 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.826800108 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.827290058 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.827471018 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.827657938 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.827657938 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.827672005 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.827714920 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.827776909 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.869684935 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:24.869693041 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:24.914529085 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:25.036309004 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.037431955 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.037431955 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.037461042 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.037467003 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.106329918 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:25.149287939 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:25.149307966 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:25.149785995 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:25.149836063 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:25.149949074 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:25.149954081 CET	443	49870	142.250.181.238	192.168.2.4
Oct 30, 2024 01:55:25.153359890 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:25.153405905 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:25.153438091 CET	49870	443	192.168.2.4	142.250.181.238
Oct 30, 2024 01:55:25.153491020 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:25.153748989 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:25.153770924 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:25.164592981 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.164971113 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.165081024 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.165115118 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.165115118 CET	49871	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.165128946 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.165138006 CET	443	49871	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.168081045 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.168138027 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.168279886 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.168401957 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.168432951 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.191194057 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.192029953 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.192029953 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.192045927 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.192054033 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.322999001 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.323178053 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.323268890 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.323268890 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.323288918 CET	49872	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.323292971 CET	443	49872	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.325956106 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.325984955 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.326067924 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.326231003 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.326244116 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.386293888 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.387236118 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.387237072 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.387248039 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.387254953 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.388350964 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.388750076 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.388804913 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.389107943 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.389115095 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.485760927 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.486344099 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.486381054 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.486823082 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.486834049 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.518446922 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.519037008 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.519095898 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.519121885 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.519126892 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.519151926 CET	49874	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.519155979 CET	443	49874	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.522068977 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.522124052 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.522212982 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.522459030 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.522486925 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.524791956 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.524849892 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.524905920 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.524992943 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.525023937 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.525052071 CET	49873	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.525068045 CET	443	49873	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.527070045 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.527107954 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.527220964 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.527406931 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.527420998 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.617580891 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.617819071 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.617913008 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.617993116 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.618030071 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.618134975 CET	49875	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.618151903 CET	443	49875	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.620137930 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.620157003 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.620313883 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.620455027 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.620462894 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.933547974 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.934164047 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.934209108 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:25.934650898 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:25.934665918 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.047717094 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.048162937 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.048187017 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.048665047 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.048670053 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.048760891 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.049066067 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.049077034 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.049429893 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.049485922 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.050097942 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.050146103 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.050318956 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.050379038 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.050463915 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.050471067 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.069196939 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.069328070 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.069386959 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.069614887 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.069642067 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.069669008 CET	49877	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.069683075 CET	443	49877	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.072689056 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.072715044 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.072768927 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.072925091 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.072937965 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.099961042 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.176629066 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.176872015 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.177067041 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.177099943 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.177114964 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.177181959 CET	49878	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.177187920 CET	443	49878	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.180670023 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.180692911 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.180805922 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.180958986 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.180964947 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.266633034 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.267255068 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.267270088 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.267884016 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.267888069 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.270706892 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.271080971 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.271126032 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.271611929 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.271625996 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.335429907 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.335468054 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.335630894 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.335652113 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.336836100 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.336872101 CET	443	49876	142.250.185.142	192.168.2.4
Oct 30, 2024 01:55:26.336915016 CET	49876	443	192.168.2.4	142.250.185.142
Oct 30, 2024 01:55:26.356287956 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.356816053 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.356828928 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.357292891 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.357297897 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.398333073 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.398401976 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.398459911 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.398678064 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.398695946 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.398713112 CET	49880	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.398720026 CET	443	49880	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.401691914 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.401863098 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.401865959 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.401887894 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.401948929 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.401998997 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.402026892 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.402077913 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.402106047 CET	49879	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.402122974 CET	443	49879	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.402156115 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.402174950 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.404462099 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.404484987 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.404552937 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.404680014 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.404695034 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.489274025 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.489365101 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.489631891 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.489631891 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.489850044 CET	49881	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.489859104 CET	443	49881	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.492602110 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.492633104 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.492897034 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.492985964 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.493005991 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.803334951 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.804929972 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.804949045 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.809458971 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.809463978 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.918288946 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.918859005 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.918879032 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.919392109 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.919398069 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.935887098 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.936256886 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.936361074 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.936361074 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.936450005 CET	49882	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.936460972 CET	443	49882	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.940694094 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.940747023 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:26.940953016 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.941039085 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:26.941059113 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.056967020 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.057398081 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.057605982 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.057605982 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.057823896 CET	49883	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.057831049 CET	443	49883	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.060053110 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.060079098 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.060242891 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.060308933 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.060317039 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.129884958 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.130736113 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.130736113 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.130753994 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.130762100 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.144881964 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.145493984 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.145519018 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.146014929 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.146022081 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.212236881 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.212908030 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.212929010 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.213366985 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.213372946 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.257786036 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.257878065 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.257946014 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.258090973 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.258090973 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.258143902 CET	49884	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.258162022 CET	443	49884	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.261017084 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.261095047 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.261179924 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.261399984 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.261421919 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.273240089 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.273401022 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.273569107 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.273569107 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.273617983 CET	49885	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.273633003 CET	443	49885	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.275748968 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.275779009 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.275924921 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.275986910 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.275996923 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.342710018 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.342761040 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.342953920 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.342953920 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.342987061 CET	49886	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.342997074 CET	443	49886	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.345217943 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.345274925 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.345406055 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.345520973 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.345546961 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.685822964 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.686413050 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.686486959 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.687064886 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.687083006 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.822102070 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.822119951 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.822191000 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.822205067 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.822268963 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.822585106 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.822585106 CET	49887	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.822621107 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.822644949 CET	443	49887	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.825664997 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.825743914 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.825833082 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.825983047 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.826020002 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.832354069 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.832832098 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.832863092 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.833714962 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.833720922 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967722893 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967746019 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967807055 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.967818975 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967861891 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.967866898 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967880964 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.967920065 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.968146086 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.968156099 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.968166113 CET	49888	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.968170881 CET	443	49888	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.971695900 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.971797943 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.971872091 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.972033978 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.972069025 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.996248007 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.996699095 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.996761084 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:27.997170925 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:27.997186899 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.029119015 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.029489994 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.029504061 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.029872894 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.029876947 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.075892925 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.076262951 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.076343060 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.076716900 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.076730967 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.126377106 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.126430035 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.126530886 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.126554966 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.126687050 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.126817942 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.126872063 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.126912117 CET	49889	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.126929045 CET	443	49889	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.130443096 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.130465984 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.130526066 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.130707979 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.130719900 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.168374062 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.168525934 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.168596983 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.168651104 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.168658018 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.168663025 CET	49890	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.168667078 CET	443	49890	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.170938015 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.170967102 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.171051979 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.171161890 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.171180964 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.207017899 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.207068920 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.207360029 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.207550049 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.207551003 CET	49891	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.207582951 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.207612038 CET	443	49891	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.214960098 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.215007067 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.215101957 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.215279102 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.215297937 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.595176935 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.596322060 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.596322060 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.596350908 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.596362114 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.716403961 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.717012882 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.717062950 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.717570066 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.717597008 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.738310099 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.738677025 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.738790989 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.738790989 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.738847971 CET	49892	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.738859892 CET	443	49892	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.743863106 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.743872881 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.744025946 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.744152069 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.744162083 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.851526976 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.851591110 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.851738930 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.853024006 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.853024006 CET	49893	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.853058100 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.853082895 CET	443	49893	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.861510992 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.861545086 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.861713886 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.861860037 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.861881971 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.893789053 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.894799948 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.894799948 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.894820929 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.894829035 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.902286053 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.903045893 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.903045893 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.903085947 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.903110027 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.930815935 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.931298018 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.931325912 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:28.931842089 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:28.931847095 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.025835037 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.026000023 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.026194096 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.026194096 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.026223898 CET	49894	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.026237011 CET	443	49894	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.029218912 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.029242992 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.029393911 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.029565096 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.029577017 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.032432079 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.032567978 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.032670975 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.032670975 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.032825947 CET	49895	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.032829046 CET	443	49895	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.034550905 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.034574032 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.034866095 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.034866095 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.034892082 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.062664032 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.062711000 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.062939882 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.062939882 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.064901114 CET	49896	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.064909935 CET	443	49896	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.064914942 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.065016985 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.065217972 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.065300941 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.065326929 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.487238884 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.487905025 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.487926006 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.488405943 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.488414049 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.583625078 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.584261894 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.584279060 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.585165977 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.585170984 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.621383905 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.621454000 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.621506929 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.622061014 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.622071028 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.622081995 CET	49897	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.622087002 CET	443	49897	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.625298977 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.625328064 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.625484943 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.625716925 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.625725985 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.716420889 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.716528893 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.716598034 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.716969967 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.717000008 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.717015982 CET	49898	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.717024088 CET	443	49898	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.720235109 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.720300913 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.720446110 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.720650911 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.720685005 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.761828899 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.762286901 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.762307882 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.762834072 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.762839079 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.776439905 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.777018070 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.777050018 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.777621984 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.777628899 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.795893908 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.796344042 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.796396971 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.796817064 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.796829939 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.891859055 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.892004967 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.892069101 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.892755985 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.892765045 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.892786026 CET	49899	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.892791033 CET	443	49899	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.896071911 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.896083117 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.896280050 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.896742105 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.896753073 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.907665014 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.907727003 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.907824993 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.907872915 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.907921076 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.908071995 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.908085108 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.908102036 CET	49900	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.908107996 CET	443	49900	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.917572021 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.917622089 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.917921066 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.918137074 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.918157101 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.925431013 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.925570011 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.925645113 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.925775051 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.925806046 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.925854921 CET	49901	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.925869942 CET	443	49901	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.928558111 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.928579092 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:29.928764105 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.929003954 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:29.929011106 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.369501114 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.370062113 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.370071888 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.370660067 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.370665073 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.453401089 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.454034090 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.454070091 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.454505920 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.454516888 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.500945091 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.501207113 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.501245975 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.501251936 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.501269102 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.501321077 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.501351118 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.501351118 CET	49902	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.501362085 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.501369953 CET	443	49902	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.504681110 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.504709959 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.504776955 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.504919052 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.504937887 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.585215092 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.585277081 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.585355997 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.585669994 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.585678101 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.585692883 CET	49903	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.585699081 CET	443	49903	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.590677023 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.590718985 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.590800047 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.591154099 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.591185093 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.639893055 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.640475035 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.640500069 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.641114950 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.641120911 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.659727097 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.660195112 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.660218954 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.660660982 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.660666943 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.676450014 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.676870108 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.676884890 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.677294016 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.677298069 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.775341988 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.775391102 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.775542974 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.775753975 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.775753975 CET	49904	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.775768042 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.775778055 CET	443	49904	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.779012918 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.779032946 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.779089928 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.779298067 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.779315948 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.789437056 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.789582968 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.789664984 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.789705038 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.789726973 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.789738894 CET	49905	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.789747000 CET	443	49905	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.792015076 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.792056084 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.792130947 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.792282104 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.792300940 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.806782961 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.807074070 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.807111025 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.807122946 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.807171106 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.807213068 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.807219028 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.807229042 CET	49906	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.807231903 CET	443	49906	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.809448957 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.809468031 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:30.809757948 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.809909105 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:30.809923887 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.249737978 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.250610113 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.250641108 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.251178026 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.251193047 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.325777054 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.326440096 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.326477051 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.326965094 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.326973915 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.381494999 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.381593943 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.381645918 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.381896019 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.381918907 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.381931067 CET	49907	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.381937981 CET	443	49907	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.385689974 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.385760069 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.385907888 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.386142015 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.386168003 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.461555958 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.461692095 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.461834908 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.461992979 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.461992979 CET	49908	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.462025881 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.462057114 CET	443	49908	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.464962959 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.464978933 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.465111017 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.465296984 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.465306997 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.520745993 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.521713018 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.521713018 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.521728992 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.521742105 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.554079056 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.554837942 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.554837942 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.554857969 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.554866076 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.560082912 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.560554981 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.560595036 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.560760975 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.560774088 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.685159922 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.685230017 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.685563087 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.685563087 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.685667992 CET	49911	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.685686111 CET	443	49911	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.688566923 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.688631058 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.688882113 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.688965082 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.688983917 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.690042973 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.690382004 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.690552950 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.690552950 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.690566063 CET	49909	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.690572023 CET	443	49909	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.692517042 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.692528009 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.692610979 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.692747116 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.692758083 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.693275928 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.693334103 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.693459034 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.693499088 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.693588018 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.693588018 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.693942070 CET	49910	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.693962097 CET	443	49910	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.695727110 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.695771933 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:31.695990086 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.695990086 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:31.696054935 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.105353117 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.105957031 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.106054068 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.106434107 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.106450081 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.210769892 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.211348057 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.211365938 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.211872101 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.211877108 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.235687971 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.235721111 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.235770941 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.236002922 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.236052036 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.236052036 CET	49912	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.236097097 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.236120939 CET	443	49912	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.239233971 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.239279032 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.239583969 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.239583969 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.239625931 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.343220949 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.343293905 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.343403101 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.346349955 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.346349955 CET	49913	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.346358061 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.346365929 CET	443	49913	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.354787111 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.354799986 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.355178118 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.355178118 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.355199099 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.429277897 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.429560900 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.431094885 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.431133032 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.432284117 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.432296038 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.432940006 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.432955027 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.433828115 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.433831930 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.449137926 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.449774981 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.449789047 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.450870991 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.450874090 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.559909105 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.559974909 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.560266018 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.560484886 CET	49914	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.560518980 CET	443	49914	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.566360950 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.566392899 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.566461086 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.566803932 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.566822052 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.573548079 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.573719025 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.573875904 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.574163914 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.574172974 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.574182987 CET	49915	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.574187040 CET	443	49915	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.577773094 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.577801943 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.577967882 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.578119040 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.578134060 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582293034 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582350969 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582407951 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.582448959 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582483053 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582530022 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.582786083 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.582818985 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.582845926 CET	49916	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.582860947 CET	443	49916	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.591497898 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.591541052 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.591620922 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.591909885 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.591938019 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.968878984 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.969913006 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.969938040 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.970984936 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:32.970992088 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:32.986572027 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:32.986663103 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:32.986783028 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:33.098527908 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.098589897 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.098798037 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.099004984 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.099023104 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.099045038 CET	49917	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.099052906 CET	443	49917	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.099755049 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.102415085 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.102462053 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.103538990 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.103552103 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.108362913 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.108407974 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.108477116 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.108720064 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.108736038 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.230431080 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.230601072 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.230685949 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.231013060 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.231013060 CET	49918	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.231036901 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.231059074 CET	443	49918	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.234648943 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.234703064 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.234932899 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.235208988 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.235238075 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.295363903 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.295798063 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.295830011 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.296261072 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.296267986 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.307715893 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.308154106 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.308185101 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.308573961 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.308587074 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.342047930 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.342462063 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.342492104 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.342849016 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.342859983 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.423775911 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.423799038 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.423842907 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.423852921 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.423883915 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.424232960 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.424232960 CET	49920	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.424249887 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.424263000 CET	443	49920	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.427362919 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.427403927 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.427479029 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.427690029 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.427721977 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.440062046 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.440201998 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.440260887 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.440294981 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.440313101 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.440349102 CET	49919	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.440356016 CET	443	49919	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.442791939 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.442819118 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.442878008 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.443039894 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.443053961 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.474796057 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.474988937 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.475044966 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.475097895 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.475097895 CET	49921	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.475120068 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.475131989 CET	443	49921	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.477438927 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.477507114 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.477652073 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.477792025 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.477826118 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.654114962 CET	49859	443	192.168.2.4	142.250.186.36
Oct 30, 2024 01:55:33.654131889 CET	443	49859	142.250.186.36	192.168.2.4
Oct 30, 2024 01:55:33.848875999 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.850631952 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.850662947 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.851588011 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.851596117 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.978677034 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.980273962 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.980292082 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.981133938 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.981384039 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.981528997 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.982148886 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.982155085 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.982994080 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.983006954 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.983019114 CET	49922	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.983025074 CET	443	49922	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.988770962 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.988795042 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:33.988971949 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.989607096 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:33.989619970 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.109668016 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.109812975 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.109958887 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.110188961 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.110205889 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.110217094 CET	49923	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.110223055 CET	443	49923	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.115360022 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.115387917 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.115490913 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.116139889 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.116154909 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.158900976 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.159576893 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.159621000 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.160418034 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.160433054 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.201998949 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.202590942 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.202609062 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.203214884 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.203221083 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.210414886 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.211107016 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.211124897 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.212058067 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.212061882 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.290455103 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.290499926 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.290545940 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.290582895 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.290635109 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.308909893 CET	49924	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.308938980 CET	443	49924	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.319370031 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.319411993 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.319534063 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.322474957 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.322489023 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.337044954 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.337124109 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.337354898 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.339159966 CET	49925	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.339178085 CET	443	49925	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.339823961 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.340007067 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.340255022 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.349237919 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.349237919 CET	49926	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.349261045 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.349284887 CET	443	49926	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.355027914 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.355091095 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.355169058 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.356416941 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.356456041 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.356729031 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.356966019 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.356981039 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.357042074 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.357064009 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.720303059 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.720892906 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.720911026 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.721529961 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.721534014 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.851043940 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.851121902 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.851188898 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.851411104 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.851428986 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.851438999 CET	49927	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.851454020 CET	443	49927	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.853622913 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.854450941 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.854516029 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.855170965 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.855221987 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.855237007 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.855252981 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.855351925 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.855505943 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.855540037 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.984812021 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.984847069 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.984889984 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.984911919 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.984970093 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.985249043 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.985261917 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.985277891 CET	49928	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.985282898 CET	443	49928	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.989135027 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.989183903 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:34.989263058 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.989834070 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:34.989877939 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.089050055 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.095520020 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.095535994 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.096534967 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.096828938 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.096833944 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.099266052 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.099291086 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.103456974 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.103463888 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.224195957 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.224349022 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.224430084 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.225002050 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.230191946 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.230381966 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.230416059 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.230439901 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.230475903 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.276483059 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.305102110 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.305116892 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.305129051 CET	49930	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.305134058 CET	443	49930	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.307641029 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.307648897 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.308989048 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.308995008 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.310096979 CET	49931	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.310111046 CET	443	49931	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.437864065 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.437971115 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.438091040 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.477448940 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.477483988 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.477545023 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.478931904 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.478955984 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.479027033 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.483534098 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.483545065 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.483561039 CET	49929	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.483566046 CET	443	49929	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.500899076 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.500915051 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.503659010 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.503671885 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.608239889 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.618449926 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.618490934 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.619220972 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.619234085 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.639873028 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.639931917 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.640011072 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.682719946 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.682755947 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.706736088 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.748887062 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.748912096 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.750780106 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.750787973 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.759846926 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.759874105 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.759918928 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.759957075 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.760009050 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.760664940 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.760694027 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.760720015 CET	49932	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.760734081 CET	443	49932	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.784157991 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.784181118 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.784379959 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.785868883 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.785885096 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.877705097 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.877777100 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.877994061 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.878356934 CET	49933	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.878371000 CET	443	49933	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.884999037 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.885014057 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:35.885075092 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.885950089 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:35.885961056 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.234931946 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.235500097 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.235518932 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.235785961 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.236141920 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.236166000 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.236222982 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.236228943 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.236711979 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.236717939 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.363485098 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.363584995 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.363645077 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.363854885 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.363874912 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.363895893 CET	49936	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.363903046 CET	443	49936	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.364917040 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.365124941 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.365163088 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.365164042 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.365216970 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.365467072 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.365480900 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.365499020 CET	49935	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.365504980 CET	443	49935	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.367597103 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.367619991 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.367897034 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.368088961 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.368103027 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.368340969 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.368383884 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.368577003 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.368685961 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.368714094 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.439213037 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.439780951 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.439860106 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.440373898 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.440387964 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.560157061 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.560847044 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.560870886 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.561352015 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.561358929 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.569706917 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.569740057 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.569798946 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.569828033 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.569880962 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.570146084 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.570146084 CET	49937	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.570179939 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.570205927 CET	443	49937	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.573534966 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.573574066 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.573719025 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.573877096 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.573892117 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.618061066 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.619494915 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.619540930 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.620872974 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.620884895 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.697907925 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.697958946 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.698064089 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.698347092 CET	49938	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.698354959 CET	443	49938	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.702018023 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.702044964 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.702888966 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.703129053 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.703142881 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.754286051 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.754374027 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.754503965 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.754611015 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.754611969 CET	49939	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.754653931 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.754687071 CET	443	49939	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.757219076 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.757236958 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:36.757297039 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.757723093 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:36.757731915 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.109512091 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.110112906 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.110127926 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.110783100 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.110786915 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.166515112 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.167246103 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.167279959 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.167936087 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.167948008 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.241153002 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.241224051 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.241396904 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.241868973 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.241889954 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.241903067 CET	49940	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.241916895 CET	443	49940	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.245764971 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.245794058 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.245912075 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.246139050 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.246154070 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.295516014 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.295537949 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.295569897 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.295617104 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.295661926 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.295938015 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.295974016 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.296003103 CET	49941	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.296017885 CET	443	49941	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.298872948 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.298892975 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.299138069 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.299284935 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.299293041 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.317846060 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.318597078 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.318624973 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.319084883 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.319092035 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.435662031 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.436288118 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.436306000 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.436736107 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.436741114 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.451092005 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.451225996 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.451282024 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.451544046 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.451559067 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.451579094 CET	49942	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.451590061 CET	443	49942	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.455317974 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.455346107 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.455406904 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.455542088 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.455555916 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.490799904 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.491693020 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.491693020 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.491717100 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.491727114 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.567751884 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.567779064 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.567826986 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.567866087 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.567934036 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.568212986 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.568212986 CET	49944	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.568228960 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.568236113 CET	443	49944	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.571433067 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.571510077 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.571719885 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.571719885 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.571796894 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.622981071 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.623311043 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.623771906 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.623771906 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.623837948 CET	49945	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.623846054 CET	443	49945	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.626209021 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.626236916 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:37.626305103 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.626456022 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:37.626475096 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.018771887 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.019335985 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.019346952 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.019891024 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.019902945 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.022566080 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.022994041 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.023009062 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.023441076 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.023446083 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.150460958 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.150752068 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.150859118 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.150877953 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.150877953 CET	49947	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.150890112 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.150892973 CET	443	49947	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.154975891 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.155024052 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.155097961 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.155222893 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.155325890 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.155425072 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.162055016 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.162090063 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.162125111 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.162125111 CET	49946	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.162139893 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.162149906 CET	443	49946	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.165023088 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.165057898 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.169218063 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.169218063 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.169254065 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.210246086 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.216680050 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.216680050 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.216702938 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.216707945 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.302364111 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.302843094 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.302917004 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.305201054 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.305216074 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.345832109 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.345880985 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.345968962 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.346025944 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.346354961 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.346354961 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.346371889 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.349231005 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.349292994 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.349433899 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.349605083 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.349626064 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.363955975 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.364428997 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.364449024 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.365163088 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.365166903 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.431716919 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.431778908 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.431860924 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.432075977 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.432075977 CET	49949	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.432111025 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.432137012 CET	443	49949	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.435024023 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.435051918 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.435123920 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.435264111 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.435278893 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.495100975 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.495140076 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.495191097 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.495192051 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.495260000 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.495506048 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.495506048 CET	49950	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.495517969 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.495524883 CET	443	49950	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.497664928 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.497726917 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.497811079 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.498099089 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.498130083 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.649357080 CET	49948	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.649377108 CET	443	49948	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.917432070 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.917736053 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.917969942 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.918006897 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.918171883 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.918210030 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.918639898 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.918648958 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:38.918693066 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:38.918708086 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.049396992 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.049488068 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.049546003 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.049725056 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.049725056 CET	49952	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.049763918 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.049789906 CET	443	49952	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.052664042 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.052705050 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.052913904 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.053147078 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.053158998 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.074031115 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.074106932 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.074173927 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.074290037 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.074290037 CET	49951	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.074331045 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.074358940 CET	443	49951	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.076456070 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.076541901 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.076611996 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.076770067 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.076798916 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.080060005 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.080409050 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.080429077 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.080831051 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.080837011 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.162998915 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.163366079 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.163412094 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.163733959 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.163746119 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.210395098 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.210549116 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.210617065 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.210665941 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.210695028 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.210721970 CET	49953	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.210736036 CET	443	49953	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.213505030 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.213534117 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.213603020 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.213749886 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.213763952 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.228773117 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.229360104 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.229413033 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.229974985 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.229989052 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.295495987 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.295562983 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.295757055 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.295798063 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.295824051 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.295847893 CET	49954	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.295861959 CET	443	49954	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.298465967 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.298525095 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.298602104 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.298752069 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.298779964 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.356837034 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.357142925 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.357206106 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.357278109 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.357278109 CET	49955	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.357331038 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.357368946 CET	443	49955	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.359689951 CET	49960	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.359721899 CET	443	49960	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.359829903 CET	49960	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.359908104 CET	49960	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.359921932 CET	443	49960	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.795389891 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.796421051 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.796421051 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.796448946 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.796458006 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.805135965 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.805773973 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.805773973 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.805828094 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.805855036 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.929114103 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.929173946 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.929251909 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.929589987 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.929589987 CET	49956	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.929603100 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.929610968 CET	443	49956	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.932782888 CET	49961	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.932815075 CET	443	49961	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.932969093 CET	49961	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.933166027 CET	49961	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.933180094 CET	443	49961	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.935707092 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.935762882 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.935852051 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.936059952 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.936059952 CET	49957	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.936100960 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.936129093 CET	443	49957	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.938221931 CET	49962	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.938252926 CET	443	49962	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.938381910 CET	49962	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.938569069 CET	49962	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.938584089 CET	443	49962	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.962153912 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.963069916 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.963089943 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:39.963206053 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:39.963211060 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.031018019 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.032049894 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.032049894 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.032073975 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.032085896 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095134020 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095205069 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095283985 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.095297098 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095356941 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095467091 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.095508099 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.095508099 CET	49958	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.095520973 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.095527887 CET	443	49958	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.097224951 CET	443	49960	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.097814083 CET	49960	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.097832918 CET	443	49960	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.098227978 CET	49960	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.098232985 CET	443	49960	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.099006891 CET	49963	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.099039078 CET	443	49963	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.099184036 CET	49963	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.099334002 CET	49963	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.099343061 CET	443	49963	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.159337044 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.159524918 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.159684896 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.159704924 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.159704924 CET	49959	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.159717083 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.159728050 CET	443	49959	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.163036108 CET	49964	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.163065910 CET	443	49964	13.107.246.60	192.168.2.4
Oct 30, 2024 01:55:40.163196087 CET	49964	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.163332939 CET	49964	443	192.168.2.4	13.107.246.60
Oct 30, 2024 01:55:40.163345098 CET	443	49964	13.107.246.60	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 01:54:16.883088112 CET	53	55798	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:16.892188072 CET	53	57112	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:18.242837906 CET	53	53036	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:18.651871920 CET	59475	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:18.652019024 CET	57302	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:18.659378052 CET	53	59475	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:18.659760952 CET	53	57302	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:21.683518887 CET	63628	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:21.683672905 CET	60813	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:21.690938950 CET	53	60813	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:21.691143036 CET	53	63628	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:29.001913071 CET	53	55487	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:33.643244982 CET	54423	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:33.643737078 CET	55761	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:33.650958061 CET	53	54423	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:33.651004076 CET	53	55761	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:33.790657997 CET	138	138	192.168.2.4	192.168.2.255
Oct 30, 2024 01:54:35.201139927 CET	64731	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:35.202816010 CET	54747	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:35.208334923 CET	53	64731	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:35.210078001 CET	53	54747	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:35.456899881 CET	53	61271	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:36.320887089 CET	53	55925	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:37.858133078 CET	62836	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:37.858675003 CET	64832	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:37.867779970 CET	53	62836	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:37.868076086 CET	53	64832	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:39.567137957 CET	58796	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:39.570182085 CET	50518	53	192.168.2.4	1.1.1.1
Oct 30, 2024 01:54:39.574290991 CET	53	58796	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:39.577527046 CET	53	50518	1.1.1.1	192.168.2.4
Oct 30, 2024 01:54:54.496431112 CET	53	60973	1.1.1.1	192.168.2.4
Oct 30, 2024 01:55:16.815781116 CET	53	59079	1.1.1.1	192.168.2.4
Oct 30, 2024 01:55:16.985444069 CET	53	56541	1.1.1.1	192.168.2.4
Oct 30, 2024 01:55:35.299673080 CET	53	49258	1.1.1.1	192.168.2.4
Oct 30, 2024 01:55:36.621237993 CET	53	57912	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 01:54:18.651871920 CET	192.168.2.4	1.1.1.1	0xd42	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:18.652019024 CET	192.168.2.4	1.1.1.1	0xed8b	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Oct 30, 2024 01:54:21.683518887 CET	192.168.2.4	1.1.1.1	0x9a86	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:21.683672905 CET	192.168.2.4	1.1.1.1	0x55fc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 01:54:33.643244982 CET	192.168.2.4	1.1.1.1	0x5b74	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:33.643737078 CET	192.168.2.4	1.1.1.1	0x3b2d	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 30, 2024 01:54:35.201139927 CET	192.168.2.4	1.1.1.1	0x5bdc	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:35.202816010 CET	192.168.2.4	1.1.1.1	0x7b80	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 01:54:37.858133078 CET	192.168.2.4	1.1.1.1	0x98bf	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:37.858675003 CET	192.168.2.4	1.1.1.1	0x83c1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 30, 2024 01:54:39.567137957 CET	192.168.2.4	1.1.1.1	0x9abd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:39.570182085 CET	192.168.2.4	1.1.1.1	0xaf07	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 01:54:18.659378052 CET	1.1.1.1	192.168.2.4	0xd42	No error (0)	drive.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:21.690938950 CET	1.1.1.1	192.168.2.4	0x55fc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 01:54:21.691143036 CET	1.1.1.1	192.168.2.4	0x9a86	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:31.025587082 CET	1.1.1.1	192.168.2.4	0x6762	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:31.025587082 CET	1.1.1.1	192.168.2.4	0x6762	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:33.261801958 CET	1.1.1.1	192.168.2.4	0x5d74	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:54:33.261801958 CET	1.1.1.1	192.168.2.4	0x5d74	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:33.650958061 CET	1.1.1.1	192.168.2.4	0x5b74	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:54:33.650958061 CET	1.1.1.1	192.168.2.4	0x5b74	No error (0)	www3.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:33.651004076 CET	1.1.1.1	192.168.2.4	0x3b2d	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:54:35.208334923 CET	1.1.1.1	192.168.2.4	0x5bdc	No error (0)	play.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:37.867779970 CET	1.1.1.1	192.168.2.4	0x98bf	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:39.574290991 CET	1.1.1.1	192.168.2.4	0x9abd	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:54:39.577527046 CET	1.1.1.1	192.168.2.4	0xaf07	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 01:54:46.000749111 CET	1.1.1.1	192.168.2.4	0x748e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:54:46.000749111 CET	1.1.1.1	192.168.2.4	0x748e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:55:09.591478109 CET	1.1.1.1	192.168.2.4	0x6d11	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:55:09.591478109 CET	1.1.1.1	192.168.2.4	0x6d11	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:55:11.582813025 CET	1.1.1.1	192.168.2.4	0xd554	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:55:11.582813025 CET	1.1.1.1	192.168.2.4	0xd554	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false
Oct 30, 2024 01:55:30.189753056 CET	1.1.1.1	192.168.2.4	0xedb2	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 01:55:30.189753056 CET	1.1.1.1	192.168.2.4	0xedb2	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

fs.microsoft.com

https:

accounts.youtube.com

play.google.com

www.google.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	142.250.184.206	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:19 UTC	869	OUT	GET /drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 00:54:19 UTC	1576	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Location: https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&osid=1&continue=https://drive.google.com/drive/search?usp%3Dmanage_all_todos_url%26q%3Dfollowup:actionitems%26usp_dm%3Dfalse&followup=https://drive.google.com/drive/search?usp%3Dmanage_all_todos_url%26q%3Dfollowup:actionitems%26usp_dm%3Dfalse P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Report-To: {"group":"coop_drive-web-frontend","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/drive-web-frontend"}]} Content-Security-Policy: script-src 'report-sample' 'nonce-kKtNp49GPRp94zAEOJG45g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive/prod Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="coop_drive-web-frontend" Date: Wed, 30 Oct 2024 00:54:19 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=518=XrHpwm1OJso40CsWmXEAmIgR-Oe3EG8WvrtsuJYqb1duR3Frt5Y_Xk5Q2EJMGIO8jBefztTkvEkxpuTIyrww1-kFkyc9DZ1EUaLyy9s06WLhYFghFW3MKKsG52y7dmGip6P-Xz__rwbwmfo2jWjIsGaabguBbzN4_h7Lqunps-dBNvnfOA; expires=Thu, 01-May-2025 00:54:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 00:54:23 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=43225 Date: Wed, 30 Oct 2024 00:54:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 00:54:24 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=43278 Date: Wed, 30 Oct 2024 00:54:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 00:54:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49770	142.250.186.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:34 UTC	1216	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=1245348455&timestamp=1730249673047 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 00:54:34 UTC	1969	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-S45MQcS8eXbKH-8UKDIrNg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 30 Oct 2024 00:54:34 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmJw1JBikPj6kkkDiJ3SZ7AGAXHSv_OsRUB8ufsS63UgVu25xGoKxEUSV1ibgFiIh-NUe9tONoEVS_fsZVLSS8ovjM9MSc0rySypTMnPTczMS87Pz85MLS5OLSpLLYo3MjAyMTQwMtAzsIgvMAAAwKMs9g" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 37 35 62 37 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 53 34 35 4d 51 63 53 38 65 58 62 4b 48 2d 38 55 4b 44 49 72 4e 67 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 75b7<html><head><script nonce="S45MQcS8eXbKH-8UKDIrNg">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 Data Ascii: rident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\\((
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 61 20 69 6e 73 Data Ascii: ch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&a ins
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b 64 3d 61 5b 62 2d 31 Data Ascii: var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){d=a[b-1
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f Data Ascii: l.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="function"&&typeo
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6c 22 29 3b 64 28 6b 29 3b 69 66 28 21 49 28 6b 2c 66 29 29 74 Data Ascii: ;e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("l");d(k);if(!I(k,f))t
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6b 29 3f Data Ascii: rn g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="function"?b.has(k)?
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 Data Ascii: n(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Math.random()*1E9
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 68 62 Data Ascii: ext__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=function(a){var b=hb
2024-10-30 00:54:34 UTC	1969	IN	Data Raw: 72 2c 5b 5d 29 29 3b 72 65 74 75 72 6e 20 62 7d 2c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 69 66 28 61 61 28 62 2c 61 29 3e 3d 30 29 63 2e 70 75 73 68 28 22 5b 2e 2e 2e 63 69 72 63 75 6c 61 72 20 72 65 66 65 72 65 6e 63 65 2e 2e 2e 5d 22 29 3b 65 6c 73 65 20 69 66 28 61 26 26 62 2e 6c 65 6e 67 74 68 3c 0a 35 30 29 7b 63 2e 70 75 73 68 28 73 62 28 61 29 2b 22 28 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 61 2e 61 72 67 75 6d 65 6e 74 73 2c 65 3d 30 3b 64 26 26 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 65 3e 30 26 26 63 2e 70 75 73 68 28 22 2c 20 22 29 3b 76 61 72 20 66 3d 64 5b 65 5d 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 66 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 66 3d 66 3f 22 6f 62 6a 65 63 74 22 3a Data Ascii: r,[]));return b},wb=function(a,b){var c=[];if(aa(b,a)>=0)c.push("[...circular reference...]");else if(a&&b.length<50){c.push(sb(a)+"(");for(var d=a.arguments,e=0;d&&e<d.length;e++){e>0&&c.push(", ");var f=d[e];switch(typeof f){case "object":f=f?"object":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49778	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:36 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 00:54:36 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:54:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49779	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:36 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 00:54:37 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:54:36 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49788	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:37 UTC	1320	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 491 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=XrHpwm1OJso40CsWmXEAmIgR-Oe3EG8WvrtsuJYqb1duR3Frt5Y_Xk5Q2EJMGIO8jBefztTkvEkxpuTIyrww1-kFkyc9DZ1EUaLyy9s06WLhYFghFW3MKKsG52y7dmGip6P-Xz__rwbwmfo2jWjIsGaabguBbzN4_h7Lqunps-dBNvnfOA
2024-10-30 00:54:37 UTC	491	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 34 39 36 37 34 36 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730249674650",null,null,n
2024-10-30 00:54:37 UTC	940	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=CaKvCrz62QhObKQjJbHAPi1B1EqjiHofYXb0FRCHXQyqsJRuQhgTnZnnY3YSj96GXS3aittQ8ZAagcHnSBeGH4new5zrXFywdDxWJV3r7KadqccM30yRkUDx-W0bkskmzKyl03EcKX669LBwHbaDPc_P53CZCEiH4Elda6JvfMyAcI6eBLgorWdM3g; expires=Thu, 01-May-2025 00:54:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:54:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 30 Oct 2024 00:54:37 GMT Connection: close Transfer-Encoding: chunked
2024-10-30 00:54:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:54:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49789	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:37 UTC	1320	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 505 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=XrHpwm1OJso40CsWmXEAmIgR-Oe3EG8WvrtsuJYqb1duR3Frt5Y_Xk5Q2EJMGIO8jBefztTkvEkxpuTIyrww1-kFkyc9DZ1EUaLyy9s06WLhYFghFW3MKKsG52y7dmGip6P-Xz__rwbwmfo2jWjIsGaabguBbzN4_h7Lqunps-dBNvnfOA
2024-10-30 00:54:37 UTC	505	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 34 39 36 37 34 39 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730249674960",null,null,n
2024-10-30 00:54:38 UTC	940	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g; expires=Thu, 01-May-2025 00:54:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:54:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 30 Oct 2024 00:54:38 GMT Connection: close Transfer-Encoding: chunked
2024-10-30 00:54:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:54:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49793	142.250.185.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:38 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=CaKvCrz62QhObKQjJbHAPi1B1EqjiHofYXb0FRCHXQyqsJRuQhgTnZnnY3YSj96GXS3aittQ8ZAagcHnSBeGH4new5zrXFywdDxWJV3r7KadqccM30yRkUDx-W0bkskmzKyl03EcKX669LBwHbaDPc_P53CZCEiH4Elda6JvfMyAcI6eBLgorWdM3g
2024-10-30 00:54:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 00:54:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:54:39 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 00:54:39 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49794	142.250.186.36	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:39 UTC	1221	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:54:39 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 00:48:24 GMT Expires: Thu, 07 Nov 2024 00:48:24 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 375 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:54:39 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-30 00:54:39 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-30 00:54:39 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-30 00:54:39 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-30 00:54:39 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49796	142.250.185.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:39 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:54:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 00:54:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:54:40 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 00:54:40 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49797	172.217.18.4	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:40 UTC	650	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:54:40 UTC	704	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 30 Oct 2024 00:48:24 GMT Expires: Thu, 07 Nov 2024 00:48:24 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 376 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:54:40 UTC	674	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-30 00:54:40 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv
2024-10-30 00:54:40 UTC	1378	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 Data Ascii: 4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT
2024-10-30 00:54:40 UTC	1378	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBBF!4I
2024-10-30 00:54:40 UTC	622	IN	Data Raw: 00 00 fe fe fe 26 fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: &$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49798	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:43 UTC	1306	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:54:43 UTC	1224	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 33 30 32 34 39 36 37 31 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],558,[["1730249671000",null,null,nu
2024-10-30 00:54:43 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:54:43 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 00:54:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:54:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49799	142.250.185.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:54:44 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:54:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 00:54:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:54:44 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 00:54:44 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49800	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:07 UTC	1328	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:55:07 UTC	552	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 34 39 37 30 35 39 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730249705989",null,null,n
2024-10-30 00:55:07 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:55:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 00:55:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:55:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49801	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:08 UTC	1288	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 989 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:55:08 UTC	989	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 31 30 32 37 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20241027.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,
2024-10-30 00:55:08 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:55:08 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 00:55:08 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:55:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49802	142.250.185.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:08 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:55:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 00:55:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:55:09 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 00:55:09 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49804	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:12 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:12 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:12 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005512Z-r197bdfb6b4d9xksru4x6qbqr000000007eg0000000067t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:12 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 00:55:12 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49806	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:13 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:13 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005513Z-17c5cb586f6vcw6vtg5eymp4u800000005a000000000gefy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:13 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49809	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:13 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:13 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:13 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005513Z-16849878b78fkwcjkpn19c5dsn00000006dg000000000z2x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:13 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49808	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:13 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:13 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:13 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: fc6998d3-101e-008d-52ad-2692e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005513Z-16849878b786lft2mu9uftf3y400000008k000000000c9yw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:13 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49805	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:13 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:13 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:13 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: e9f225b3-c01e-0014-22e8-27a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005513Z-r197bdfb6b46krmwag4tzr9x7c000000073000000000ea0k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:13 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49807	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:13 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:13 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:13 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005513Z-16849878b78km6fmmkbenhx76n00000006ng00000000d7nd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:13 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49812	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:14 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005514Z-16849878b78sx229w7g7at4nkg00000005mg000000005tv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49813	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:14 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:14 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:14 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 8abc48b9-201e-0096-2f4f-28ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005514Z-15b8d89586fbmg6qpd9yf8zhm00000000270000000009qd3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:14 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49810	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:14 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:14 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005514Z-16849878b7828dsgct3vrzta7000000005qg00000000ewpc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:14 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49811	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:14 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005514Z-16849878b78zqkvcwgr6h55x9n00000006qg00000000krck x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49814	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:14 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:14 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:14 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005514Z-16849878b78z2wx67pvzz63kdg00000005x000000000dq7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:14 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49815	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:15 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005515Z-16849878b78j7llf5vkyvvcehs000000089g00000000tgnq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49816	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:15 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 9985b9b7-a01e-0021-5827-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005515Z-15b8d89586flspj6y6m5fk442w0000000d60000000009mvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49817	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:15 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005515Z-16849878b78nx5sne3fztmu6xc000000086g00000000pnt9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49818	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:15 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:15 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: b80877bf-b01e-0084-28e3-26d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005515Z-r197bdfb6b48pl4k4a912hk2g400000006eg00000000kq7w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49819	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:15 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:15 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:15 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: d7faccb9-c01e-002b-307f-276e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005515Z-16849878b78zqkvcwgr6h55x9n00000006vg000000000eyx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:15 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49820	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:16 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:16 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005516Z-16849878b78sx229w7g7at4nkg00000005m000000000875g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:16 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49821	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:16 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:16 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005516Z-17c5cb586f69w69mgazyf263an00000006cg00000000k15f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:16 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49823	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:16 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:16 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 1a39e609-901e-0048-60a3-26b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005516Z-16849878b787bfsh7zgp804my4000000062000000000grwv x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:16 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49822	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:16 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:16 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:16 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005516Z-16849878b78qg9mlz11wgn0wcc00000006vg00000000gkvf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:16 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49824	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:16 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:16 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:16 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 389e5e1f-601e-000d-2325-282618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005516Z-17c5cb586f65j4snvy39m6qus400000002q0000000003kdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:16 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49826	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:17 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:17 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005517Z-16849878b78zqkvcwgr6h55x9n00000006s000000000cuvr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:17 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49825	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:17 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:17 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 47f8d5d2-401e-005b-1e67-279c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005517Z-16849878b786fl7gm2qg4r5y7000000007ng000000005uq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49827	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:17 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:17 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 9956b93e-101e-0017-0e1a-2447c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005517Z-17c5cb586f6wmhkn5q6fu8c5ss00000006tg000000002d9w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:17 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49828	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:17 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:17 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005517Z-16849878b785dznd7xpawq9gcn00000008t0000000002a9r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:17 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49829	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:17 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:17 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:17 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005517Z-16849878b78j5kdg3dndgqw0vg000000090000000000egzv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:17 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49831	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:18 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: afbd30f1-101e-007a-739c-27047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005518Z-r197bdfb6b4xfp4mncra29rqkc00000000rg00000000ae1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:18 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49833	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:18 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 46a88b53-101e-0017-7e74-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005518Z-16849878b782d4lwcu6h6gmxnw000000070g00000000816b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:18 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49832	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:18 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:18 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005518Z-16849878b78qg9mlz11wgn0wcc00000006yg0000000052dq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:18 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49834	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: df8e274c-401e-002a-26fc-28c62e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005518Z-r197bdfb6b46kmj4701qkq602400000006hg000000000ew6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49835	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:18 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 9969a17a-a01e-0021-051b-28814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005518Z-r197bdfb6b47gqdjvmbpfaf2d000000002eg00000000ffu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:18 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49836	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 892d3b27-201e-005d-7649-27afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-16849878b78hh85qc40uyr8sc800000007f000000000v9qk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49838	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 5167a131-c01e-0082-697a-25af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-15b8d89586flspj6y6m5fk442w0000000d7g000000005z1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49837	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:18 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 25321125-401e-0047-18d5-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-r197bdfb6b46kdskt78qagqq1c00000007f000000000ha2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49839	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: af8b8727-001e-00a2-18f5-24d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-15b8d89586f4zwgbgswvrvz4vs00000008qg00000000677k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49840	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-15b8d89586fpccrmgpemqdqe580000000270000000005bnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49841	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-16849878b78qfbkc5yywmsbg0c000000070000000000a7r2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49843	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-16849878b78j5kdg3dndgqw0vg000000093g000000001z9t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49842	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:19 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 2ee95feb-501e-0029-5d17-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-15b8d89586fhl2qtatrz3vfkf00000000dkg000000006hrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:19 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49844	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:19 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:19 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005519Z-16849878b786jv8w2kpaf5zkqs000000068g0000000043y5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49845	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:20 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:20 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005520Z-16849878b78g2m84h2v9sta29000000006ag00000000012q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49846	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:20 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:20 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005520Z-16849878b78bcpfn2qf7sm6hsn00000008vg00000000mpvy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49848	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:20 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:20 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005520Z-16849878b786jv8w2kpaf5zkqs000000064000000000n013 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49847	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:20 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c417f1b6-b01e-0084-279b-27d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005520Z-15b8d89586f8l5961kfst8fpb00000000k5g000000000v3h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49849	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:20 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:20 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:20 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005520Z-16849878b78wv88bk51myq5vxc00000007hg00000000hw9u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:20 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49850	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:21 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:21 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5feeb856-001e-008d-0ae8-28d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005521Z-15b8d89586flspj6y6m5fk442w0000000d4000000000ev3q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:21 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49852	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:21 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:21 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 336bf192-401e-00ac-1a67-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005521Z-15b8d89586fdmfsg1u7xrpfws00000000bm00000000074s0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:21 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49851	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:21 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:21 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005521Z-15b8d89586f4zwgbgswvrvz4vs00000008n000000000bxnk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:21 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49853	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:21 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:21 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:21 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: d0d63b60-601e-0050-7d63-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005521Z-17c5cb586f6mkpfkkpsf1dpups00000002gg00000000gcnr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:21 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49855	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:22 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 9921b831-601e-0097-069c-27f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005522Z-15b8d89586f6nn8zqg1h5suba800000002f000000000dvp4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49854	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:22 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: efaca471-901e-002a-6713-287a27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005522Z-r197bdfb6b4qbfppwgs4nqza8000000005yg00000000737c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49857	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:22 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:22 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005522Z-16849878b78sx229w7g7at4nkg00000005eg00000000u0we x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:22 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49856	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:22 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:22 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3efaf52f-501e-008c-0d35-29cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005522Z-15b8d89586f6nn8zqg1h5suba800000002p0000000000r1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49858	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:22 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:22 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005522Z-16849878b78x6gn56mgecg60qc000000091g00000000pcu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:22 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49860	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:23 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:23 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005523Z-16849878b78z2wx67pvzz63kdg00000005yg000000008p4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:23 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49861	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:23 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:23 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:23 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: c2db9b5f-901e-0015-105a-27b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005523Z-16849878b786lft2mu9uftf3y400000008n0000000005935 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:23 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49863	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:23 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:23 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ad1b4984-801e-002a-3571-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005523Z-17c5cb586f6b6kj91vqtm6kxaw00000006100000000092qm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:23 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49862	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:23 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:23 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 384d3f9c-b01e-003d-2424-26d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005523Z-17c5cb586f6g6g2sa7kg5c0gg000000002fg00000000gtzg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:23 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49864	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:23 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:23 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005523Z-16849878b785jrf8dn0d2rczaw00000008gg00000000755c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:23 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49865	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:24 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:24 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005524Z-16849878b782d4lwcu6h6gmxnw00000006v000000000z7b5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:24 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49866	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:24 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0944ca5a-501e-007b-292d-275ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005524Z-17c5cb586f6mkpfkkpsf1dpups00000002rg000000000d4f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:24 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49867	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:24 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 3281a84b-401e-0029-700c-289b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005524Z-17c5cb586f6hn8cl90dxzu28kw00000007e0000000006k98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:24 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49868	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:24 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005524Z-16849878b78smng4k6nq15r6s400000008t000000000g6gu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:24 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49869	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:24 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:24 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: b357c660-c01e-008e-6e16-297381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005524Z-15b8d89586fzcfbd8we4bvhqds000000026g00000000ch5z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:24 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49870	142.250.181.238	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:24 UTC	1328	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 733 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:55:24 UTC	733	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 33 33 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 33 30 32 34 39 37 32 33 34 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"33",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1730249723486",null,null,n
2024-10-30 00:55:25 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 30 Oct 2024 00:55:24 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-30 00:55:25 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-10-30 00:55:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49871	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 1d33856d-201e-000c-0612-2979c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-17c5cb586f6mhqqby1dwph2kzs00000002ng000000005snt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49872	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 90a6b530-901e-007b-6be7-28ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-r197bdfb6b42rt68rzg9338g1g00000008m0000000009dxs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:25 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49874	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-16849878b78zqkvcwgr6h55x9n00000006n000000000vkug x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:25 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49873	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:25 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 933aac65-d01e-007a-51aa-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-16849878b78nx5sne3fztmu6xc00000008b0000000004uec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:25 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49875	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: cce6b4d6-601e-000d-171c-292618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-r197bdfb6b4qbfppwgs4nqza8000000005xg000000008vza x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:25 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49877	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:25 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:25 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005525Z-16849878b78tg5n42kspfr0x4800000007c0000000006esy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49878	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b78fssff8btnns3b1400000007f000000000vdh4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49876	142.250.185.142	443	5016	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	679	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=lJUg90LKrbsRJbbCN3L_Rasc5f2mweb7dlRj9wA1Gk2XEEkIowSW3UzOo_FLGSVdQFKfAsn8ld11oEWZkDv9_OOUOc80r6B5pGhTgrpd11EBqeCDcDQTufnzCbtQRiMgMg5436RvwmK2cvRgcix1UUAxI7Ljag5oswAV4z3U9fl3-L704c1TJWEG6g
2024-10-30 00:55:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-30 00:55:26 UTC	1108	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-30 00:55:26 UTC	447	IN	Data Raw: 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: -min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49880	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b787wpl5wqkt5731b40000000850000000001nft x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49879	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: f9fbd553-601e-003e-5c2e-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b78p49s6zkwt11bbkn00000006z000000000d4f6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49881	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b78q9m8bqvwuva4svc00000005s000000000qwks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49882	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:26 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b786fl7gm2qg4r5y7000000007mg000000009qux x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:26 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49883	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:26 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:26 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005526Z-16849878b78j5kdg3dndgqw0vg000000093g00000000205d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49884	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:27 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005527Z-15b8d89586fwzdd8urmg0p1ebs0000000k0g000000004p8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49885	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:27 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005527Z-15b8d89586fvpb59307bn2rcac00000002h00000000030z4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49886	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:27 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 97ce691d-801e-0047-0a01-277265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005527Z-16849878b785jrf8dn0d2rczaw00000008cg00000000pyg6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49887	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:27 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 6768b437-a01e-00ab-174d-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005527Z-16849878b78wc6ln1zsrz6q9w800000006v000000001033a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49888	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:27 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:27 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c317859a-501e-00a3-19db-27c0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005527Z-r197bdfb6b48v72xb403uy6hns000000080000000000780k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:27 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49889	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:27 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a1443afe-101e-00a2-13ee-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-15b8d89586f42m673h1quuee4s0000000be0000000005y52 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:28 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49890	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:28 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: f473ee8a-401e-00ac-6cf0-260a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-16849878b78xblwksrnkakc08w00000006ng000000002yt2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:28 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49891	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-16849878b786lft2mu9uftf3y400000008eg00000000ug8u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:28 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49892	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-17c5cb586f69w69mgazyf263an00000006cg00000000k1t2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:28 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49893	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:28 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-15b8d89586fmc8ck21zz2rtg1w00000004kg000000005vzm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:28 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49894	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cd04a713-f01e-003f-7315-26d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-16849878b786fl7gm2qg4r5y7000000007fg00000000wbp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49895	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 3a0fb8a5-701e-0050-6930-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-15b8d89586f8nxpt6ys645x5v000000008ng000000003pq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49896	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:28 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:28 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005528Z-15b8d89586fdmfsg1u7xrpfws00000000bm00000000074wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49897	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:29 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:29 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: c3c23e01-401e-008c-4e94-2986c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005529Z-17c5cb586f6gkqkwd0x1ge8t0400000007t000000000cz22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49898	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:29 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:29 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005529Z-16849878b785jrf8dn0d2rczaw00000008cg00000000pyp8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49899	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:29 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:29 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 174e4ed1-f01e-0052-3d1b-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005529Z-16849878b78qg9mlz11wgn0wcc00000006ug00000000na5m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49900	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:29 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: cdf7bdf1-501e-0029-3f94-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005529Z-17c5cb586f65j4snvy39m6qus400000002qg000000002ckx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49901	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:29 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:29 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:29 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: d9e5b04b-c01e-0066-80fb-27a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005529Z-r197bdfb6b4xfp4mncra29rqkc00000000u0000000004c61 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:29 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49902	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:30 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:30 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d0af8e75-601e-0050-7953-272c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005530Z-17c5cb586f6mhqqby1dwph2kzs00000002q0000000002nyh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:30 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49903	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:30 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:30 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005530Z-16849878b78z2wx67pvzz63kdg00000005xg00000000cc1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:30 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49904	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:30 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:30 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: c05ef2b3-701e-005c-2d6a-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005530Z-r197bdfb6b4jlq9hppzrdwabps00000002f0000000009ruh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:30 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49905	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:30 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:30 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:30 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005530Z-16849878b78nx5sne3fztmu6xc000000088g00000000dsrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:30 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49906	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:30 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:30 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:30 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: de20d122-c01e-008e-20f7-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005530Z-r197bdfb6b4grkz4xgvkar0zcs00000006yg00000000c7bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:30 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49907	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:31 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:31 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005531Z-15b8d89586fmhkw429ba5n22m800000008s000000000bsbu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:31 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49908	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:31 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:31 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 3bd815fc-c01e-0066-6070-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005531Z-16849878b7867ttgfbpnfxt44s000000077g000000005mud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:31 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49909	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:31 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:31 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 92d64d37-101e-0034-119c-2796ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005531Z-16849878b785jrf8dn0d2rczaw00000008b000000000zgrs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:31 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49911	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:31 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:31 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 6796a20d-a01e-00ab-565f-279106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005531Z-17c5cb586f6sqz6f73fsew1zd8000000012g000000005ppc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:31 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49910	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:31 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:31 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:31 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005531Z-16849878b78hh85qc40uyr8sc800000007f000000000vacb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:31 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49912	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:32 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005532Z-16849878b78qf2gleqhwczd21s00000007d000000000sx1c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:32 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49913	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:32 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 2f6e7a45-901e-0083-466a-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005532Z-16849878b78qfbkc5yywmsbg0c00000006x000000000ptfx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:32 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49914	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:32 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005532Z-16849878b78qg9mlz11wgn0wcc00000006s000000000yr41 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:32 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49915	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:32 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:32 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a3bf04aa-f01e-001f-636e-285dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005532Z-r197bdfb6b4jlq9hppzrdwabps00000002dg00000000du8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:32 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49916	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:32 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:32 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005532Z-16849878b78x6gn56mgecg60qc000000090g00000000t14f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:32 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49917	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:32 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-16849878b78fhxrnedubv5byks00000005gg00000000xdz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49918	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: ff0e8b8f-401e-008c-1c9c-2786c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-17c5cb586f672xmrz843mf85fn000000063g00000000chs4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49920	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 80bd6f28-d01e-002b-3d65-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-17c5cb586f6fqqst87nqkbsx1c00000005ng00000000h0nz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49919	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-16849878b78q9m8bqvwuva4svc00000005xg000000002c56 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49921	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-16849878b78j5kdg3dndgqw0vg00000008yg00000000nv58 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49922	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:33 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:33 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005533Z-16849878b786jv8w2kpaf5zkqs000000066000000000ex70 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:33 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49923	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:33 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a9c77195-601e-003e-7294-293248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-15b8d89586fzcfbd8we4bvhqds000000024g00000000g93p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49924	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:34 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 60449bdf-301e-005d-500b-26e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-16849878b78zqkvcwgr6h55x9n00000006vg000000000fsn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49925	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:34 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-16849878b78g2m84h2v9sta29000000006ag0000000001vp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49926	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:34 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: ccbf99dc-401e-0035-1c33-2682d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-17c5cb586f6hn8cl90dxzu28kw00000007e0000000006kpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49927	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:34 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-16849878b782d4lwcu6h6gmxnw00000006xg00000000ms0b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49928	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:34 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:34 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:34 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005534Z-16849878b7867ttgfbpnfxt44s0000000790000000000568 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:34 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49930	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:35 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:35 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: c032846d-701e-005c-2d58-27bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005535Z-16849878b78sx229w7g7at4nkg00000005h000000000fzvd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 00:55:35 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49931	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:35 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:35 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005535Z-15b8d89586f42m673h1quuee4s0000000bd0000000007re2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:35 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49929	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:35 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:35 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:35 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005535Z-16849878b78z2wx67pvzz63kdg00000005v000000000qa8g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:35 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49932	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:35 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:35 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 622dd3a6-e01e-0003-140d-260fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005535Z-16849878b78j5kdg3dndgqw0vg000000092g00000000646z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:35 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49933	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:35 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:35 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:35 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005535Z-17c5cb586f6mhqqby1dwph2kzs00000002pg000000003c9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:35 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49936	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:36 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:36 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005536Z-r197bdfb6b4jlq9hppzrdwabps00000002gg000000006hw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:36 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49935	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:36 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:36 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a1fd626a-d01e-0017-5dfc-24b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005536Z-15b8d89586fmhkw429ba5n22m800000008ug000000005dtv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:36 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49937	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:36 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:36 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:36 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: a86168e1-701e-0097-7f6b-27b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005536Z-17c5cb586f6r59nt869u8w8xt8000000068g00000000aaze x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:36 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49938	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:36 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:36 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 135a34dd-b01e-0098-371c-27cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005536Z-r197bdfb6b4hsj5bywyqk9r2xw00000008v0000000004ave x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:36 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49939	13.107.246.60	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 00:55:36 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 00:55:36 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 00:55:36 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T005536Z-16849878b78tg5n42kspfr0x4800000007cg0000000047zk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 00:55:36 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Target ID:	0
Start time:	20:54:12
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	20:54:15
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:54:18
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	20:54:34
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	20:54:34
Start date:	29/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 --field-trial-handle=2020,i,8863521600487486178,6383894102092830555,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
https://drive.google.com/drive/search?usp=manage_all_todos_url&q=followup:actionitems&usp_dm=false