Edit tour

Windows Analysis Report
CV2.pdf

Overview

General Information

Sample name:	CV2.pdf
Analysis ID:	1545584
MD5:	c445b670eaa73c46a530824a06adf001
SHA1:	f53bd21dc22743212cef6221b9ed22fc041fd242
SHA256:	2a9f0cb198913b5b2ee0ac01c79fe69a7c0998338ed6d679df0058ad7569c22d
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 2704 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\CV2.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 1644 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 6768 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2160 --field-trial-handle=1516,i,4072766168734837792,13195658575506224028,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:aamir_manzoor@hotmail.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1948,i,4532878139139312722,16722810616985355556,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49897 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49963 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 96.7.168.138 96.7.168.138
Source: Joe Sandbox View	IP Address: 204.79.197.212 204.79.197.212
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View	JA3 fingerprint: 1138de370e523e824bbca92d049a3777
Source: Joe Sandbox View	JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49897 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.168.138

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=P8Po15hOhsRmhFA&MD=KMzDkLFF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brIf-None-Match: "78-5faa31cce96da"If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /owa/ HTTP/1.1Host: outlook.live.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=P8Po15hOhsRmhFA&MD=KMzDkLFF HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: hotmail.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: hotmail.com
Source: global traffic	DNS traffic detected: DNS query: outlook.live.com
Source: global traffic	DNS traffic detected: DNS query: assets.onestore.ms
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com

Source: 77EC63BDA74BD0D0E0426DC8F80085060.2.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_217.9.dr, chromecache_210.9.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_212.9.dr	String found in binary or memory: http://schema.org/Organization
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_212.9.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Source: chromecache_212.9.dr	String found in binary or memory: https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c
Source: chromecache_212.9.dr	String found in binary or memory: https://az725175.vo.msecnd.net/scripts/jsll-4.js
Source: chromecache_212.9.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Source: chromecache_212.9.dr	String found in binary or memory: https://onedrive.live.com/about/en-us/
Source: chromecache_212.9.dr	String found in binary or memory: https://outlook.live.com/owa/
Source: chromecache_212.9.dr	String found in binary or memory: https://products.office.com/en-us/home
Source: chromecache_212.9.dr	String found in binary or memory: https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams
Source: chromecache_212.9.dr	String found in binary or memory: https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Source: chromecache_212.9.dr	String found in binary or memory: https://www.onenote.com/
Source: chromecache_212.9.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_212.9.dr	String found in binary or memory: https://www.xbox.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.5:49943 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49963 version: TLS 1.2

Source: classification engine

Classification label: clean2.winPDF@38/75@17/7

Source: CV2.pdf

Initial sample: mailto:aamir_manzoor@hotmail.com

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 12-40-15-863.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\CV2.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2160 --field-trial-handle=1516,i,4072766168734837792,13195658575506224028,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:aamir_manzoor@hotmail.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1948,i,4532878139139312722,16722810616985355556,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2160 --field-trial-handle=1516,i,4072766168734837792,13195658575506224028,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1948,i,4532878139139312722,16722810616985355556,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.8.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: CV2.pdf	Initial sample: PDF keyword /JS count = 0
Source: CV2.pdf	Initial sample: PDF keyword /JavaScript count = 0
Source: A9fgnliz_cmbn9f_2w4.tmp.0.dr	Initial sample: PDF keyword /JS count = 0
Source: A9fgnliz_cmbn9f_2w4.tmp.0.dr	Initial sample: PDF keyword /JavaScript count = 0

Source: CV2.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: CV2.pdf

Initial sample: PDF keyword obj count = 74

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Spearphishing Link	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://x1.i.lencr.org/	0%	URL Reputation	safe
http://schema.org/Organization	0%	URL Reputation	safe
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
hotmail.com	204.79.197.212	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
FRA-efz.ms-acdc.office.com	52.98.252.114	true	false	unknown
c.s-microsoft.com	unknown	unknown	false	unknown
x1.i.lencr.org	unknown	unknown	false	unknown
outlook.live.com	unknown	unknown	false	unknown
assets.onestore.ms	unknown	unknown	false	unknown
ajax.aspnetcdn.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://outlook.live.com/owa/	false		unknown
http://hotmail.com/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://onedrive.live.com/about/en-us/	chromecache_212.9.dr	false		unknown
https://products.office.com/en-us/microsoft-teams/free?icid=SSM_AS_Promo_Apps_MicrosoftTeams	chromecache_212.9.dr	false		unknown
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false	URL Reputation: safe	unknown
https://www.onenote.com/	chromecache_212.9.dr	false		unknown
https://www.skype.com/en/	chromecache_212.9.dr	false		unknown
https://products.office.com/en-us/home	chromecache_212.9.dr	false		unknown
https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.c	chromecache_212.9.dr	false		unknown
https://www.xbox.com/	chromecache_212.9.dr	false		unknown
http://schema.org/Organization	chromecache_212.9.dr	false	URL Reputation: safe	unknown
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js	chromecache_212.9.dr	false	URL Reputation: safe	unknown
http://github.com/requirejs/almond/LICENSE	chromecache_217.9.dr, chromecache_210.9.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
96.7.168.138	unknown	United States	262589	INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
204.79.197.212	hotmail.com	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
52.98.252.114	FRA-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.16
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1545584
Start date and time:	2024-10-30 17:39:19 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	CV2.pdf
Detection:	CLEAN
Classification:	clean2.winPDF@38/75@17/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 54.227.187.23, 52.5.13.197, 23.22.254.206, 52.202.204.11, 162.159.61.3, 172.64.41.3, 199.232.214.172, 2.23.197.184, 192.229.221.95, 2.16.164.91, 2.16.164.83, 2.16.164.59, 2.16.164.58, 2.16.164.90, 2.16.164.75, 2.16.164.66, 2.16.164.65, 2.16.164.74, 142.250.185.238, 108.177.15.84, 216.58.206.67, 34.104.35.123, 23.32.185.131, 104.102.41.166, 152.199.19.160, 2.18.64.218, 2.18.64.214, 88.221.110.179, 88.221.110.176, 172.217.16.202, 142.250.184.234, 216.58.206.42, 142.250.186.42, 142.250.185.74, 142.250.185.234, 142.250.185.138, 142.250.185.106, 142.250.181.234, 216.58.212.138, 142.250.186.106, 216.58.206.74, 142.250.185.170, 142.250.185.202, 142.250.186.170, 172.217.18.10, 184.28.89.233, 172.217.23.99, 142.250.186.46
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, assets.onestore.ms.edgekey.net, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, a1449.dscg2.akamai.net, acroipm2.adobe.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, ssl-delivery.adobe.com.edgekey.net, a122.dscd.akamai.net, update.googleapis.com, img-prod-cms-rt-microsoft-com.akamaized.net, wu-b-net.trafficmanager.net, a1778.g2.akamai.net, crl.root-x1.letsencrypt.org.edgekey.net, optimizationguide-pa.googleapis.com, e10583.dspg.akamaiedge.net, clients1.google.com, fs.microsoft.com, accounts.google.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, acroipm2.adobe.com.edgesuite.net, cs22.wpc.v0cdn.net, ctldl.windowsupdate.com, statics-marketingsites-wcus-ms-com.akamaized.net, p13n.adobe.io, assets.onestore.m
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: CV2.pdf

Simulations

Behavior and APIs

Time	Type	Description
12:40:26	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	https://wetransfer.com/downloads/bd15c1f671ae60c5a56e558eb8cc43bf20241030150256/3b30cd5b9ce1ffb29d79c9118153941c20241030150256/70baef?t_exp=1730559776&t_lsid=6bd545a9-d09b-4abd-a317-124dbe9fe64d&t_network=email&t_rid=YXV0aDB8NjZlYWI0YTExODhmYzc1OGMzMmNiODIx&t_s=download_link&t_ts=1730300576&utm_campaign=TRN_TDL_01&utm	Get hash	malicious	HTMLPhisher	Browse
	https://register.edx.org/verizon?&utm_source=vsf_e_paid-ggl-ubrnd&utm_medium=cpc&utm_campaign=GGL%7CEDX%7CAI%7CVSF%7CSEM%7CNBD%7CUS&gad_source=1&gclid=Cj0KCQjwj4K5BhDYARIsAD1Ly2pyzBeRgn77ojfsMTtg7r8SaT93hKq6Ob_f1zsDj7Kj8dy-Mn9a7tMaAng3EALw_wcB&_gl=11dphwek_gcl_awR0NMLjE3MzAyMTU4NDAuQ2owS0NRandqNEs1QmhEWUFSSXNBRDFMeTJweXpCZVJnbjc3b2pmc01UdGc3cjhTYVQ5M2hLcTZPYl9mMXpzRGo3S2o4ZHktTW45YTd0TWFBbmczRUFMd193Y0I._gcl_auMzQxNzQzMjE1LjE3MzAyMTU4Mzg._gaMTE0OTEyNzE2Ni4xNzMwMjE1ODM5_ga_D3KS4KMDT0*MTczMDIxNTgzOS4xLjAuMTczMDIxNTgzOS42MC4wLjA	Get hash	malicious	Unknown	Browse
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse
	https://register.edx.org/verizon?&utm_source=vsf_e_paid-ggl-ubrnd&utm_medium=cpc&utm_campaign=GGL%7CEDX%7CAI%7CVSF%7CSEM%7CNBD%7CUS&gad_source=1&gclid=Cj0KCQjwj4K5BhDYARIsAD1Ly2pyzBeRgn77ojfsMTtg7r8SaT93hKq6Ob_f1zsDj7Kj8dy-Mn9a7tMaAng3EALw_wcB&_gl=11dphwek_gcl_awR0NMLjE3MzAyMTU4NDAuQ2owS0NRandqNEs1QmhEWUFSSXNBRDFMeTJweXpCZVJnbjc3b2pmc01UdGc3cjhTYVQ5M2hLcTZPYl9mMXpzRGo3S2o4ZHktTW45YTd0TWFBbmczRUFMd193Y0I._gcl_auMzQxNzQzMjE1LjE3MzAyMTU4Mzg._gaMTE0OTEyNzE2Ni4xNzMwMjE1ODM5_ga_D3KS4KMDT0*MTczMDIxNTgzOS4xLjAuMTczMDIxNTgzOS42MC4wLjA	Get hash	malicious	Unknown	Browse
	https://schiller.life/	Get hash	malicious	HTMLPhisher	Browse
	https://jpm-ghana-2024-election-conversation-with-oct-24.open-exchange.net/join-the-call?ml_access_token=eyJjb250ZW50Ijp7ImV4cGlyYXRpb25EYXRlIjoiMjAyNC0xMC0zMVQxNToyMDo1OS4wMDZaIiwiZW1haWwiOiJyZGVpdHpAdnItY2FwaXRhbC5jb20iLCJldmVudElkIjo0MjY3Mn0sInNpZ25hdHVyZSI6Ik1FVUNJQzhaMDJJblVZd0syUk9WRkdjL1pMNHRBbWo4RmwxdW9mQjhwZzRmSjZsMkFpRUE5d25HUFFoa3ZrdkM2MlJkQ3lkM09YbnFJZ0xlQTAwMDIxNlRWbG9Hb0ZjPSJ9	Get hash	malicious	Unknown	Browse
	Derickdermatology.html	Get hash	malicious	Phisher	Browse
	https://www.mediafire.com/file/oyfycncwen0a3ue/DSP_Plan_Set.zip/file	Get hash	malicious	Unknown	Browse
	Complete with Docusign_ Remittance Advice .pdf(1).eml	Get hash	malicious	HTMLPhisher	Browse
	https://cosiosos.com.de/7i2ko/	Get hash	malicious	HTMLPhisher	Browse
52.98.252.114	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=Tara.LaClair%40Steptoe-Johnson.com&senderemailaddress=sszwarc%40MercBank.com&senderorganization=AwGAAAAAAnwAAAADAQAAAAB4L2sP04tHoRgQy9kdN5NPVT1tZXJjYmFuazAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1OQU1QUjE1QTAwMixEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NiRJZGS9IYEeji1osys3BpUNOPUNvbmZpZ3VyYXRpb24sQ049bWVyY2JhbmswLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9TkFNUFIxNUEwMDIsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cSA1PR15MB5013A9396562F78FDD94A844D7812%40SA1PR15MB5013.namprd15.prod.outlook.com%3e&cfmRecipient=SystemMailbox%7b6C0A1EFA-EC06-4AF8-8120-E8DF728D24A6%7d%40mercbank0.onmicrosoft.com&consumerEncryption=false&senderorgid=eda5640b-de2a-4a70-8a6e-b9b732c16c38&urldecoded=1&e4e_sdata=EpAebyUyhbp5qjBRCejClul%2bO0wRydv1eJUK4qhZNRr0%2bzDWWfXCtf65jmdkNdBUWfXHNGyyHkWBVsCBCGfBpV5cdtKksOzfyu%2fmYa0Ftd3xTjHmXXenRXgUA0PR3gh5sR2ve%2bXE8dZCafVion%2bI0xm7xM0WcwXEUpGBGC8um4aIRyLVcAtc7h%2bCF%2fGZB16AaYsprv6yVHs7DZ5VNxYzLxaXnrSeE5gRbw0Z1wjaZ%2fLsBubfjF6gF%2fTa7wyY1NzrCFy0ptnoii1J%2f8CwlNK1zNO7c1e1wINfHPNA0%2f3Sy7hhDnvOn0PqTNFKAsZ49Up0Css4iDSm2eE2BPpARvHUGQ%3d%3d	Get hash	malicious	Unknown	Browse
96.7.168.138	401K .pdf	Get hash	malicious	HTMLPhisher	Browse
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse
	Oakville_Service_Update_d76b33a1-3420-40be-babd-e82e253ad25c.pdf	Get hash	malicious	HTMLPhisher	Browse
	2025+Policies_645622_929-5.pdf	Get hash	malicious	Unknown	Browse
	https://dl.dropboxusercontent.com/scl/fi/95is2w1ywjvorzayt88dp/DKM-0192PDF.zip?rlkey=svoej4s4tb5lwbnvthtgrmokl&st=d99zdn1k&dl=0	Get hash	malicious	Abobus Obfuscator	Browse
	0438.pdf.exe	Get hash	malicious	Unknown	Browse
	Sars Urgent Notice.pdf	Get hash	malicious	Unknown	Browse
	tue.bat	Get hash	malicious	Unknown	Browse
	https://dl.dropboxusercontent.com/scl/fi/kzw07ghqs05mfyhu8o3ey/BestellungVRG020002.zip?rlkey=27cmmjv86s5ygdnss2oa80i1o&st=86cnbbyp&dl=0	Get hash	malicious	Unknown	Browse
	bc3c228ad2c13f96cb14375c3860e802.pdf	Get hash	malicious	HTMLPhisher	Browse
204.79.197.212	CB-3433-3048OTZ.exe	Get hash	malicious	Unknown	Browse
	Aleksandr Sokolov shared Confidential with you..eml	Get hash	malicious	HTMLPhisher	Browse
	https://preview.webflow.com/preview/secure-document-59ad7d?utm_medium=preview_link&utm_source=designer&utm_content=secure-document-59ad7d&preview=9a2adf8bcbeeee4bfc926853e0f2eb24&workflow=preview	Get hash	malicious	HTMLPhisher	Browse
	https://1drv.ms:443/o/s!BD9vne7PYUwDhiaGsSiv-cr1us63?e=wP5XpOOywEqSMXd2hibWxA&at=9	Get hash	malicious	HTMLPhisher	Browse
	IW9C25cFaN.exe	Get hash	malicious	Unknown	Browse
	https://heyzine.com/flip-book/b44c7d7203.html	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FRA-efz.ms-acdc.office.com	https://bioaquatictesting-my.sharepoint.com/:f:/g/personal/securedocument_bio-aquatic_com/EqfT1pjHkSVIsZ_uZ-FoAy4BgWwRj-5I-q_oaUpvi5Mxeg?e=eaqeTT	Get hash	malicious	Unknown	Browse	52.98.178.210
	scan1738761_rsalinas@wcctxlaw.com.pdf	Get hash	malicious	HTMLPhisher	Browse	52.98.179.210
	http://url5148.librariapena.com/ls/click?upn=u001.GicqFEndYG5aFpuN1ngPufTfXrsQ9xNlNirpytR4MM9aBsYYFODsiAPftWqmKpvrE6ff_B2fWkfszhSflnL0HA3FnQqEKk1HJkizy-2Fud2LEQeI5aha2K2G6ppF2O0bL7D7H7LMN8WGu5xRF2M8uaTM6MXf6DAMaADWmIUL1YqZWKrQh1g-2F0n0cxV2mRrNZEteUwfW5DOdClcZ0c7E-2FIhACBFYnzvVFSnfSt3CZCN7P1EL1QyPVm42KBQGCDp3btvtG-2BbRJha-2FOyJXx-2BDZbno3l2jsvw-2FwkacYeoKE0uINsamNbg0rV0A52QCvn7k6VYTShXjbi9u51Z787-2F01bX1DTA9aSBSP-2FWMLEspaU-2FIdc1x-2FmRDSh7t6BQtQAtVlDsdci-2FkdE5XEzXcy1T7RT1mRx0Z8c0C7T5TxNvH7MOJLp-2BPx4LTMm4cKm4w-2Br4av4rqX3sFI-2B0Z54CPJjpfmgkQpOwbMxDkpsmVoLcKhd8rV7DcMtFguJaotRS3nEWM4vOO-2FegVGhzrwPBH6NjA2esFflr-2FYmA56ZztqyuVYNkq6vFbZhu3qpImgcxi-2BBybDKRWWCy9ZJhz5kW6d7c5iFMdA14shvBlO5oteNsOg1T8Wcd4MIJllivR5RQLa6JKyKUfgK8kF9DoOU4JGzocfITKQs9Z05ET92-2FS1aC5wu-2FuyffXQ4VOTrXPB9d3zUlvAaEdOc87CGa5e4y4lu-2F-2B9njpJqjlihSLoXPx3uHJhhT5l60Eu-2Fd0OnNMVN2uGoOn8P4Kyfxcr-2B3atbrIS84kkAo7VV7ElDHFn2Wn-2B0iZqwoFL1t1YCz2cR3xAkH3Dm45o7ag9bF7tv0L4g2t8v1fAwuiPylHAHkqFOEcwcDndKNNLE7ObrCi0wDxBijc-2FYVZU6-2F0yIfBAmiocABK2NEl2-2F-2FPMERnDYg-3D-3D	Get hash	malicious	HTMLPhisher	Browse	52.98.252.82
	Scan_1626227.pdf	Get hash	malicious	HTMLPhisher	Browse	52.98.178.242
	https://merzcon-my.sharepoint.com/:f:/g/personal/cnico_merzcon_onmicrosoft_com/EmjHG5K9dP9BtgBBeTTFhjABJRRLGM6IhVrJlwBTMWY8rg?e=pfkS1f	Get hash	malicious	Unknown	Browse	52.98.179.194
	https://netorg11230081-my.sharepoint.com/:f:/g/personal/info_onafastpacecontracting_com/Eoa77Lo8BXlOut3qDNQUDAQBBgmgCvIALxhAXrlqjk9Asw?e=2UKAY6	Get hash	malicious	Unknown	Browse	52.98.253.66
	https://anviict.com/?qvtvxymb	Get hash	malicious	HTMLPhisher	Browse	40.99.149.146
	https://tcmedcenter-my.sharepoint.com/:f:/g/personal/jessica_larson_tcmedcenter_org/Ek1X93Tsfp5KoiWqKbJ_ocQBqlE2wGVJqWkJh4H7mn0vuw?e=Yni2o7	Get hash	malicious	Unknown	Browse	52.98.253.50
	Revised_Executed_Docs_(Revised)_Afranco_Latecnovalvo_Required_Signature.docx	Get hash	malicious	HTMLPhisher	Browse	52.98.179.98
	https://tzr7wtjq.r.us-east-1.awstrack.me/L0/https:%2F%2Fclickproxy.retailrocket.net%2F%3Furl=https%253A%252F%252Fneamunit.ro%2F%2Fwinners%2F%2Fnatalie.gilbert%2FbmF0YWxpZS5naWxiZXJ0QGJlbm5ldHRzLmNvLnVr/1/010001927b41f2f4-541067bc-8926-4dcb-8f02-24fcf186dd1a-000000/pqvbHhvZKuWAqkc2J1BWoU1pciA=395	Get hash	malicious	HTMLPhisher	Browse	52.98.179.178
bg.microsoft.map.fastly.net	https://jpm-ghana-2024-election-conversation-with-oct-24.open-exchange.net/join-the-call?ml_access_token=eyJjb250ZW50Ijp7ImV4cGlyYXRpb25EYXRlIjoiMjAyNC0xMC0zMVQxNToyMDo1OS4wMDZaIiwiZW1haWwiOiJyZGVpdHpAdnItY2FwaXRhbC5jb20iLCJldmVudElkIjo0MjY3Mn0sInNpZ25hdHVyZSI6Ik1FVUNJQzhaMDJJblVZd0syUk9WRkdjL1pMNHRBbWo4RmwxdW9mQjhwZzRmSjZsMkFpRUE5d25HUFFoa3ZrdkM2MlJkQ3lkM09YbnFJZ0xlQTAwMDIxNlRWbG9Hb0ZjPSJ9	Get hash	malicious	Unknown	Browse	199.232.214.172
	Complete with Docusign_ Remittance Advice .pdf(1).eml	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	https://cosiosos.com.de/7i2ko/	Get hash	malicious	HTMLPhisher	Browse	199.232.210.172
	http://ffcu.online	Get hash	malicious	Unknown	Browse	199.232.210.172
	Setup.exe	Get hash	malicious	RedLine	Browse	199.232.214.172
	file.exe	Get hash	malicious	Unknown	Browse	199.232.214.172
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	199.232.214.172
	http://wesiakkaernten.fibery.io/@public/forms/gBNXdAWE	Get hash	malicious	Unknown	Browse	199.232.210.172
	wKj1CBkbos.exe	Get hash	malicious	Blank Grabber, Umbral Stealer	Browse	199.232.214.172
	https://storage.googleapis.com/inbound-mail-attachments-prod/5e015eec-2063-4653-b543-a2fdc4c2725e?GoogleAccessId=distribution-controller-prod@inbound-mail-attachments.iam.gserviceaccount.com&Expires=1761388993&Signature=Oqe%2BJFHcrdG7YCkrE3C6Zz6OLCYLhBuVvPPylkjCYGmey41qx66XjqVVSGCLAMzo5SzdjLX9iaWGDKggE5%2BSVyTp%2B4Pp9hiCYEhCbzJzRObttu74xvBHPG1HUvGwyhKfE3KbJMo6s3eIKayqjRRl9ive1ntsdNaFkXskMlbkDDitCjrgmc09BMh3GNgCZmS%2B%2F6W4Hs1%2FBX1s3JEpbIGaBotrI7KKcK%2Bk0eqEvy1FwgCCaSUDTZl1b6RyonBWqWQVoOT9UDFVSH5CfVKF4DfFfka0acdeYb2Y34WyRy8cCZlWDImJo52Hcg2wugU%2BJragJQbGJ2SdK6G4yy3Ak%2BGX%2FQ%3D%3D	Get hash	malicious	Unknown	Browse	199.232.210.172
hotmail.com	appdrivesound.exe	Get hash	malicious	SystemBC	Browse	52.101.68.33
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	104.47.18.161
	file.exe	Get hash	malicious	RedLine, SmokeLoader	Browse	216.40.34.41

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
INTERNEXABRASILOPERADORADETELECOMUNICACOESSABR	401K .pdf	Get hash	malicious	HTMLPhisher	Browse	96.7.168.138
	http://assets.website-files.com/65f02117700897a29c49fb10/65f7c129cb837c2310c7044e_tisamijujute.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	Oakville_Service_Update_d76b33a1-3420-40be-babd-e82e253ad25c.pdf	Get hash	malicious	HTMLPhisher	Browse	96.7.168.138
	2025+Policies_645622_929-5.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	https://dl.dropboxusercontent.com/scl/fi/95is2w1ywjvorzayt88dp/DKM-0192PDF.zip?rlkey=svoej4s4tb5lwbnvthtgrmokl&st=d99zdn1k&dl=0	Get hash	malicious	Abobus Obfuscator	Browse	96.7.168.138
	0438.pdf.exe	Get hash	malicious	Unknown	Browse	96.7.168.138
	Sars Urgent Notice.pdf	Get hash	malicious	Unknown	Browse	96.7.168.138
	la.bot.m68k.elf	Get hash	malicious	Unknown	Browse	200.220.206.173
	tue.bat	Get hash	malicious	Unknown	Browse	96.7.168.138
	https://dl.dropboxusercontent.com/scl/fi/kzw07ghqs05mfyhu8o3ey/BestellungVRG020002.zip?rlkey=27cmmjv86s5ygdnss2oa80i1o&st=86cnbbyp&dl=0	Get hash	malicious	Unknown	Browse	96.7.168.138
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://wetransfer.com/downloads/bd15c1f671ae60c5a56e558eb8cc43bf20241030150256/3b30cd5b9ce1ffb29d79c9118153941c20241030150256/70baef?t_exp=1730559776&t_lsid=6bd545a9-d09b-4abd-a317-124dbe9fe64d&t_network=email&t_rid=YXV0aDB8NjZlYWI0YTExODhmYzc1OGMzMmNiODIx&t_s=download_link&t_ts=1730300576&utm_campaign=TRN_TDL_01&utm	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://schiller.life/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	Derickdermatology.html	Get hash	malicious	Phisher	Browse	13.107.246.45
	https://www.mediafire.com/file/oyfycncwen0a3ue/DSP_Plan_Set.zip/file	Get hash	malicious	Unknown	Browse	13.107.42.14
	weekly-finances-report.xlsx	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	52.146.128.240
	https://cruparcellaire-my.sharepoint.com/:u:/g/personal/dani_grandrcu_com/EffQlMxf6g9Hiljl1DzmuTcB4-lo0t9ejs2hIBwCnQfe1g?e=TtenDj	Get hash	malicious	Unknown	Browse	20.44.10.122
	0T32Kz4dZU.exe	Get hash	malicious	Stealc, Vidar	Browse	20.44.10.123
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://wetransfer.com/downloads/bd15c1f671ae60c5a56e558eb8cc43bf20241030150256/3b30cd5b9ce1ffb29d79c9118153941c20241030150256/70baef?t_exp=1730559776&t_lsid=6bd545a9-d09b-4abd-a317-124dbe9fe64d&t_network=email&t_rid=YXV0aDB8NjZlYWI0YTExODhmYzc1OGMzMmNiODIx&t_s=download_link&t_ts=1730300576&utm_campaign=TRN_TDL_01&utm	Get hash	malicious	HTMLPhisher	Browse	150.171.27.10
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	13.107.246.45
	https://schiller.life/	Get hash	malicious	HTMLPhisher	Browse	13.107.246.44
	Derickdermatology.html	Get hash	malicious	Phisher	Browse	13.107.246.45
	https://www.mediafire.com/file/oyfycncwen0a3ue/DSP_Plan_Set.zip/file	Get hash	malicious	Unknown	Browse	13.107.42.14
	weekly-finances-report.xlsx	Get hash	malicious	KnowBe4	Browse	13.107.246.45
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	94.245.104.56
	https://1rkzzyapew.beefreedesign.com/EfTl-assets-eurmktdynamics	Get hash	malicious	Unknown	Browse	52.146.128.240
	https://cruparcellaire-my.sharepoint.com/:u:/g/personal/dani_grandrcu_com/EffQlMxf6g9Hiljl1DzmuTcB4-lo0t9ejs2hIBwCnQfe1g?e=TtenDj	Get hash	malicious	Unknown	Browse	20.44.10.122
	0T32Kz4dZU.exe	Get hash	malicious	Stealc, Vidar	Browse	20.44.10.123

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
1138de370e523e824bbca92d049a3777	https://cosiosos.com.de/7i2ko/	Get hash	malicious	HTMLPhisher	Browse	23.1.237.91
	weekly-finances-report.xlsx	Get hash	malicious	KnowBe4	Browse	23.1.237.91
	https://token.onelogin.com-token-auth.com/Xa0Y1MmVibVhmY0E5dnlabzhVK2w2MVo4bXZUM3RzTFBZU1FSUEYxRHlzb29tODRTUDQ4alBDR3Y1cWUvN1JvVzhtWGVkaHFaSG0rOVpUTVV1VjY2a3MvZDB6TktwTHhsRk9xdzQwQjV6YjIvcnA5MjFsaFJEamtNdXI5UXQ1Qm9lK0ZsZFd0TXI0R2JWWlVYeFFXa2pBaXZOKzR2QXRkUTd3dlBLNzUrQ1RweERVMmQ5ZHQwdjlKZ2dlS2tEVUF5UEE9PS0tdFFWWndQdklZQXNodTY1US0tUXAyU1llVHhDaXRTRjU1OVNWMXFNdz09?cid=2262276963	Get hash	malicious	KnowBe4	Browse	23.1.237.91
	Review_&_Aprove_Your_Next_Payroll84633.html	Get hash	malicious	Unknown	Browse	23.1.237.91
	https://www.guidedtrack.com/programs/n5snx1a/run	Get hash	malicious	Unknown	Browse	23.1.237.91
	file.exe	Get hash	malicious	Stealc, Vidar	Browse	23.1.237.91
	https://joseordenes.com/n/?c3Y9bzM2NV8xX3ZvaWNlJnJhbmQ9TUZCc01WYz0mdWlkPVVTRVIyODEwMjAyNFUxOTEwMjgxMA==N0123N%5BEMAIL%5D	Get hash	malicious	HTMLPhisher, Mamba2FA	Browse	23.1.237.91
	Biocon-In-Service Agreement.pdf	Get hash	malicious	EvilProxy, HTMLPhisher	Browse	23.1.237.91
	https://draxcc.com/	Get hash	malicious	Unknown	Browse	23.1.237.91
	Reff_Yazaki-europe_575810710108_ZnjKTIejsM.html	Get hash	malicious	Unknown	Browse	23.1.237.91
28a2c9bd18a11de089ef85a160da29e4	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://schiller.life/	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://jpm-ghana-2024-election-conversation-with-oct-24.open-exchange.net/join-the-call?ml_access_token=eyJjb250ZW50Ijp7ImV4cGlyYXRpb25EYXRlIjoiMjAyNC0xMC0zMVQxNToyMDo1OS4wMDZaIiwiZW1haWwiOiJyZGVpdHpAdnItY2FwaXRhbC5jb20iLCJldmVudElkIjo0MjY3Mn0sInNpZ25hdHVyZSI6Ik1FVUNJQzhaMDJJblVZd0syUk9WRkdjL1pMNHRBbWo4RmwxdW9mQjhwZzRmSjZsMkFpRUE5d25HUFFoa3ZrdkM2MlJkQ3lkM09YbnFJZ0xlQTAwMDIxNlRWbG9Hb0ZjPSJ9	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Derickdermatology.html	Get hash	malicious	Phisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Complete with Docusign_ Remittance Advice .pdf(1).eml	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://cosiosos.com.de/7i2ko/	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://myworkspacec1d73.myclickfunnels.com/onlinereview--9cb35?preview=true	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	https://zastromts.za.com/v3oX/#E	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	http://ffcu.online	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45
	Receipt.htm	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27 13.107.246.45

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.082893221654391
Encrypted:	false
SSDEEP:	6:6c8h/Zq2P92nKuAl9OmbnIFUt8vc8hNpZZmw+vc8hNpzkwO92nKuAl9OmbjLJ:6brv4HAahFUt8vbtZ/+vbtz5LHAaSJ
MD5:	D76FF3882EC12F135FA4202596F7DFB7
SHA1:	AC30283006DEBE4952A2A2D67E2F61367E44B4ED
SHA-256:	B89EF18F75A88FC2E463675ECAFBC80AFFAE98D1F9E51922CD46BB24DA6ABD44
SHA-512:	4DA49A01D0D5AC2812D95AA3B3FFE55B872048C7E8E5DF72227DA7D17E0DBBDC18539F1D36AB4A57E6C73071497C44180B4E67636A5A2BB6AF4500CAD44867CE
Malicious:	false
Reputation:	low
Preview:	2024/10/30-12:40:14.600 1330 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-12:40:14.603 1330 Recovering log #3.2024/10/30-12:40:14.603 1330 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.082893221654391
Encrypted:	false
SSDEEP:	6:6c8h/Zq2P92nKuAl9OmbnIFUt8vc8hNpZZmw+vc8hNpzkwO92nKuAl9OmbjLJ:6brv4HAahFUt8vbtZ/+vbtz5LHAaSJ
MD5:	D76FF3882EC12F135FA4202596F7DFB7
SHA1:	AC30283006DEBE4952A2A2D67E2F61367E44B4ED
SHA-256:	B89EF18F75A88FC2E463675ECAFBC80AFFAE98D1F9E51922CD46BB24DA6ABD44
SHA-512:	4DA49A01D0D5AC2812D95AA3B3FFE55B872048C7E8E5DF72227DA7D17E0DBBDC18539F1D36AB4A57E6C73071497C44180B4E67636A5A2BB6AF4500CAD44867CE
Malicious:	false
Reputation:	low
Preview:	2024/10/30-12:40:14.600 1330 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2024/10/30-12:40:14.603 1330 Recovering log #3.2024/10/30-12:40:14.603 1330 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.074089356198294
Encrypted:	false
SSDEEP:	6:6c8h/Iqyq2P92nKuAl9Ombzo2jMGIFUt8vc8hq11Zmw+vc8hqjRkwO92nKuAl9OU:6bCvv4HAa8uFUt8vbi1/+vb05LHAa8RJ
MD5:	73B96586C1CDD25688461FEFD12A6589
SHA1:	6CA6A9945AC0704E2779286ED887E7ACA26904E2
SHA-256:	EAED2A15C39A807DEDB15C9E6EE8885EF1A8BD509B774A9DDF8502CDEAF60730
SHA-512:	0ED7CEA4A193458698F56439C45C0510A1698D3D959752CF6B467B476E8B14AAEE737EC03A595C322E827EFD1B1CEB0F8088E01E88D7E4404445B83ADDF1E3C8
Malicious:	false
Reputation:	low
Preview:	2024/10/30-12:40:14.600 1bc0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-12:40:14.601 1bc0 Recovering log #3.2024/10/30-12:40:14.601 1bc0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.074089356198294
Encrypted:	false
SSDEEP:	6:6c8h/Iqyq2P92nKuAl9Ombzo2jMGIFUt8vc8hq11Zmw+vc8hqjRkwO92nKuAl9OU:6bCvv4HAa8uFUt8vbi1/+vb05LHAa8RJ
MD5:	73B96586C1CDD25688461FEFD12A6589
SHA1:	6CA6A9945AC0704E2779286ED887E7ACA26904E2
SHA-256:	EAED2A15C39A807DEDB15C9E6EE8885EF1A8BD509B774A9DDF8502CDEAF60730
SHA-512:	0ED7CEA4A193458698F56439C45C0510A1698D3D959752CF6B467B476E8B14AAEE737EC03A595C322E827EFD1B1CEB0F8088E01E88D7E4404445B83ADDF1E3C8
Malicious:	false
Reputation:	low
Preview:	2024/10/30-12:40:14.600 1bc0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2024/10/30-12:40:14.601 1bc0 Recovering log #3.2024/10/30-12:40:14.601 1bc0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\67264d1f-67b0-4e87-a20e-4f8e7e9ac1c6.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	508
Entropy (8bit):	5.051556790324759
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqrXhsBdOg2Hp9caq3QYiubxnP7E4T3OF+:Y2sRdsndMHpM3QYhbxP7nbI+
MD5:	465BC5DB18AECB35F3AC3984243D92FF
SHA1:	CC0CA27E760B5A6EB5F5D1A6A0B1F91E3D9B3981
SHA-256:	80E24DC1EC7D33A77A4001B1D22CFFFC774F349AD995986049BB21F5759521D0
SHA-512:	BC23B46B68D79545591E30E24329166C7EC44CBCF8507A2A2693489068FE9589F264AFA35ABBE7382B87E10EE1D420B2D67D88B3EC29E5D36D1FFB2AF352B8E0
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374866426074644","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":233586},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	508
Entropy (8bit):	5.051556790324759
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqrXhsBdOg2Hp9caq3QYiubxnP7E4T3OF+:Y2sRdsndMHpM3QYhbxP7nbI+
MD5:	465BC5DB18AECB35F3AC3984243D92FF
SHA1:	CC0CA27E760B5A6EB5F5D1A6A0B1F91E3D9B3981
SHA-256:	80E24DC1EC7D33A77A4001B1D22CFFFC774F349AD995986049BB21F5759521D0
SHA-512:	BC23B46B68D79545591E30E24329166C7EC44CBCF8507A2A2693489068FE9589F264AFA35ABBE7382B87E10EE1D420B2D67D88B3EC29E5D36D1FFB2AF352B8E0
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13374866426074644","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":233586},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.5","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G","CAYSABiAgICA+P////8B":"Offline"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	4509
Entropy (8bit):	5.238905421243819
Encrypted:	false
SSDEEP:	96:QqBpCqGp3Al+NehBmkID2w6bNMhugoKTNY+No/KTNcygLPGLLU59BzbwYdA1fbwZ:rBpJGp3AoqBmki25ZEVoKTNY+NoCTNLa
MD5:	FEB376BA894982CB984A03AB482A5173
SHA1:	71ADAAAE5157C6D427E9A3E19A37CC6FDF0958B2
SHA-256:	A7F6CDA7BC8EF7775C247EDC0C63E1A24B8F06F49179719899973DE5E0A00BA7
SHA-512:	5077C0EC4BA0FB617274355148F2879D2A88533DD891BBAB6AE0B7DEF01B4017541DAAAFBB690F7AF68697D3365E6E0EA20C013728C68EC44E55669EAB281DFB
Malicious:	false
Reputation:	low
Preview:	*...#................version.1..namespace-.1a.o................next-map-id.1.Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/.0.K..r................next-map-id.2.Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/.1.m.Fr................next-map-id.3.Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.2.8.o................next-map-id.4.Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/.3.A-N^...............Pnamespace-047a745d_5c98_4926_b446_942fb948d072-https://rna-resource.acrobat.com/-j..^...............Pnamespace-bc60f291_faa7_4492_8b22_e186b4ce62c1-https://rna-resource.acrobat.com/[.\|.a...............Snamespace-bdf2fbfe_e08b_407d_8a81_9a6094e373a0-https://rna-v2-resource.acrobat.com/....a...............Snamespace-24b9c7f4_3e31_4d11_a607_ac91d6485c9e-https://rna-v2-resource.acrobat.com/.W.@o................next-map-id.5.Pnamespace-8fb46ac3_c992_47ca_bb04_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.142310632798112
Encrypted:	false
SSDEEP:	6:6c8e4yq2P92nKuAl9OmbzNMxIFUt8vc8es1Zmw+vc8eDRkwO92nKuAl9OmbzNMFd:6bgv4HAa8jFUt8vbF1/+vbu5LHAa84J
MD5:	6EFA43FFBA78C1440CFF2565C4E1D355
SHA1:	6EB87D6B26E275C790C9DC10E7205B7F1A59E10F
SHA-256:	55B2AA51C750017A161D29291EC147FC444CCCE649BE6B3005C48CE791808F5A
SHA-512:	DC6FF94CB7E03F11D2C639EB11C4281B1944C4AE54CA6C623390DCFB5CCD81B7A557CDF49621A32E8E686F8960EBC51EE9A88A39F4E765A26C6210CD47BA10BD
Malicious:	false
Preview:	2024/10/30-12:40:15.283 1bc0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-12:40:15.292 1bc0 Recovering log #3.2024/10/30-12:40:15.295 1bc0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	326
Entropy (8bit):	5.142310632798112
Encrypted:	false
SSDEEP:	6:6c8e4yq2P92nKuAl9OmbzNMxIFUt8vc8es1Zmw+vc8eDRkwO92nKuAl9OmbzNMFd:6bgv4HAa8jFUt8vbF1/+vbu5LHAa84J
MD5:	6EFA43FFBA78C1440CFF2565C4E1D355
SHA1:	6EB87D6B26E275C790C9DC10E7205B7F1A59E10F
SHA-256:	55B2AA51C750017A161D29291EC147FC444CCCE649BE6B3005C48CE791808F5A
SHA-512:	DC6FF94CB7E03F11D2C639EB11C4281B1944C4AE54CA6C623390DCFB5CCD81B7A557CDF49621A32E8E686F8960EBC51EE9A88A39F4E765A26C6210CD47BA10BD
Malicious:	false
Preview:	2024/10/30-12:40:15.283 1bc0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2024/10/30-12:40:15.292 1bc0 Recovering log #3.2024/10/30-12:40:15.295 1bc0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241030164018Z-181.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 117 x -152 x 32, cbSize 71190, bits offset 54
Category:	dropped
Size (bytes):	71190
Entropy (8bit):	3.4960710846159433
Encrypted:	false
SSDEEP:	384:AOBxGSo4a1VR9bdphYpwlrJsyuTHfhwaJmsN:DXanR9bnlrqywHfhwOmsN
MD5:	EB69472D2C0E7E17C9ADCA237D92DADE
SHA1:	A503C10E9A2973B1F65B21CD088E26C2E204E5BC
SHA-256:	F76EA6D2A8A1E1A9E0A9848290D5D3BEFCADABF4E90F7B9E5D4DD0A5DB7F5F94
SHA-512:	0B30BAC7F8E314B74122295355C37186C36BD29634F4CBD9FAD8004D5FFC8FF4A07A0E572AE96E512E42212073AB4C1AA68012963A348DFC43E19248B4509829
Malicious:	false
Preview:	BM........6...(...u...h..... ..........................]...Y...Z...[...[...\...\...\...]...^..._..._...`...a...a...a...c...c...d...d...d...e...f...g...h...h...h...i...j...j...k...l...l...l...m...n...n...n...p...q...r...r...r...s...s...s...t...w...x...x...y...y...x...y...z...{...{...}...~.......~...~...............................................................................................................................................................................................................................]...[...Z...[...[...\...\...\...]...^..._..._...`...a...a...a...c...c...d...d...d...e...f...g...h...h...h...i...j...j...k...k...l...l...m...n...n...n...p...q...r...r...r...r...s...v...w...v...v...v...w...x...x...y...z...{...{...{...\|...\|.......................................................................................................................................................................................................................................]...^...[

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7464849065063066
Encrypted:	false
SSDEEP:	3:kkFklsAfllXlE/HT8ksvNNX8RolJuRdxLlGB9lQRYwpDdt:kK1xT8HNMa8RdWBwRd
MD5:	A066C8AA3C116766CA862226CDB3D8C4
SHA1:	B639B3D5A72D4170CEB058220C02792687CC9D27
SHA-256:	C5FEAAE866AA4B658782AE0B1448B06AD9396DCE9D2CA01D32911A0C30DA0A35
SHA-512:	6EA07C4FEDA9DE160C275EC5F492F912579DA214231C0D66D6A28F7CEB8B5AAA99262A63DCCF679BB76B724CE9FECBA062B5F2289AA4C9FDD3CECDBA0F2B7E91
Malicious:	false
Preview:	p...... ........_.Cl.*..(....................................................... ..........W....x...............o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	328
Entropy (8bit):	3.2478978672539016
Encrypted:	false
SSDEEP:	6:kK/9UswD8HGsL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:2DImsLNkPlE99SNxAhUe/3
MD5:	7E8580A8868746072B6C4F8549FA7E58
SHA1:	5070E99536613189250F88043EBD6BB164CD0293
SHA-256:	FE952A825123FB99FA88213EE8185FF579DD5F1C6C9DA305F5D0DAC05742BFC2
SHA-512:	B63B6F0D6992227539907E055451F50836D0056373480617DF80138B27812C899A84106C63AF30C9C8849C81E377348768542593DB74A2D59F26194D22812979
Malicious:	false
Preview:	p...... ........]z...*..(....................................................... ........G..@.......&......X........h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	227002
Entropy (8bit):	3.392780893644728
Encrypted:	false
SSDEEP:	1536:WKPC4iyzDtrh1cK3XEivK7VK/3AYvYwgF/rRoL+sn:DPCaJ/3AYvYwglFoL+sn
MD5:	87EDBEE38F56C20298F25D5D3D4D1B5C
SHA1:	7F904E9615AC3186A87472EF366DD8202855B0B7
SHA-256:	A46B56D3ABCC137D1872DDF20EED4BCD7D04518282282ADB32DDCCF70D7FFBA6
SHA-512:	BBEBC1FCD5BC9AE042DD5782425BA8C47BF3EAC283B2487FC4E3FF6BF8101306DAB081E5135594165D4DC1AC120FF125AADBC5B3FFE7C646183C04DF77865E0D
Malicious:	false
Preview:	Adobe Acrobat Reader (64-bit) 23.6.20320....?A12_AV2_Search_18px.............................................................................................................KKK KKK.KKK.KKK.KKK.KKK.KKK@........................................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.............................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.........................KKK.KKK.KKK.KKK0....................KKK.KKK.KKK.KKK`....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK.KKK.....................................KKK.KKK.....................KKK.KKK.KKK0................................KKK.KKK.....................KKK`KKK.KKK.............................KKK@KKK.KKK.....................KKK.KKK.KKK.KKK@....................KKK.KKK.KKK.KKK`........................KKKPKKK.KKK.KKK.KKK.........KKKPKKK.KKK.KKK.KKK.............................KKK`KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK.KKK

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.321501950485583
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJM3g98kUwPeUkwRe9:YvXKXcE3z5YpW7YGMbLUkee9
MD5:	626B1F547CA2C6C4F836A0D25A078ABD
SHA1:	29764AFD19C39655FE888823F1650D71CF5303D6
SHA-256:	6E192B4D767F3B2879EAD8236845B6D545C30DC493607DFFEDB8DB44F4C02505
SHA-512:	11B7C0FD04835350E1C2B10625A74EDECA7D68D4DD1E3E2C0B9900138B7AC49CF271D18921B9AFC49F87DBE84EBCE142E2D4E9B3820980B46BB350EEB882AC6A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.259408042192552
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfBoTfXpnrPeUkwRe9:YvXKXcE3z5YpW7YGWTfXcUkee9
MD5:	C8056AE795CE6095E90A67FC494AE58D
SHA1:	38C8D969E3C5E4CA998F5D0A0A90C4EF72BC7B83
SHA-256:	1A4E3E3FFF3AEBBE6B71A347B2C4B64B911C9A1603E3C1619A6E887ED5A22991
SHA-512:	D5AB9836A601A692D378F665416B6639C3D561ACAA68D0FF1D834AF6819E6C3075474C107D6B13EB40207C0A58A806EA409790837606D1F9FC8E1F3ECF34B3BB
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.237258135769622
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfBD2G6UpnrPeUkwRe9:YvXKXcE3z5YpW7YGR22cUkee9
MD5:	4FCEC564BD77F4FA8017E01F1ECE9E72
SHA1:	A665F887EBA0434F367D6D797D6A023488BE18E5
SHA-256:	DF219BD12E5791DB13421D5D1A6CF0B5911F9B959C0A6E1E36E4208E3C533AE0
SHA-512:	F4258C3DDCA450D035D5D70322267E8173999522C38961CD3E9AD0873ADE56BAED92B67B0B67456F715FD960E62AC8D1656A0C9CB6246DC5E9B04D9345680A14
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.298926005829638
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfPmwrPeUkwRe9:YvXKXcE3z5YpW7YGH56Ukee9
MD5:	CF3EDA482430C3ABDB937F4243E1BB53
SHA1:	A9742C46AD8F0F5894E978A02F267FD612E510E2
SHA-256:	4CC86AA5697C8965F2C42585C0233B205A43B251C59783566F58F30694D0DD71
SHA-512:	3155342188AA3D174027573C1641F09262F2FC175A489590C16BCAE914E30C96E5333A012C5B4BC0BF825ED0F7F0FCCF1E9AA4829766914702C680FE2F928436
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1055
Entropy (8bit):	5.658800700116675
Encrypted:	false
SSDEEP:	24:Yv6Xcni1pLgEscLf7nnl0RCmK8czOCCSe:Yv81hgGzaAh8cv/e
MD5:	4DA4B28A65C689837202B93EF5866B6F
SHA1:	7FADCFBE6134B412E3BA9A126A681A578E720AD0
SHA-256:	6EC406BEFC37E8C9A90F202444BAFDFD95578FE2D124AFD2A4D8C7E95198F259
SHA-512:	76A63E0C86869B3217ED1B7D02B83B02A59997C0E6F63CB55D23DD6BB696B1ED60E63E1A84A522C12339B618070941D0543D66BBFA48E4BCFD33FB0D7C41BE47
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_1","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"eb1a4bce-8215-46f1-b44c-154b21a85d60","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNhdElkIjpudWxsfQ==","dataType":"application\/json","encodingScheme":tr

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1050
Entropy (8bit):	5.651252891841185
Encrypted:	false
SSDEEP:	24:Yv6XcniZVLgEF0c7sbnl0RCmK8czOCYHflEpwiVH:Yv8ZFg6sGAh8cvYHWpwe
MD5:	D6E4625EF1810587B2A3CA93C8620F6A
SHA1:	27F4F140436C006371620CB1DE026996C1AE59B7
SHA-256:	BB29E329341FE5EA2516976B1337F73723A3F682091B900CA1602CB8051252D8
SHA-512:	84CF1CAD746765B9E9DBC0D66AAD6B1271256D5B2293024E8C547D75DC7A332840ADE5DF88C25BD48A9F0368C0EE930F1BA6B6FC94495A0A98147A46F7001B58
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Disc_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_0","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"0924134e-3c59-4f53-b731-add558c56fec","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Disc_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkNvbnZlcnQsIGVkaXQgYW5kIGUtc2lnblxuZm9ybXMgJiBhZ3JlZW1lbnRzLiJ9LCJ0Y2F0SWQiOm51bGx9","dataType":"application\/json","encodingScheme":true},"

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.247477311321179
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfQ1rPeUkwRe9:YvXKXcE3z5YpW7YGY16Ukee9
MD5:	C14BCE65513BDDA45E902799D6B199CD
SHA1:	F90C5B3C55C109601BC015DE55590DD64A403955
SHA-256:	82287F58031D83ACF7E17A65D35E5726AA76F9EADBD48B5E6963321D6D0CE8BE
SHA-512:	40763730CAA61D93E928DB230DA0B363C78BB086D6BE10F9E8B7BD2CE57076534987A069C3CE4774B57F83DFD72AEAC844CD9688D7544B032A1FEB85F5A4523C
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1038
Entropy (8bit):	5.645709008483679
Encrypted:	false
SSDEEP:	24:Yv6XcniI2LgEF7cciAXs0nl0RCmK8czOCAPtciBH:Yv8Iogc8hAh8cvA1
MD5:	A8DFF1122C931E69D570F52C835F3A6D
SHA1:	6E3D0A63A8A7882520ED7C83C1063AB80687D271
SHA-256:	8A015E03B148694AC74CE60D0689CDA4A176A2C20C4F85DFAD4D21EB65626FD5
SHA-512:	B41B79D1C6841D082BCCA1BFFAEEABBA4730280EA6655C88D4F4CDB26C95D944CC11E43C241BBDF1F6B30595164C95CC65A746CBD1B43E356483C603712EC11A
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Edit_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85534_264855ActionBlock_1","campaignId":85534,"containerId":"1","controlGroupId":"","treatmentId":"49d2f713-7aa9-44db-aa50-0a7a22add459","variationId":"264855"},"containerId":1,"containerLabel":"JSON for DC_Reader_Edit_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVkaXQgdGV4dCwgaW1hZ2VzLCBwYWdlcywgYW5kIG1vcmUuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1744

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1164
Entropy (8bit):	5.697782691934676
Encrypted:	false
SSDEEP:	24:Yv6XcniAKLgEfIcZVSkpsn264rS514ZjBrwloJTmcVIsrSK5H:Yv8AEgqprtrS5OZjSlwTmAfSKx
MD5:	53EAAE0B8BC23D2DB7104D7254E28335
SHA1:	2451399EB5F129AD370D105C811360A3E13AC8AC
SHA-256:	D92617BF1F339785924FE849B36747ED21B492148B18037C56B5C1B400E5C58D
SHA-512:	D80E7AB8A76FCDBA16A8E9333777A8548FA801391A190C90B9E45191436EA0EFE54ECB35CB632CA6649CC37D9CD577E8A09C618770995C164B2FF0191C26ED21
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Home_LHP_Trial_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"85531_264848ActionBlock_0","campaignId":85531,"containerId":"1","controlGroupId":"","treatmentId":"ee1a7497-76e7-43c2-bb63-9a0551e11d73","variationId":"264848"},"containerId":1,"containerLabel":"JSON for DC_Reader_Home_LHP_Trial_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IlRyeSBBY3JvYmF0IFBybyJ9LCJ1aSI6eyJ0aXRsZV9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjE1cHgiLCJmb250X3N0eWxlIjoiMCJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEzcHgiLCJmb250X3N0eWxlIjoiLTEifSwidGl0bGUiOiJGcmVlIHRyaWFsIiwiZGVzY3JpcHRpb24iOiJHZXQgdW5saW1pdGVkIGFjY2VzcyB0b1xucHJlbWl1bSBQREYgYW5kIGUtc2lnbmluZ1xudG9vbHMuIn0sImJhbm5lcl9zdHlsaW5nIjo

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.254687415023287
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfYdPeUkwRe9:YvXKXcE3z5YpW7YGg8Ukee9
MD5:	745B4796AD8769F3659F28E334D104A5
SHA1:	927B9704F5A782281A05B6D54473B3B750F2C4B5
SHA-256:	C6BDCC5318087B3394B0C4C8CC2EAF9DC37880304B654A36802E22B9455F4721
SHA-512:	3FBA336BDD639F15FBFF40497B0B9F63620EC94912C472A1A2B71410D6A96EA480E7140C72659DA7CE69478017AD0E4EC688E40BD588B8405ABBA44180BBBF8F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1395
Entropy (8bit):	5.776421847020936
Encrypted:	false
SSDEEP:	24:Yv6XcniPrLgEGOc93W2JeFmaR7CQzttgBcu141CjrWpHfRzVCV9FJNv:Yv8PHgDv3W2aYQfgB5OUupHrQ9FJx
MD5:	28876AB5058D035EBD13DFCD5ED3F8E2
SHA1:	A152420D93665A638D8670F1BB694C6A1B739B59
SHA-256:	32885BBA6671CFDA927D425CCA85ACEA1912DC44ED514706A1510978DF8D33D1
SHA-512:	D0AA750EBAD80881E43672EC564290013E5E8AFEAACCC524558CABA0A354D4A120C2A97BC7FFC6A23E76A8D79EDDEEC95F38D0CF5FAE8EB529FD5656346ADD18
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_RHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"57802_176003ActionBlock_0","campaignId":57802,"containerId":"1","controlGroupId":"","treatmentId":"d0374f2d-08b2-49b9-9500-3392758c9e2e","variationId":"176003"},"containerId":1,"containerLabel":"JSON for Reader DC RHP Banner","content":{"data":"eyJjdGEiOnsidHlwZSI6ImJ1dHRvbiIsInRleHQiOiJGcmVlIDctRGF5IFRyaWFsIiwiZ29fdXJsIjoiaHR0cHM6Ly9hY3JvYmF0LmFkb2JlLmNvbS9wcm94eS9wcmljaW5nL3VzL2VuL3NpZ24tZnJlZS10cmlhbC5odG1sP3RyYWNraW5naWQ9UEMxUFFMUVQmbXY9aW4tcHJvZHVjdCZtdjI9cmVhZGVyIn0sInVpIjp7InRpdGxlX3N0eWxpbmciOnsiZm9udF9zaXplIjoiMTQiLCJmb250X3N0eWxlIjoiMyJ9LCJkZXNjcmlwdGlvbl9zdHlsaW5nIjp7ImZvbnRfc2l6ZSI6IjEyIiwiZm9udF9zdHlsZSI6IjMifSwidGl0

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.238545939398022
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfbPtdPeUkwRe9:YvXKXcE3z5YpW7YGDV8Ukee9
MD5:	78EBE4B8915439831FCDBE8E48BAFE5D
SHA1:	A6186CE332F15637CD61D3297B3162B2715DAAEB
SHA-256:	36C3E5D0CE29D5431636567288466FD901BCFD9412957011E22460CE3D3BC64C
SHA-512:	4B9A5AA2719813FEBCC4FFF78F710A1287E9B48ABB5AEB3A4DA49C678DA596EDEDB8D6D055A16AAC4115E1831A0D082297EA0AC7408045BF788295CF444B07F4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.239277584226721
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJf21rPeUkwRe9:YvXKXcE3z5YpW7YG+16Ukee9
MD5:	792DEC6EDDEB59B7BAA69B25108B40FE
SHA1:	88312936B21262B79DD5959633B684CBAA157AA4
SHA-256:	498054BC3E0AB5141FC1A901F1A6FDE8E24F2B0CF15009AC9823D4440D786BCE
SHA-512:	A3757A6AA6AEC2D90D7556C8E298EC0BA46C218DE436A1E2B606A2ECA28CBD4FC121034817627CB18DE7AA7913B76412267951299E24F7D45F03F4A34CD486DC
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1026
Entropy (8bit):	5.630831191124931
Encrypted:	false
SSDEEP:	24:Yv6XcnitamXayLgE7cMCBNaqnl0RCmK8czOC/BSe:Yv8BBgACBOAh8cvMe
MD5:	ABC0BCD4A55A0368E13B3CF52E2DFA0B
SHA1:	6B7C47879D290ED04F0740522D27A8F8690FE0CF
SHA-256:	A3292818A5C0E3FE271199B6B546DE152F4C99EA15A840A00448618E8E640A73
SHA-512:	BBAEA8B4AB96E9893A6E632031CBA2D7BEB1849794BFA77D4F3CBD5E9A6AB9C07EB40D04CE20B49BF8E5E58F2BDCA732B548BBE613114B9E329AC5B65A89FAD0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"92038_285529ActionBlock_0","campaignId":92038,"containerId":"1","controlGroupId":"","treatmentId":"6291f52b-6cb0-4d31-bc46-37ce85e9eb25","variationId":"285529"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"application\/json","encodingScheme":true},"endDTS":1751323379000,"s

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.2147664576402875
Encrypted:	false
SSDEEP:	6:YEQXJ2HXcY/3zY+FIbRI6XVW7+0YjPqoAvJfshHHrPeUkwRe9:YvXKXcE3z5YpW7YGUUUkee9
MD5:	202DFA3E2BB99A0E865D9D3E3B247658
SHA1:	16C4E2A4D83931B5EFDC2F5CF2081E7AEA21D038
SHA-256:	D90EA523E4330B675EDE95901FE929930A8B10658BBED7F027F3C63484EB9DAE
SHA-512:	B2F256E1EAF0D979C1DEE2A9B5D0093BD39612CD400536F0C1FC383EBD658FEAC2CBA4739C6D67389786D90DCB74AC8F3E5E37A77304AAFECB47204FA6652E93
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	782
Entropy (8bit):	5.361004326104958
Encrypted:	false
SSDEEP:	12:YvXKXcE3z5YpW7YGTq16Ukee1+3CEJ1KXd15kcyKMQo7P70c0WM6ZB/uhWT:Yv6Xcni+168CgEXX5kcIfANhe
MD5:	C82182F963960DEBD355294FF001E226
SHA1:	FD43F8D65CCD02F878395027254788B6A46AD75D
SHA-256:	7931719327209C9E69598E350CBFEBBBAEC1914D37AB922BD5293F9C3369AA2E
SHA-512:	BFF225D5CAF29A600B03EF06B54A088C770F415C3334DD51EB3C33B4ADB80EDB4177D463642452735D30DD7B0916B532C2748D7D6C3C5EE97E09C9AFD5C6618E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"f8479071-adf7-4ebc-9c84-5f2c17472161","sophiaUUID":"FC1B1BAD-CA24-4641-AA35-0D02D0C204D1"},"encodingScheme":true,"expirationDTS":1730481442342,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"Edit_InApp_Aug2020"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"20360_57769ActionBlock_0","campaignId":20360,"containerId":"1","controlGroupId":"","treatmentId":"3c07988a-9c54-409d-9d06-53885c9f21ec","variationId":"57769"},"containerId":1,"containerLabel":"JSON for switching in-app test","content":{"data":"eyJ1cHNlbGxleHBlcmltZW50Ijp7InRlc3RpZCI6IjEiLCJjb2hvcnQiOiJicm93c2VyIn19","dataType":"application\/json","encodingScheme":true},"endDTS":1735804679000,"startDTS":1730306422376}}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2818
Entropy (8bit):	5.128849896223989
Encrypted:	false
SSDEEP:	24:YsQ4PXAEHaeYBayurJ0WCCOq0gMGpSjCfMUjatc8j0SU0XA1k2UVeP2LS+tf5EPu:YsQIfxVOqBpz9YPdX9PePItfSCCb9hy
MD5:	ACE00D6FE6CEB560E05002AECC5F8CF9
SHA1:	34644D706B419CE83AF4360F4C266794A9CF9915
SHA-256:	4DF6865820FBACDAA90DC81858A95338DA09E3E3FCF6142E8DE0375B14C9E94D
SHA-512:	94610535A8B58403A1DFCEFB6F849F31960231C996DDD3B4F32D75E398D3D128B4EF9EEE1B928C2F866E3658E401087E83EE9F20ADC325ECE53B6D810D66DA9A
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"3688b827df1b6b201424594b74fa9d61","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":1050,"ts":1730306422000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"10f49e0d611bd70c3af62406f63279d2","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":1164,"ts":1730306421000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"190ee63271642e8981245cee32534913","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1026,"ts":1730306421000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"77555ab5a6d6b05f4df375eb32b47be5","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1055,"ts":1730306421000},{"id":"DC_Reader_Edit_LHP_Banner","info":{"dg":"df31005bf0cdcd0feb225b6cf4e6507b","sid":"DC_Reader_Edit_LHP_Banner"},"mimeType":"file","size":1038,"ts":1730306421000},{"id":"Edit_InApp_Aug2020","info":{"dg":"f46f47c720303b559e79ee0e71bd05a1","sid":"Edit_InApp_Aug2020"},"mimeType":"file","size":782,"ts":17

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 19, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 19
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	0.9850341634415926
Encrypted:	false
SSDEEP:	48:TVl2GL7ms6ggOVpT2tLYzutYtp6Ps2tLl:vVmsCOVp2aQ
MD5:	2E049CFD9DE27C719F0C423186CEF081
SHA1:	28A16E66E6D6AC3AB874CF321AFFAF21C869AC5F
SHA-256:	A92CE084B25A5AD3CBE21A3757D52536F768682017A5EBA47C00048235F4BFB8
SHA-512:	32C52DE0C6DD21E12A68C404E4BD05E9B7AE8DFB651CCFE007DEEBC50E621782F8409491CD2E16C1904966F2354DEA6A11BA31092799CD470D7B274E0A69D71A
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.339094221602735
Encrypted:	false
SSDEEP:	48:7MWGgOVpT2tLvzutYtp6PMDqll2GL7msH:7ROVp7a5qVmsH
MD5:	DE030B00C3912F7E4E7ABF1CC1C066DB
SHA1:	6A1320EDB365E4BDD051B865C5F4E5BFFF98CF9C
SHA-256:	D4EF6BC4CE8EE92B6853A931E8A2F1335484A6DCC90298FA755D4456C2B48CC0
SHA-512:	C9C965573B54367F1DB5D894C819457312CD976390D312417B0A64DFD6AA5BED7A0CA57BFAA3D3C401C9EDF6FCBF753BD5D3C6C39C4446F110E631BA84DBC69A
Malicious:	false
Preview:	.... .c.....H.u.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................j...#..#.#.#.#.#.#.#.#.7.7........................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\MSI9d4b4.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.511206980872271
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K84Oq3c:Qw946cPbiOxDlbYnuRK7c
MD5:	2C6F286FA78204A2785353525F2C463B
SHA1:	AE1084ACAE8158C0E52180E6009594D9F81302F6
SHA-256:	6102A273A96D23C881891D5B8BF079C90BAD389D07EDA575A8A681E2EBEEF981
SHA-512:	D35C324F2221020F5CB946C3E3FEFEE54BC8883B1648E34F238289AEE2135325487AFFD1CDD641A2254825BDE3D7F3037362B1F5F465159530130D51D18F3CA5
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .3.0./.1.0./.2.0.2.4. . .1.2.:.4.0.:.2.5. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\A9fgnliz_cmbn9f_2w4.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PDF document, version 1.6, 0 pages
Category:	dropped
Size (bytes):	358
Entropy (8bit):	5.060267974071301
Encrypted:	false
SSDEEP:	6:IngVMrexJzJT0y9VEQIFVmb/eu2g/86S1kxROOL6x0v6x4bmCSyAAO:IngVMre9T0HQIDmy9g06JX76Sv6+alX
MD5:	2DFD59FA89200847550E7EBFCD29C0D1
SHA1:	1B9EC7741D3BD1EE93396BC1D4194E4EDBDA88F7
SHA-256:	32CEE0D7272E98C681CB3CCFB392E79363B9A3A1EECE588E8E731661F89A65E9
SHA-512:	124FE1F9D4E3992DA7BE67ABC342694F234F4C787506576DCB526BC3A4C8BFC1F654BD4242624E7632E32591FDB8521DE7CD89EB94DABDAE10AA78803653E201
Malicious:	false
Preview:	%PDF-1.6.%......1 0 obj.<</Pages 2 0 R/Type/Catalog>>.endobj.2 0 obj.<</Count 0/Kids[]/Type/Pages>>.endobj.3 0 obj.<<>>.endobj.xref..0 4..0000000000 65535 f..0000000016 00000 n..0000000061 00000 n..0000000107 00000 n..trailer..<</Size 4/Root 1 0 R/Info 3 0 R/ID[<D990F34AB9917F4A824D8D26F6DAB840><D990F34AB9917F4A824D8D26F6DAB840>]>>..startxref..127..%%EOF..

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-10-30 12-40-15-863.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.376360055978702
Encrypted:	false
SSDEEP:	384:6b1sdmfenwop+WP21h2RPjRNg7JjO2on6oU6CyuJw1oaNIIu9EMuJuF6MKK9g9JQ:vIn
MD5:	1336667A75083BF81E2632FABAA88B67
SHA1:	46E40800B27D95DAED0DBB830E0D0BA85C031D40
SHA-256:	F81B7C83E0B979F04D3763B4F88CD05BC8FBB2F441EBFAB75826793B869F75D1
SHA-512:	D039D8650CF7B149799D42C7415CBF94D4A0A4BF389B615EF7D1B427BC51727D3441AA37D8C178E7E7E89D69C95666EB14C31B56CDFBD3937E4581A31A69081A
Malicious:	false
Preview:	SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:961+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=03c9683a-b9c7-43c5-80d5-ee4bbf74fb26.1696428955961 Timestamp=2023-10-04T16:15:55:962+0200 ThreadID=6596 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.3457080784914925
Encrypted:	false
SSDEEP:	384:VCmX22bcN388jFngxQYj2cjKClCsyrHz5762wsQ/1eqLh5qqAdeMIU1EN/VHFQo3:okt
MD5:	249D439D57CA533CCC70010AA6CED676
SHA1:	AB3FBC2B3247A56C839B428FE9BF1C892783F597
SHA-256:	41FF7A2AD2533B2C91CD72D8AF7E509B4E2D157574C3941D1FAF75FEC89AD296
SHA-512:	B44E6213200D42AE13D3136B2995AA69CBE6CDA23E910F92BEBF8DF241290EB0D8632ECAB70F3670FBBF683A36E9FEB7ED82C612E5869742514F2B1ED609B55F
Malicious:	false
Preview:	SessionID=48fe9a1c-be13-4e77-8fc6-5f2f347b091b.1730306415902 Timestamp=2024-10-30T12:40:15:902-0400 ThreadID=4124 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=48fe9a1c-be13-4e77-8fc6-5f2f347b091b.1730306415902 Timestamp=2024-10-30T12:40:15:903-0400 ThreadID=4124 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=48fe9a1c-be13-4e77-8fc6-5f2f347b091b.1730306415902 Timestamp=2024-10-30T12:40:15:903-0400 ThreadID=4124 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=48fe9a1c-be13-4e77-8fc6-5f2f347b091b.1730306415902 Timestamp=2024-10-30T12:40:15:903-0400 ThreadID=4124 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=48fe9a1c-be13-4e77-8fc6-5f2f347b091b.1730306415902 Timestamp=2024-10-30T12:40:15:903-0400 ThreadID=4124 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	29752
Entropy (8bit):	5.392203059819858
Encrypted:	false
SSDEEP:	768:GLxxlyVUFcAzWL8VWL1ANSFld5YjMWLvJ8Uy++NSXl3WLd5WLrbhhVClkVMwDGbG:a
MD5:	2CC087938DFFB520E90A0CC20D4D8FD7
SHA1:	DB3CF674128DBC0A4EBFE18DE0E6F5E1B5B375F9
SHA-256:	B046A01DFAE505471B9FD77CBA632D22CB8D520A8CE06432ADFC562AE6C525F9
SHA-512:	E28030293345FCCC5879AADD69E643E1D7F356A8B54A90FDFDEB83D17069D9C0CA3F9292E82DA5AF3FF815AE0066DA3FDCE7DD3555CB3E8157DA6C3F80655CE7
Malicious:	false
Preview:	04-10-2023 02:39:31:.---2---..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : *************************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : ***********************************..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Starting NGL..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..04-10-2023 02:39:31:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..04-10-2023 02:39:31:.Closing File..04-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\1646fd41-2fde-4562-a887-b568d9eee988.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:/xA7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07/WLcGZtwYIGNPJe:JVB3mlind9i4ufFXpAXkrfUs0jWLcGZa
MD5:	22B260CB8C51C0D68C6550E4B061E25A
SHA1:	DF9A5999C58A8D5ADBB3F8D1111EAB9E4778637E
SHA-256:	DAB1231CC22DAB591EBB91C853E3EE41C10D3DA85D2EFAB67E9A52CCB3A3A5A0
SHA-512:	503218D83C511A7F7CEA8BC171921D1435664B964F01A8C77DC0F4D0196DD2815D9444DA98278E1369552D004E9B091DD9B89663209F0C52ACB97FCE6AFFE7A9
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\1d4f3489-a0a4-4209-a64e-1fd07f895386.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/RwYIGNP4meWL07oXGZ1dpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:ZwZG6XWLxXGZN3mlind9i4ufFXpAXkru
MD5:	3E2D879F2C17CB927D259AABADA22E63
SHA1:	244E867380AF3F02DA05F1545B9EB4C5AF4344F1
SHA-256:	859600ADE2AC3561FB00A165DD68DCFA12819776AC96A43BE9C6A775782B042A
SHA-512:	BBC0B0603988A51E3A0B03FEF585EA3C79C4F0ADD0EAE8A96C010F085FF1BBDD28F677EFC56CA638B282602C4A60190E0C8BAD93017923B1E7F549F48294C0F1
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\57330005-a393-44b5-84fa-d222e94025ae.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Local\Temp\acrocef_low\de862ffb-9def-452d-a3a3-17ec8d7ae7fa.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.982142979269886
Encrypted:	false
SSDEEP:	48:87d4T8YAH7idAKZdA19ehwiZUklqehBy+3:82vcey
MD5:	4A8D1162716E8C28880DCE06B0ED69C1
SHA1:	02AACFB00A373DD28E4DE40D28495DDCB1590E55
SHA-256:	748816EE335CC6B551EE5717F2D48E0A94DB06FDBF584799939EE5C0E7976D88
SHA-512:	98C04BAD30B7EEEC39A5B957BB5DF25765F5545B457B427AFB5196DFFB675DF49F813C543BC06A5F5D7D2003B42C0938926145214CB8146B6B9C101C8B4C815C
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....V3u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.996249463279841
Encrypted:	false
SSDEEP:	48:8Hpd4T8YAH7idAKZdA1weh/iZUkAQkqehOy+2:8HUvu9Qny
MD5:	C2077F42062B75E3D93342DD56FA95B1
SHA1:	31F7B1B9B44F71FB751C4A5C832C9DCA6979863E
SHA-256:	DE84755989B3C5C71A34DA024FB4E1D0087E560DD3D2700B9D84E3FE061D3F0D
SHA-512:	8E57F9A5E55CC5E10507D4EAD96AAF2B7568CAFF6EE83AA35477BB5E7C47895505A3D6C7F4B3037DD6EE05FBE6A4A02873819D078C82535446CA7D7B311D87A9
Malicious:	false
Preview:	L..................F.@.. ...$+.,....2s)u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008223562710565
Encrypted:	false
SSDEEP:	48:8xVd4T8YsH7idAKZdA14tseh7sFiZUkmgqeh7scy+BX:8xQvSnay
MD5:	6CB054604611DBC310CE9ED2F06A6B61
SHA1:	F2FDF240BDC7B4C29823165E3DAE8824A4E61572
SHA-256:	C1A6E10EA14406FC592246E500CC5E4F32D0EF29527A680187E8FE4314FC414F
SHA-512:	9364F67FB9A721EF2AEA2C3C9A444F582CA715DB0A7263AFFAD150473A4D3F76C41FABBE33A2A05B5E9BE71E7B4F2B780B4CFF4553C34444B2725C4C59728B07
Malicious:	false
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997929892878089
Encrypted:	false
SSDEEP:	48:8id4T8YAH7idAKZdA1vehDiZUkwqehCy+R:81v1Ey
MD5:	AD9E9F8AE7BDB876BE2457709D06C4A5
SHA1:	933D84B62E4973979DFA24BC8018F881B87C5AA1
SHA-256:	6AF59EBDBEC68013E53BAE81DABF37B11CE4AD85285ACF69B4D0EC9BA7E460A3
SHA-512:	9FF34F16925DAD0DE816D1B311ABE833FA0FDED7DDF0EBA694232EEC6275BA64E5C2EF2E58B5FE966A25C97AFE0BBF10D2FB6FB78D9B7CBDE576E2388854BF2C
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....[$u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9826484672509177
Encrypted:	false
SSDEEP:	48:8HCd4T8YAH7idAKZdA1hehBiZUk1W1qehoy+C:8HVvl9Iy
MD5:	95274A099DE7052822A74730F3BAB959
SHA1:	070E14481D1038EA39EC2E2E76B35F9592664691
SHA-256:	01FAA44716FB34C02DADB79A7992160FB8F841AEC6F8BEDDA3CC93AC8FEE4D45
SHA-512:	E8E46ACF9CB55A8A6301F27D1901FD1AF4C0A7A04442217BD532E4D2A70809F6DB1DF7C1C96B97609786C40406EDF50190428F7C4B4C36DCCB1B72F8FDD432EC
Malicious:	false
Preview:	L..................F.@.. ...$+.,.....r.u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 30 15:40:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996626849175831
Encrypted:	false
SSDEEP:	48:8Hd4T8YAH7idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbay+yT+:8Sv5T/TbxWOvTbay7T
MD5:	C72A84C1FD0358575B4AF1E6C2836BAB
SHA1:	D92A8F6FF87BE9F6429E665A2C888643F8B0D479
SHA-256:	2D0C167D8EDA3B0A731615F62F58566C50F73257A6F7C2A8FFAA0C39844EB006
SHA-512:	4AAB48D10D354E016B2AFF1E96630BD22CA9884C41AA2768C3EB0D74C803479995E1DF0D7225C9B7E7D3533CFDFCC704DC67A1193DD41234A1922E4BC85ED06A
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......u...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I^Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V^Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V^Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V^Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V^Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............[......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
URL:	https://c.s-microsoft.com/en-us/CMSScripts/script.jsx?k=f65ecb70-094d-0b11-7c9d-7da1bcadfaa7
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513), with no line terminators
Category:	dropped
Size (bytes):	513
Entropy (8bit):	5.350826451115093
Encrypted:	false
SSDEEP:	12:D0rdkqmKlO30kMWznLPQspwlZpqBijDgrgLCpWRG3a0:exmwOkkMWIvv4ELsWUp
MD5:	602C381194795DFC124FACDF48492EF1
SHA1:	90D594B7B5AF217824F2974514548C95FECFBFA5
SHA-256:	BF450798FB52E2458A1E10749577E5334F3E1D7907A47FDFEA5430CB71FA19E6
SHA-512:	8837F6BD2A11387D31A866D07B66A0FF2E58D2EDC2682A582919A1896CE9B4CB683A795D91968B41FA46C31CE62D34414E1F3318D4F5DDA2999447F4BCA6133D
Malicious:	false
Preview:	var jsllConfig={useDefaultContentName:!0,syncMuid:!0,authMethod:AUTHMETHOD,isLoggedIn:ISLOGGEDIN===undefined\|\|ISLOGGEDIN!=="True"?!1:!0,muidDomain:MUIDDOMAIN\|\|"microsoft.com",useShortNameForContentBlob:!1,autoCapture:{pageView:!0,onLoad:!0,onUnload:!0,click:!0,scroll:!0,resize:!0,lineage:!0,jsError:!0,addin:!0,perf:!0},coreData:{appId:JSLLAPPID,market:LOCALE,pageName:PAGENAME,pageType:PAYLOADTYPE,referrerUri:document.referrer,requestUri:window.location.href},callback:{pageName:PAGENAME}};awa.init(jsllConfig)

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	dropped
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://www.microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (955), with CRLF line terminators
Category:	downloaded
Size (bytes):	201253
Entropy (8bit):	2.661810841903416
Encrypted:	false
SSDEEP:	768:W7nJSq9GinOo20uqxjr3+AKyKEAPNPPn8P9R/3htzAVT+JcYY5WRItsWc7rQ3S01:WHGiOoHuOjr3+AKyKAXS
MD5:	85DE642E1467807F64F7E10807DF3869
SHA1:	C795B490811C0E5A1A8F3C3F620AAB9F00C34F07
SHA-256:	5965B2C5472AACA1CD66EA5B0D07A971B961FEE72FC27EB1F6C760042084B21B
SHA-512:	BF4EC56D6FC54EAAFBD57C4E4D06900D358E39CE15009FB983491B0A83ABB60A0A54F46BE86387AB837B4AE1D1F3FF99156D04207065B0F65F165B54CFAAF47B
Malicious:	false
URL:	https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0
Preview:	..<!DOCTYPE html><html xmlns:mscom="http://schemas.microsoft.com/CMSvNext".. xmlns:md="http://schemas.microsoft.com/mscom-data" lang="en-us".. xmlns="http://www.w3.org/1999/xhtml"><head><link rel="shortcut icon".. href="//www.microsoft.com/favicon.ico?v2" /><link.. type="text/css" rel="stylesheet".. href="https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css".. /><title>Your request has been blocked. This could be.. due to several reasons.</title><meta name="Title".. content="We are sorry, the page you requested cannot be.. found" /><meta name="CorrelationVector".. content="VbLZYbRlhU2hyedN.1" /><meta name="Description".. content="" /><meta name="MscomContentLocale".. content="en-us" /><meta name="

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	15
Entropy (8bit):	3.189898095464287
Encrypted:	false
SSDEEP:	3:Uh1Kn:UDKn
MD5:	39A19D0882684989864FA50BCED6A2D1
SHA1:	5CED55DAC2E0427E9DC605CEC1FEDAB0949EB15E
SHA-256:	8FBEDED073249C3611742297EE96A976A95EE113F33B9A422A5D3A7A2DEB63E5
SHA-512:	E795CB7DE27B42948B7DDFF19F3B401A8F95753AC7D37D9B5F52D8DACD2AA43A2AD9EACEC29F77D28080E20C21C48B9FA88A733FAC108939FB2F0EB036C7AEEE
Malicious:	false
URL:	https://statics-marketingsites-wcus-ms-com.akamaized.net/statics/override.css?c=7
Preview:	/* empty css */

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	dropped
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4054
Entropy (8bit):	7.797012573497454
Encrypted:	false
SSDEEP:	48:zICvnyRHJ3BRZPcSPQ72N2xoiR4fTJX/rj4sFNMkk5/p1k2lPUmbm39o4aL7V9XH:10nvE724xoiRQJPrjpLKSFl9oX31Z1d
MD5:	9F14C20150A003D7CE4DE57C298F0FBA
SHA1:	DAA53CF17CC45878A1B153F3C3BF47DC9669D78F
SHA-256:	112FEC798B78AA02E102A724B5CB1990C0F909BC1D8B7B1FA256EAB41BBC0960
SHA-512:	D4F6E49C854E15FE48D6A1F1A03FDA93218AB8FCDB2C443668E7DF478830831ACC2B41DAEFC25ED38FCC8D96C4401377374FED35C36A5017A11E63C8DAE5C487
Malicious:	false
URL:	https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1Mu3b?ver=5c31
Preview:	.PNG........IHDR.............J.......tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c132 79.159284, 2016/04/19-13:13:40 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:A00BC639840A11E68CBEB97C2156C7FD" xmpMM:InstanceID="xmp.iid:A00BC638840A11E68CBEB97C2156C7FD" xmp:CreatorTool="Adobe Photoshop CC 2015.5 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A2C931A470A111E6AEDFA14578553B7B" stRef:documentID="xmp.did:A2C931A570A111E6AEDFA14578553B7B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.......DIDATx..\..UU.>.7..3....h.L..& j2...h.@..".........`U.......R"..Dq.&.BJR 1.4`$.200...l........wg.y.[k/

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41651)
Category:	downloaded
Size (bytes):	131537
Entropy (8bit):	5.2237799798561975
Encrypted:	false
SSDEEP:	3072:1f/HuF3CpxEIqQ0/9d1EwgXAnKxnKKviV:1f/HuZ1ILGV
MD5:	30B7C335C62E5269E2D35B8E8B9F44B4
SHA1:	C6D92B1516EB8F6D44AAF171FB24A1B2AADD0C4C
SHA-256:	10733A5D876108F81C5F78EEE5C9760A739D89C52FA6180C4290B7F909F24346
SHA-512:	5BCE247C84C88F993A857CE2F1E8540C648672DEB6D92A55BC808C33394B784C52866D635BEC8B7CD5E62A7EA4109569AC8BCD1381571B84592ACD6C5901D7A8
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/shell/_scrf/js/themes=default/54-af9f9f/c0-247156/de-099401/e1-a50eee/e7-954872/d8-97d509/f0-251fe2/46-be1318/77-04a268/11-240c7b/63-077520/a4-34de62/1b-c96630/db-bc0148/dc-7e9864/78-4c7d22/e1-c35781/40-7b7803/cd-23d3b0/6d-1e7ed0/b7-cadaa7/ca-40b7b0/4e-ee3a55/3e-f5c39b/c3-6454d7/f9-7592d3/92-10345d/79-499886/7e-cda2d3/db-f3b1fd/93-283c2d/e0-3c9860/91-97a04f/1f-100dea/33-abe4df/19-c0fae7?ver=2.0&iife=1
Preview:	(function(){/*. @license almond 0.3.3 Copyright jQuery Foundation and other contributors.. * Released under MIT license, http://github.com/requirejs/almond/LICENSE. /.var requirejs,require,define,__extends;(function(n){function r(n,t){return w.call(n,t)}function s(n,t){var o,s,f,e,h,p,c,b,r,l,w,k,u=t&&t.split("/"),a=i.map,y=a&&a[""]\|\|{};if(n){for(n=n.split("/"),h=n.length-1,i.nodeIdCompat&&v.test(n[h])&&(n[h]=n[h].replace(v,"")),n[0].charAt(0)==="."&&u&&(k=u.slice(0,u.length-1),n=k.concat(n)),r=0;r<n.length;r++)if(w=n[r],w===".")n.splice(r,1),r-=1;else if(w==="..")if(r===0\|\|r===1&&n[2]===".."\|\|n[r-1]==="..")continue;else r>0&&(n.splice(r-1,2),r-=2);n=n.join("/")}if((u\|\|y)&&a){for(o=n.split("/"),r=o.length;r>0;r-=1){if(s=o.slice(0,r).join("/"),u)for(l=u.length;l>0;l-=1)if(f=a[u.slice(0,l).join("/")],f&&(f=f[s],f)){e=f;p=r;break}if(e)break;!c&&y&&y[s]&&(c=y[s],b=r)}!e&&c&&(e=c,p=b);e&&(o.splice(0,p,e),n=o.join("/"))}return n}function y(t,i){return function(){var r=b.call(arguments,0

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32089)
Category:	downloaded
Size (bytes):	92629
Entropy (8bit):	5.303443527492463
Encrypted:	false
SSDEEP:	1536:dnu00HWWaRxkqJg09pYxoxDKMXJrg8hXXO4dK3kyfiLJBhdSZE+I+Qg7rbaN1RUx:ddkWgoBhcZRQgmW42qe
MD5:	397754BA49E9E0CF4E7C190DA78DDA05
SHA1:	AE49E56999D82802727455F0BA83B63ACD90A22B
SHA-256:	C12F6098E641AACA96C60215800F18F5671039AECF812217FAB3C0D152F6ADB4
SHA-512:	8C64754F77507AB2C24A6FC818419B9DD3F0CECCC9065290E41AFDBEE0743F0DA2CB13B2FBB00AFA525C082F1E697CB3FFD76EF9B902CB81D7C41CA1C641DFFB
Malicious:	false
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.9.1.min.js
Preview:	/! jQuery v1.9.1 \| (c) 2005, 2012 jQuery Foundation, Inc. \| jquery.org/license.//@ sourceMappingURL=jquery.min.map./(function(e,t){var n,r,i=typeof t,o=e.document,a=e.location,s=e.jQuery,u=e.$,l={},c=[],p="1.9.1",f=c.concat,d=c.push,h=c.slice,g=c.indexOf,m=l.toString,y=l.hasOwnProperty,v=p.trim,b=function(e,t){return new b.fn.init(e,t,r)},x=/[+-]?(?:\d\.\|)\d+(?:[eE][+-]?\d+\|)/.source,w=/\S+/g,T=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,N=/^(?:(<[\w\W]+>)[^>]\|#([\w-]))$/,C=/^<(\w+)\s\/?>(?:<\/\1>\|)$/,k=/^[\],:{}\s]$/,E=/(?:^\|:\|,)(?:\s\[)+/g,S=/\\(?:["\\\/bfnrt]\|u[\da-fA-F]{4})/g,A=/"[^"\\\r\n]*"\|true\|false\|null\|-?(?:\d+\.\|)\d+(?:[eE][+-]?\d+\|)/g,j=/^-ms-/,D=/-([\da-z])/gi,L=function(e,t){return t.toUpperCase()},H=function(e){(o.addEventListener\|\|"load"===e.type\|\|"complete"===o.readyState)&&(q(),b.ready())},q=function(){o.addEventListener?(o.removeEventListener("DOMContentLoaded",H,!1),e.removeEventListener("load",H,!1)):(o.detachEvent("onreadystatechange",H),e.detachEvent("onload",H)

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Category:	downloaded
Size (bytes):	563851
Entropy (8bit):	5.221453271093944
Encrypted:	false
SSDEEP:	6144:2VR57iqbPXlB5UR5vWenR5xWeMFdBjL+ks0EcU0MWEsuWe5fXbHfxlN/FNCn/Lpl:tTP0BKYtf
MD5:	12DD1E4D0485A80184B36D158018DE81
SHA1:	EB2594062E90E3DCD5127679F9C369D3BF39D61C
SHA-256:	A04B5B8B345E79987621008E6CC9BEF2B684663F9A820A0C7460E727A2A4DDC3
SHA-512:	F3A92BF0C681E6D2198970F43B966ABDF8CCBFF3F9BD5136A1CA911747369C49F8C36C69A7E98E0F2AED3163D9D1C5D44EFCE67A178DE479196845721219E12C
Malicious:	false
URL:	https://assets.onestore.ms/cdnfiles/external/mwf/long/v1/v1.25.0/css/mwf-west-european-default.min.css
Preview:	@charset "UTF-8";/! @ms-mwf/mwf - v1.25.0+6321934 \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise.//! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 26288, version 0.0
Category:	downloaded
Size (bytes):	26288
Entropy (8bit):	7.984195877171481
Encrypted:	false
SSDEEP:	768:56JqQaQphRbTHiKNF5z/02h5KpJW3pPOA8Y9g/:gdTTH5XKpJWdH1W/
MD5:	D0263DC03BE4C393A90BDA733C57D6DB
SHA1:	8A032B6DEAB53A33234C735133B48518F8643B92
SHA-256:	22B4DF5C33045B645CAFA45B04685F4752E471A2E933BFF5BF14324D87DEEE12
SHA-512:	9511BEF269AE0797ADDF4CD6F2FEC4AD0C4A4E06B3E5BF6138C7678A203022AC4818C7D446D154594504C947DA3061030E82472D2708149C0709B1A070FDD0E3
Malicious:	false
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff
Preview:	wOFF......f........D........................OS/2...X...H...`JM.FVDMX.............^.qcmap..............9cvt ...4... .......fpgm...T.......Y...gasp...D............glyf...P..U5.......head..]....2...6...Chhea..]........$$...hmtx..]..........ye'loca..^............Gmaxp..`.... ... ./..name..`....8....]..Rpost..f........ .Q.wprep..f$........x...x.c`.Pf......:....Q.B3_dHc..`e.bdb... .`@..`......./9.\|...V...)00...-.Wx...S......._..m.m.m.m.m;e..y.~.......<p..a.0t.&...a.pa.0B.1..F...Q.ha.0F.3.....q.xa.0A.0L.&...I.da.0E.2L....i.ta.0C.1..f...Y.la.0G.3.....y.\|a..@X0,.....E.ba.DX2,....e.ra..BX1..V...U.ja..FX3.....u.za..A.0l.6...M.fa.E.2l....m.va..C.1..v...].na..G.3......}.~a.p@80......C.a..pD82.....c.q..pB81..N...S.i..pF83.....s.y..pA.0\.....K.e..pE.2\....k.u..pC.1..n...[.m..pG.3......{.}...@x0<.....G.c...Dx2<....g.s...Bx1..^...W.k...Fx3.....w.{...A.0\|.>...O.g...E.2\|....o.w...C.1..~..._.o..08........?..0$........x...mL.U.............9.x.`[...&BF@X...V.h.Z..h......`n....[..U

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64241)
Category:	downloaded
Size (bytes):	167730
Entropy (8bit):	5.045981547409661
Encrypted:	false
SSDEEP:	3072:OzCPZkTP3bDLH0tfRqQ0xtLfj4ZDSIpTt813viY8R1j35Ap7LQZLPPJH7PAbOCxW:clZAP+keedJ
MD5:	AFB5C64B13342F6E568093548D0A2A9F
SHA1:	95FC121CCCFDBA12443CF87A9C823486065A14AB
SHA-256:	238DB52476BF8107E2E851CD3299B071ED5944B570C1603A1EA758A4FADF5F29
SHA-512:	6FE8BADD1B94E81464C0808383A4CC77F779BF226A3C13B58B2BCB36332995EFBC7711373EE8AB2A8BC52675884F9885D168CB2DE9535E39E71B0B72940691E1
Malicious:	false
URL:	https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/2b-7ae144/7e-3283eb/69-8122fc/86-016699/72-2b1d8c/80-6461e7/2a-d9be59/51-40faf7?ver=2.0
Preview:	@charset "UTF-8";./! \| Copyright 2017 Microsoft Corporation \| This software is based on or incorporates material from the files listed below (collectively, "Third Party Code"). Microsoft is not the original author of the Third Party Code. The original copyright notice and the license under which Microsoft received Third Party Code are set forth below together with the full text of such license. Such notices and license are provided solely for your information. Microsoft, not the third party, licenses this Third Party Code to you under the terms in which you received the Microsoft software or the services, unless Microsoft clearly states that such Microsoft terms do NOT apply for a particular Third Party Code. Unless applicable law gives you more rights, Microsoft reserves all other rights not expressly granted under such agreement(s), whether by implication, estoppel or otherwise././! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /.body{margin:0}.context-uh

Static File Info

General

File type:	PDF document, version 1.7, 2 pages
Entropy (8bit):	7.496822494489131
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	CV2.pdf
File size:	276'595 bytes
MD5:	c445b670eaa73c46a530824a06adf001
SHA1:	f53bd21dc22743212cef6221b9ed22fc041fd242
SHA256:	2a9f0cb198913b5b2ee0ac01c79fe69a7c0998338ed6d679df0058ad7569c22d
SHA512:	c1250955027808a9de5b208d4967861519db488f4872bbefb16abc130c70909f9d4d22d87ffc2965dd0043063b1fda825ca12a324859b7b8506f2deb9c30530e
SSDEEP:	3072:sw7ZH55cz+Y+X9pO3IvYNETGA4zaQBXe+RlJ5mx7Oap/f42Tf1Z/bhTVRAsY9Cx4:5xPE+NpXv4EaPY4fKHpoSf1Z/DGSan
TLSH:	F8446A1358086BCAD26843D56E0B3D9D7F587A2DE0C51AEE322FCB87276073A584F51E
File Content Preview:	%PDF-1.7..%......1 0 obj..<</Type/Catalog/Pages 2 0 R/Lang(en) /StructTreeRoot 43 0 R/MarkInfo<</Marked true>>/Metadata 479 0 R/ViewerPreferences 480 0 R>>..endobj..2 0 obj..<</Type/Pages/Count 2/Kids[ 3 0 R 33 0 R] >>..endobj..3 0 obj..<</Type/Page/Paren

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.7
Total Entropy:	7.496822
Total Bytes:	276595
Stream Entropy:	7.495309
Stream Bytes:	256150
Entropy outside Streams:	4.733030
Bytes outside Streams:	20445
Number of EOF found:	2
Bytes after EOF:

Keywords Statistics

Name	Count
obj	74
endobj	74
stream	20
endstream	20
xref	2
trailer	2
startxref	2
/Page	2
/Encrypt	0
/ObjStm	1
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5
5	ff77000000000000	db604794640b060830a35f05df3a94ec
31	5a7e7068e9896060	18280e0f9e4ccaa56568df6a1b482cc0
32	7a6060e8c189e560	3d7976cd7c99892e4f8b83321e50fb40
35	0000000000000000	90432b5048e0934faa64c9f5b91e6820
36	9030f0cccc68ec4c	755771e7e0396d48c603b326a319ef5d

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:40:14.094582081 CET	49674	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:14.094620943 CET	49675	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:14.219594955 CET	49673	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:16.014760017 CET	443	49703	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:16.014862061 CET	49703	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:22.661233902 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:22.661276102 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:22.661339998 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:22.678970098 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:22.678982973 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.599497080 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.599579096 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.603018045 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.603037119 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.603338957 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.644862890 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.659636021 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.707334995 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.917710066 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.917778969 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.917828083 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.929764032 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.929794073 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:23.929807901 CET	49714	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:23.929812908 CET	443	49714	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:24.093604088 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:24.093664885 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:24.093748093 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:24.094017029 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:24.094038010 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:24.911097050 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:24.911161900 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:24.911248922 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:24.912194014 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:24.912215948 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:25.019553900 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.019716024 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.021109104 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.021127939 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.021384001 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.023144960 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.067327976 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.289675951 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.289747953 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.289851904 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.290719986 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.290744066 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:25.290757895 CET	49715	443	192.168.2.5	184.28.90.27
Oct 30, 2024 17:40:25.290766001 CET	443	49715	184.28.90.27	192.168.2.5
Oct 30, 2024 17:40:26.070312023 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:26.070398092 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:26.072263956 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:26.072284937 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:26.072525024 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:26.113632917 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:26.805711985 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:26.851335049 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182749987 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182775021 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182782888 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182791948 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182833910 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182857037 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.182907104 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.182928085 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.182965040 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.183463097 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.183542013 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.183559895 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.201585054 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.201668024 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.201745987 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.201931000 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.201948881 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.223012924 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.307987928 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.308051109 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.308459997 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.838478088 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.838561058 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.838587046 CET	49716	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:40:27.838598013 CET	443	49716	4.175.87.197	192.168.2.5
Oct 30, 2024 17:40:27.940514088 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.940860033 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.940943956 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.942151070 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.942240953 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.942387104 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:27.942428112 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:27.942488909 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:27.942800999 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:27.942811966 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:27.973941088 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.974092007 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:27.974205017 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:27.974239111 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:28.019916058 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:28.100732088 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:28.101363897 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:28.101432085 CET	443	49723	96.7.168.138	192.168.2.5
Oct 30, 2024 17:40:28.101491928 CET	49723	443	192.168.2.5	96.7.168.138
Oct 30, 2024 17:40:28.688395023 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:28.688478947 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:28.694291115 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:28.694303989 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:28.694603920 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:28.717602015 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:28.763326883 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.131344080 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.131375074 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.131392002 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.131432056 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.131458998 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.131473064 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.131495953 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.136547089 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.136569023 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.136615038 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.136620998 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.136655092 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.206556082 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.206583023 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.206640005 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.206660032 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.206682920 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.206690073 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.324069023 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.324098110 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.324161053 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.324184895 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.324203014 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.324219942 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.443087101 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.443116903 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.443217993 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.443243027 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.443414927 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.562347889 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.562374115 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.562462091 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.562485933 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.562542915 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.681343079 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.681364059 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.681425095 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.681451082 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.681492090 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.800689936 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.800713062 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.800765038 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.800789118 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.800813913 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.800836086 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.884524107 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.884550095 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.884599924 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.884624004 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.884639025 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.884692907 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.962665081 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.962690115 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.962752104 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:29.962775946 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:29.962869883 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.041975021 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.042001009 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.042064905 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.042097092 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.042139053 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.161573887 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.161600113 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.161660910 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.161686897 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.161710024 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.161730051 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.280330896 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.280355930 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.280427933 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.280461073 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.280596018 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.281450033 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.281516075 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.281537056 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.281550884 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.281599045 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.281678915 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.281693935 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.281702995 CET	49725	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.281708956 CET	443	49725	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.331661940 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.331720114 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.331839085 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.334300041 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.334301949 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.334310055 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.334430933 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.334506035 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.334642887 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.335921049 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.335946083 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.336118937 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.336390972 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.336401939 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.336520910 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.336529970 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.336921930 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.336930990 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.337060928 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.337112904 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.338717937 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.338747978 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:30.338845015 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.338973045 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:30.339000940 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.071064949 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.071698904 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.071738005 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.073883057 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.073915958 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.076780081 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.077822924 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.077862024 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.078020096 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.080069065 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.088844061 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.088871002 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.089312077 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.089318991 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.089334965 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.089426994 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.089648008 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.089660883 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.090073109 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.090090990 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.090626955 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.090998888 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.091032028 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.091356993 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.091370106 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.201127052 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.202207088 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.202348948 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.202403069 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.202403069 CET	49728	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.202425003 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.202435970 CET	443	49728	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.205558062 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.205591917 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.205801964 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.206027031 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.206037998 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219430923 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219499111 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219578981 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.219608068 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219659090 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.219667912 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219703913 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219877005 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.219902992 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219919920 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.219919920 CET	49727	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.219930887 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.219938993 CET	443	49727	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.221225023 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.221249104 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.221297979 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.221400976 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.221401930 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.221544981 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.221544981 CET	49729	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.221606016 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.221633911 CET	443	49729	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.222810030 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.222884893 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.223069906 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224227905 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224234104 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224251032 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224320889 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224416018 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224452972 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224490881 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224526882 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224543095 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224565029 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224637032 CET	49730	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224647999 CET	443	49730	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.224957943 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.224971056 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.225467920 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.225481033 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.225543022 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.225600004 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.225761890 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.225761890 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.226736069 CET	49731	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.226752043 CET	443	49731	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.227479935 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.227497101 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.228394985 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.228487015 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.228488922 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.228498936 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.228523016 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.228641033 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.228677988 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.228686094 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.946022987 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.946954012 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.946973085 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.947432041 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.947436094 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.959121943 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.959697008 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.959733963 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.960057020 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.960062981 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.968797922 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.969427109 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.969434023 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.969819069 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.969822884 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.973728895 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.974551916 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.974565983 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.974994898 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.974999905 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.976550102 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.978441000 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.978473902 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:31.978813887 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:31.978820086 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.078079939 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.078556061 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.079169989 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.079202890 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.079224110 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.079236984 CET	49732	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.079241991 CET	443	49732	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.082073927 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.082134962 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.082238913 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.082403898 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.082418919 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.089994907 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.090967894 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.091020107 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.091073036 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.091073036 CET	49735	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.091092110 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.091101885 CET	443	49735	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.093245983 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.093283892 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.093357086 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.093487978 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.093497038 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.104271889 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.104701996 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.104756117 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.104775906 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.104785919 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.104795933 CET	49734	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.104800940 CET	443	49734	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.106599092 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.106627941 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.106692076 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.106802940 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.106813908 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.110620975 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.110677958 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.110961914 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.111068964 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.111073017 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.111087084 CET	49733	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.111090899 CET	443	49733	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.111720085 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.111771107 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.111910105 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.112230062 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.112236023 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.112248898 CET	49736	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.112251997 CET	443	49736	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.114661932 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.114707947 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.114799023 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.115154982 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.115170002 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.115804911 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.115854025 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.115922928 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.116086960 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.116110086 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.815834045 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.816567898 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.816623926 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.816994905 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.817002058 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.842286110 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.842679024 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.842705011 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.843049049 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.843055964 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.856931925 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.857237101 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.857285023 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.857542038 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.857548952 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.870881081 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.871349096 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.871385098 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.871689081 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.871696949 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.900902987 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.901598930 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.901622057 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.902286053 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.902291059 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.955503941 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.955903053 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.956084013 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.956084013 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.956084013 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.958723068 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.958806992 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.958877087 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.959009886 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.959024906 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.975429058 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.975684881 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.975748062 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.975800037 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.975800037 CET	49739	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.975826025 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.975838900 CET	443	49739	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.978543997 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.978604078 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.978697062 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.978842020 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.978862047 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.986697912 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.986771107 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.986844063 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.986990929 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.987011909 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.987025976 CET	49740	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.987031937 CET	443	49740	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.989495993 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.989526987 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:32.990211010 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.990330935 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:32.990350008 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.003964901 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.004858971 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.005032063 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.005075932 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.005075932 CET	49741	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.005098104 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.005112886 CET	443	49741	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.007456064 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.007499933 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.007592916 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.007716894 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.007730961 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.044908047 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.045022011 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.045208931 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.045394897 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.045411110 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.045420885 CET	49738	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.045425892 CET	443	49738	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.047908068 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.048002958 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.048094988 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.048249960 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.048279047 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.263974905 CET	49737	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.264031887 CET	443	49737	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.704519033 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.720438004 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.733572006 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.733618021 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.734004021 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.734009027 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.734240055 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.734314919 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.734568119 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.734582901 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.751327991 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.751801014 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.751856089 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.752223015 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.752238035 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.783091068 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.783584118 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.783612013 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.784004927 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.784013033 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.791862011 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.792404890 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.792474031 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.792711020 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.792723894 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.859293938 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.859407902 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.859587908 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.859801054 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.859828949 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.859885931 CET	49744	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.859894037 CET	443	49744	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.862242937 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.862462997 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.862523079 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.862673044 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.862716913 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.862782955 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.862844944 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.862868071 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.862883091 CET	49742	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.862889051 CET	443	49742	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.863854885 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.863868952 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.865081072 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.865120888 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.865187883 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.865312099 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.865324974 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.888689995 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.888947964 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.889008999 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.889089108 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.889116049 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.889134884 CET	49743	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.889142036 CET	443	49743	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.891987085 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.892057896 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.892133951 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.892318010 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.892332077 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.915880919 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.916127920 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.916189909 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.916225910 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.916244984 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.916255951 CET	49745	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.916261911 CET	443	49745	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.918868065 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.918937922 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.919013023 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.919141054 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.919158936 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.923106909 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.923296928 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.923346996 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.923389912 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.923413038 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.923432112 CET	49746	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.923439026 CET	443	49746	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.925585985 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.925622940 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:33.925698996 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.925868034 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:33.925884008 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.599828959 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.600563049 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.600590944 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.601025105 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.601028919 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.603816032 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.604134083 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.604167938 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.604469061 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.604476929 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.641350985 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.641941071 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.641964912 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.642390966 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.642398119 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.652467012 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.653013945 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.653049946 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.653271914 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.653280020 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.674200058 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.674737930 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.674773932 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.675338030 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.675344944 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.729458094 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.730055094 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.730249882 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.730249882 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.730249882 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.733130932 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.733198881 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.733320951 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.733500957 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.733517885 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.735413074 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.735680103 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.735743046 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.735802889 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.735802889 CET	49748	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.735827923 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.735843897 CET	443	49748	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.738343000 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.738385916 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.738468885 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.738624096 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.738635063 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.770047903 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.770149946 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.770323992 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.770452976 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.770487070 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.770510912 CET	49750	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.770519018 CET	443	49750	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.773664951 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.773720026 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.773845911 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.774018049 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.774033070 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.797724009 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.797810078 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.797882080 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.798100948 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.798135996 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.798155069 CET	49749	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.798166990 CET	443	49749	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.801086903 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.801137924 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.801234961 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.801403999 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.801414967 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.807430029 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.807518005 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.807573080 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.807746887 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.807780027 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.807801962 CET	49751	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.807811975 CET	443	49751	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.810513020 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.810569048 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:34.810697079 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.810909033 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:34.810924053 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.045274973 CET	49747	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.045329094 CET	443	49747	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.466952085 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.467638969 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.467699051 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.468121052 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.468127012 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.483745098 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.484239101 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.484265089 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.484611034 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.484616041 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.531279087 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.531852007 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.531892061 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.532290936 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.532298088 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.546266079 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.546678066 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.546704054 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.547040939 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.547045946 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.597824097 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.597901106 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.597970963 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.598181009 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.598205090 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.598217964 CET	49752	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.598225117 CET	443	49752	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.601144075 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.601188898 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.601284981 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.601447105 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.601457119 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.620445967 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.620847940 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.620908976 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.620946884 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.620966911 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.620978117 CET	49753	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.620984077 CET	443	49753	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.623898983 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.623948097 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.624022007 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.624161005 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.624172926 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.672445059 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.672687054 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.672759056 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.672804117 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.672804117 CET	49754	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.672827959 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.672837973 CET	443	49754	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.675405979 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.675447941 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.675514936 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.675657034 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.675667048 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.677675009 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.677778006 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.677824020 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.677885056 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.677897930 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.677911997 CET	49755	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.677917957 CET	443	49755	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.680077076 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.680131912 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.680212021 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.680345058 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.680360079 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.691489935 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.691931963 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.691946030 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.692356110 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.692359924 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.822191000 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.822366953 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.822438002 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.822559118 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.822573900 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.822587013 CET	49756	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.822592974 CET	443	49756	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.825474977 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.825521946 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:35.825606108 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.825807095 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:35.825815916 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.351464987 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.352118015 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.352147102 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.352576971 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.352581978 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.353816032 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.354129076 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.354180098 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.354479074 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.354485989 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.421657085 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.422297001 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.422322035 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.422755957 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.422770977 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.427860975 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.428329945 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.428366899 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.428684950 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.428693056 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.484184980 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.484288931 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.484370947 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.484620094 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.484641075 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.484657049 CET	49757	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.484663963 CET	443	49757	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.486710072 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.486766100 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.486846924 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.487015009 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.487035990 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.487055063 CET	49758	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.487061024 CET	443	49758	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.487962008 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.488007069 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.488075972 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.488240957 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.488255024 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.489252090 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.489293098 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.489356995 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.489545107 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.489553928 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.566318989 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.566410065 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.566498041 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.566741943 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.566755056 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.566780090 CET	49759	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.566786051 CET	443	49759	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.569703102 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.569741011 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.569828987 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.570017099 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.570029020 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.570838928 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.571057081 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.571105003 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.571134090 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.571144104 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.571157932 CET	49760	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.571162939 CET	443	49760	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.573242903 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.573287964 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.573375940 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.573517084 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.573537111 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.660114050 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.660762072 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.660800934 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.661217928 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.661227942 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.791795015 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.791887045 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.792049885 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.792340994 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.792360067 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.792376041 CET	49761	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.792382002 CET	443	49761	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.795552969 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.795674086 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:36.795789957 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.795990944 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:36.796026945 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.255398989 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.256057024 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.256108999 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.256484985 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.256490946 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.310101032 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.310734987 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.310761929 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.311214924 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.311219931 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.354176044 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.354727030 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.354762077 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.355142117 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.355148077 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.419548988 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.419651031 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.419764042 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.438761950 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.438761950 CET	49762	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.438843966 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.438874960 CET	443	49762	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.453766108 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.453829050 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.453923941 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.454298019 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.454333067 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.461950064 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.462133884 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.462218046 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.462718964 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.462740898 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.462754965 CET	49763	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.462760925 CET	443	49763	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.465202093 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.465250015 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.465322018 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.465471029 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.465481997 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.489801884 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.489903927 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.489968061 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.492011070 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.492044926 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.492062092 CET	49765	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.492069006 CET	443	49765	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.494566917 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.494618893 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.494697094 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.494856119 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.494872093 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.563662052 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.564198017 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.564254045 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.564631939 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.564641953 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.714653969 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.714729071 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.714795113 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.718508005 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.718540907 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.718555927 CET	49766	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.718563080 CET	443	49766	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.727019072 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.727063894 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:37.727137089 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.727458000 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:37.727472067 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.329188108 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.329953909 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.329991102 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.330503941 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.330512047 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.341191053 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.341711998 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.341753006 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.342271090 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.342278957 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.431602955 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.432259083 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.432286978 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.433063984 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.433069944 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.479581118 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.479701996 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.479782104 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.479944944 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.479974985 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.479990005 CET	49767	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.479996920 CET	443	49767	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.482709885 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.482759953 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.482842922 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.483015060 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.483032942 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.489511013 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.491225004 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.491305113 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.491374969 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.491375923 CET	49768	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.491413116 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.491427898 CET	443	49768	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.493571997 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.493623018 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.493722916 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.493887901 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.493901968 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.543904066 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.544457912 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.544519901 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.544905901 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.544913054 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.574403048 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.575036049 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.575073004 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.575520992 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.575529099 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.580265045 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.580349922 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.580403090 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.580648899 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.580670118 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.580682039 CET	49769	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.580688953 CET	443	49769	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.583825111 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.583869934 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.584101915 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.584168911 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.584178925 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.698302031 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.698379040 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.698436022 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.698599100 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.698621035 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.698633909 CET	49764	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.698640108 CET	443	49764	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.701550961 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.701601028 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.701670885 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.701801062 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.701814890 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.728029013 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.728121996 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.728188038 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.728348970 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.728374958 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.728389025 CET	49770	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.728395939 CET	443	49770	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.731318951 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.731359959 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:38.731451035 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.731614113 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:38.731626034 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.315082073 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.318938971 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.365736961 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.366218090 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.443605900 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.490695000 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.549287081 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.570992947 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.595442057 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.595463991 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.595915079 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.595922947 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.596160889 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.596191883 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.596513987 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.596519947 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.596729040 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.596755981 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.597071886 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.597075939 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.597429991 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.597439051 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.597800016 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.597805023 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.599620104 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.599647045 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.600027084 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.600039959 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746084929 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746084929 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746088028 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746166945 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746185064 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746186018 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.746223927 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.746254921 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.747134924 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.747173071 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.747196913 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.747236013 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.769689083 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.769721985 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.769740105 CET	49775	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.769747019 CET	443	49775	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.770126104 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.770126104 CET	49771	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.770155907 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.770169973 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.770180941 CET	443	49771	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.770229101 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.770288944 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.773330927 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.773354053 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.773367882 CET	49774	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.773372889 CET	443	49774	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.775132895 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.775140047 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.775151968 CET	49772	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.775156021 CET	443	49772	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.776911020 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.776926041 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.776941061 CET	49773	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.776946068 CET	443	49773	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.875719070 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.875776052 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.875873089 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.896557093 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.896574020 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.999839067 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:39.999887943 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:39.999963999 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.001015902 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.001051903 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.001110077 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.001547098 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.001554966 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.001602888 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.018806934 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.024291992 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:40:40.024373055 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.026717901 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.026752949 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.026813984 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.026962042 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.026974916 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.027065992 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.027081966 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.027148008 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.027154922 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.109396935 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.109432936 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.191853046 CET	49782	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.197455883 CET	80	49782	204.79.197.212	192.168.2.5
Oct 30, 2024 17:40:40.197521925 CET	49782	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.282587051 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.288674116 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:40:40.633636951 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:40:40.655045986 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:40.655131102 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:40.655188084 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:40.655560970 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:40.655586004 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:40.658740997 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.659238100 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.659265041 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.659688950 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.659697056 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.684034109 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:40:40.764914989 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.765485048 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.765532970 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.765928030 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.765938997 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.769428015 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.769820929 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.769846916 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.770016909 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.770165920 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.770170927 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.770255089 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.770282030 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.770570040 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.770577908 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.794033051 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.794869900 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.794960022 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.794987917 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.795003891 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.795013905 CET	49776	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.795018911 CET	443	49776	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.797759056 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.797826052 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.797950029 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.798130989 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.798149109 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.840348005 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.841036081 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.841095924 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.841484070 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.841491938 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.895142078 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.895227909 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.895319939 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.895529032 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.895560980 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.895577908 CET	49777	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.895584106 CET	443	49777	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.898432016 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.898482084 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.898608923 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.898781061 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.898793936 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.899338007 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.899416924 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.899466038 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.899568081 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.899580002 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.899605036 CET	49779	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.899610043 CET	443	49779	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.901243925 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.901328087 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.901381016 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.901489019 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.901508093 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.901519060 CET	49778	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.901525021 CET	443	49778	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.902620077 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.902659893 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.902735949 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.902849913 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.902863979 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.903449059 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.903461933 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.903523922 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.903650999 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.903666019 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.970504045 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.970891953 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.970976114 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.971046925 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.971046925 CET	49781	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.971082926 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.971098900 CET	443	49781	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.973762035 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.973814011 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:40.973901033 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.974078894 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:40.974092007 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.542658091 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.543777943 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.543833017 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.544364929 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.544373035 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.647363901 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.648130894 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.648181915 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.648467064 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.648474932 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.649557114 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.649847984 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.649884939 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.650176048 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.650185108 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.672914028 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.673629045 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.673691988 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.673942089 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.673949957 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.678059101 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.678136110 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.678343058 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.678404093 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.678405046 CET	49787	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.678426981 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.678436995 CET	443	49787	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.681324959 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.681374073 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.681794882 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.681941986 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.681957960 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.707695961 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.708900928 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.708952904 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.709470034 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.709481001 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.764755964 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.765599966 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.765647888 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.766767979 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.766861916 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.766875029 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.766916990 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.769656897 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.769774914 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.769869089 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.769886017 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:41.777476072 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.777571917 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.777653933 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.779762030 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.779939890 CET	49789	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.779963017 CET	443	49789	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.780440092 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.780662060 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.780900002 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.780916929 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.780942917 CET	49790	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.780949116 CET	443	49790	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.783554077 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783590078 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783598900 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.783631086 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.783715010 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783850908 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783860922 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783873081 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.783938885 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.783950090 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.809765100 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:41.839832067 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.839920044 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.839984894 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.840238094 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.840270996 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.840286970 CET	49791	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.840292931 CET	443	49791	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.842966080 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.843015909 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.843121052 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.843274117 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.843281031 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.865320921 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.865622997 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.865746021 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.865988970 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.866023064 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.866039991 CET	49788	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.866048098 CET	443	49788	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.868709087 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.868757963 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:41.868851900 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.869441032 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:41.869455099 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.033535004 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.033565998 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.033736944 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.033790112 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.076925993 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.161889076 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.161969900 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.162038088 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.208980083 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.208986998 CET	443	49786	52.98.252.114	192.168.2.5
Oct 30, 2024 17:40:42.209001064 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.209034920 CET	49786	443	192.168.2.5	52.98.252.114
Oct 30, 2024 17:40:42.586483955 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.609854937 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.609884977 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.610302925 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.610308886 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.712531090 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.713591099 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.713624954 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.714039087 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.714046955 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.715029955 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.715327024 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.715342045 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.715720892 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.715724945 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.716353893 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.717152119 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.717184067 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.717608929 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.717613935 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.722194910 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.722517967 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.722549915 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.722954988 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.722961903 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.736816883 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.736910105 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.736967087 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.737123013 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.737143993 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.737155914 CET	49792	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.737163067 CET	443	49792	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.739672899 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.739720106 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.739794016 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.739936113 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.739947081 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.843499899 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.843698025 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.843775034 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.843873978 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.843893051 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.843903065 CET	49793	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.843909025 CET	443	49793	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.846857071 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.846905947 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.846992016 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.846996069 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.847115993 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.847162962 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.847191095 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.847198009 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.847208023 CET	49795	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.847212076 CET	443	49795	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.847222090 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.847234964 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.849409103 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.849446058 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.849534035 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.849677086 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.849688053 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.850498915 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.850605965 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.850660086 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.850722075 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.850739002 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.850749969 CET	49796	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.850756884 CET	443	49796	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.852701902 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.852725029 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.852791071 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.852931023 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.852938890 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.859941959 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.860002041 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.860049009 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.860142946 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.860157967 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.860169888 CET	49794	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.860174894 CET	443	49794	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.862077951 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.862102032 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:42.862175941 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.862304926 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:42.862315893 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.580876112 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.581610918 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.586266994 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.587784052 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.588741064 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.597603083 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.597644091 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.597937107 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.597963095 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.598253012 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.598258018 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.598366022 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.598383904 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.598683119 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.598697901 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.599225044 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.599257946 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.599597931 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.599602938 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.599684954 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.599698067 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.599869013 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.599874020 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.600204945 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.600208998 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.725147009 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.725303888 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.725563049 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.725653887 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.725708008 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.725708008 CET	49803	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.725728989 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.725739956 CET	443	49803	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.726175070 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.726248980 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.726273060 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.726279020 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.726305008 CET	49801	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.726313114 CET	443	49801	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.726975918 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.727036953 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.727086067 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.727374077 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.727391958 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.727402925 CET	49802	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.727408886 CET	443	49802	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729325056 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729500055 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.729527950 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729593992 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.729631901 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729758978 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.729773998 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729789972 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729844093 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.729866028 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.729909897 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.729989052 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.730015039 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.730031013 CET	49799	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.730040073 CET	443	49799	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.731121063 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.731142044 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.731206894 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.731301069 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.731317997 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.731347084 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.731352091 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.731360912 CET	49800	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.731364965 CET	443	49800	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.732929945 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.732953072 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.733016968 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.733119965 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.733130932 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.734253883 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734292030 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.734375954 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734483004 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734498024 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.734683990 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734692097 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:43.734749079 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734906912 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:43.734914064 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.469149113 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.470969915 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.473004103 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.482273102 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.496712923 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.513835907 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.513839960 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.514194012 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.529772043 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.545412064 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.731090069 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.731101990 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.731647015 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.731651068 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.731969118 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.731981993 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.732332945 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.732337952 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.733325958 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.733338118 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.734343052 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.734349012 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.734592915 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.734626055 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.735428095 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.735433102 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.735548973 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.735559940 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.736143112 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.736148119 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.770317078 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:44.770353079 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:44.770421982 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:44.770642996 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:44.770654917 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:44.858298063 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.858383894 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.858448029 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.858475924 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.858549118 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.858588934 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.859301090 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.859325886 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.859340906 CET	49813	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.859347105 CET	443	49813	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.860394955 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.860414982 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.860425949 CET	49810	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.860430956 CET	443	49810	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.861912966 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.862040997 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.862108946 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.863249063 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.863293886 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.863372087 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.863892078 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.863910913 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.863924026 CET	49812	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.863930941 CET	443	49812	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.864528894 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.864542007 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.865194082 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.865258932 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.865302086 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.865771055 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.865782976 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.865792990 CET	49811	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.865797997 CET	443	49811	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.866214991 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.866260052 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.866317987 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.866434097 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.866451025 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.867599964 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.867613077 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.867675066 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.868136883 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.868149996 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.868650913 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.868702888 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.868762970 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.868904114 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.868918896 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.880459070 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.880609035 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.880673885 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.880762100 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.880768061 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.880800009 CET	49814	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.880804062 CET	443	49814	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.884057999 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.884090900 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:44.884150982 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.884306908 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:44.884320974 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.594484091 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.595293045 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.595328093 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.595990896 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.595995903 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.610816956 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.611434937 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.611526012 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.612039089 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.612054110 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.618385077 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.618752003 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.618784904 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.620438099 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.620443106 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.628982067 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.629321098 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.629339933 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.629806995 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.629812002 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.638034105 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.638360023 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.638376951 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.638837099 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.638840914 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.667352915 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:45.667669058 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:45.667702913 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:45.668704033 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:45.668761969 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:45.669996977 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:45.670063972 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:45.713243008 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:45.713258028 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:45.729307890 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.729509115 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.729584932 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.729620934 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.729635954 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.729645967 CET	49819	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.729650974 CET	443	49819	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.734371901 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.734405041 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.734472990 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.734762907 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.734786034 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.745959044 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.745979071 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.746053934 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.746123075 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.746189117 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.746243000 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.746393919 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.746395111 CET	49818	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.746432066 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.746459007 CET	443	49818	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750053883 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750124931 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750189066 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750572920 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750602007 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750660896 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750782967 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750797987 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750958920 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750976086 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.750988960 CET	49820	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.750993967 CET	443	49820	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.753457069 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.753483057 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.753532887 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.753684044 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.753700972 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760094881 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760152102 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760207891 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.760225058 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760318041 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760374069 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.760423899 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.760435104 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.760446072 CET	49821	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.760449886 CET	443	49821	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.762319088 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:45.762459040 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.762470007 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:45.762537956 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.763807058 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:45.763816118 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.130697966 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.131840944 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.131910086 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.131947994 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.131963015 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.131974936 CET	49817	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.131980896 CET	443	49817	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.134972095 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.135042906 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.135128975 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.144514084 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.144541025 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.478338957 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.481117010 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.481154919 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.481329918 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.481635094 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.481640100 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.481753111 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.481775999 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.482187986 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.482196093 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.505686998 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.506043911 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.506059885 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.506407022 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.506412029 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.511900902 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.512227058 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.512245893 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.512589931 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.512594938 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.610275984 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.610297918 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.610349894 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.610352039 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.610388994 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.610579014 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.610595942 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.610605001 CET	49827	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.610610008 CET	443	49827	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.613159895 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.613234997 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.613338947 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.613485098 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.613533974 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.614309072 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.614325047 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.614372969 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.614373922 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.614415884 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.614542007 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.614567995 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.614583969 CET	49828	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.614590883 CET	443	49828	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.616406918 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.616446972 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.616511106 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.616658926 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.616672993 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.639013052 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.639199018 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.639286995 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.639343977 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.639357090 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.639367104 CET	49829	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.639373064 CET	443	49829	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.641319990 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.641360044 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.641434908 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.641568899 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.641582966 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.642153025 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.642432928 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.642496109 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.642515898 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.642523050 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.642534971 CET	49830	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.642539024 CET	443	49830	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.644386053 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.644423008 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.644509077 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.644618034 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.644629002 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.879174948 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.879687071 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.879719973 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:46.880167007 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:46.880177975 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.009083033 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.009155989 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.009370089 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.009409904 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.009426117 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.009437084 CET	49832	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.009443045 CET	443	49832	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.013158083 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.013201952 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.013271093 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.013396025 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.013411045 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.378937006 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.379442930 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.379473925 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.379899979 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.379904985 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.389195919 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.389561892 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.389580011 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.389960051 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.389966011 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.405344963 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.405684948 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.405702114 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.406049013 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.406054020 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.432595968 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.432935953 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.432965040 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.433387995 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.433393002 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.511025906 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.511096001 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.511138916 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.513326883 CET	49836	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.513345003 CET	443	49836	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.516671896 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.516702890 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.516776085 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.516894102 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.516907930 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.525906086 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.525968075 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.526025057 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.526137114 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.526170015 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.526196957 CET	49834	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.526215076 CET	443	49834	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.528995991 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.529022932 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.529076099 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.529212952 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.529226065 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.542150021 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.542222023 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.542272091 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.542360067 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.542370081 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.542381048 CET	49835	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.542391062 CET	443	49835	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.544704914 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.544750929 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.544835091 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.545041084 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.545072079 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.565884113 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.566164017 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.566226006 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.566838980 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.566848993 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.566859961 CET	49837	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.566864967 CET	443	49837	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.569005013 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.569041014 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.569113970 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.569255114 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.569277048 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.771848917 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.788944960 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.788988113 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.789428949 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.789438009 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.919513941 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.920114040 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.920203924 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.922077894 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.922097921 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.922111034 CET	49838	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.922117949 CET	443	49838	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.948374987 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.948401928 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:47.948467016 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.948601007 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:47.948611975 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.260868073 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.263391972 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.263422966 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.264065027 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.264072895 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.287190914 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.287647963 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.287681103 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.288135052 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.288142920 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.296561003 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.296915054 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.296963930 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.297394991 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.297410011 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.336944103 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.337385893 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.337414026 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.337909937 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.337914944 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.404678106 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.404853106 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.404911041 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.404964924 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.405004978 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.405047894 CET	49840	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.405064106 CET	443	49840	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.407903910 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.407967091 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.408031940 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.408155918 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.408165932 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.419310093 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.419500113 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.419563055 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.419600964 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.419620037 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.419635057 CET	49839	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.419641018 CET	443	49839	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.421782017 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.421807051 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.421900034 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.422040939 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.422051907 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428174019 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428231001 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428277016 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.428296089 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428319931 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428380013 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.428452015 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.428452015 CET	49841	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.428483963 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.428510904 CET	443	49841	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.430823088 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.430836916 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.430916071 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.431432009 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.431444883 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.466995001 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.467144966 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.467202902 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.467236996 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.467245102 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.467255116 CET	49842	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.467258930 CET	443	49842	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.469145060 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.469188929 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.469257116 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.469364882 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.469381094 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.673122883 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.673602104 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.673640013 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.674062967 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.674068928 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.801769018 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.801800013 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.801837921 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.801909924 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.802134991 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.802134991 CET	49844	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.802150965 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.802161932 CET	443	49844	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.804685116 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.804790974 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:48.804877996 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.805008888 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:48.805041075 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.161708117 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.162036896 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.163738966 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.198175907 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.203429937 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.207365036 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.210201025 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.241564035 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.365154982 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.365184069 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.365432978 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.365447998 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.365894079 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.365899086 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.366107941 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.366111994 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.366111994 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.366122007 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.366480112 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.366486073 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.366734982 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.366759062 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.367228031 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.367234945 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.489854097 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.489934921 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.490036011 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.490159988 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.490178108 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.490187883 CET	49846	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.490192890 CET	443	49846	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.491570950 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.491647959 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.491704941 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.491727114 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.491868019 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.491875887 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.491894007 CET	49845	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.491899014 CET	443	49845	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.492683887 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.492753983 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.492809057 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.492830038 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.492871046 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.492917061 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493156910 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493170977 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.493185043 CET	49848	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493189096 CET	443	49848	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.493264914 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493290901 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.493350983 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493838072 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.493851900 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.494198084 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.494440079 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.494492054 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.494743109 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.494748116 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.494760990 CET	49847	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.494769096 CET	443	49847	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.495985985 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.496015072 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.496081114 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497284889 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497287035 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497292995 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.497320890 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.497364044 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497387886 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497520924 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497520924 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497535944 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.497551918 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.497651100 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.497664928 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.540266991 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.540844917 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.540860891 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.541507006 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.541512012 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.670571089 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.670640945 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.670690060 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.670865059 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.670876980 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.670888901 CET	49849	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.670893908 CET	443	49849	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.673990965 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.674032927 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:49.674132109 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.674284935 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:49.674299955 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.230089903 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.230259895 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.230559111 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.230580091 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.231024027 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.231030941 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.231242895 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.231255054 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.231594086 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.231597900 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.240837097 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.241076946 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.241117954 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.241430998 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.241437912 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.266273975 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.266853094 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.266890049 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.267443895 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.267450094 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.359551907 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.359607935 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.359657049 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.359674931 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.359688997 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.359730959 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.360095024 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.360107899 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.360117912 CET	49854	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.360122919 CET	443	49854	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.363464117 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.363533974 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.363578081 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.363818884 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.363823891 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.363837004 CET	49852	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.363840103 CET	443	49852	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.366082907 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.366122007 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.366184950 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.368318081 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.368341923 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.368396044 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.368558884 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.368581057 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.368936062 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.368949890 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.373007059 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.373430967 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.373482943 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.373542070 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.373563051 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.373574018 CET	49851	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.373579025 CET	443	49851	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.376976967 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.376988888 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.377048016 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.377307892 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.377321959 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.403094053 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.403156042 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.403207064 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.403561115 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.403570890 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.403584003 CET	49853	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.403589964 CET	443	49853	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.408514977 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.408540010 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.408674002 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.409018993 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.409032106 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.409306049 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.410170078 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.410183907 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.411287069 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.411293030 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.540533066 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.541228056 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.541289091 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.541302919 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.541338921 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.541409969 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.541426897 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.541439056 CET	49855	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.541445017 CET	443	49855	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.544167995 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.544207096 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:50.544279099 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.544416904 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:50.544429064 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.095962048 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.096429110 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.096445084 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.096865892 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.096872091 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.108608007 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.108978033 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.109019041 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.109358072 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.109366894 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.122077942 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.122343063 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.122361898 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.122687101 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.122694016 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.205908060 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.206264019 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.206274986 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.206629992 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.206634045 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.236485958 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.236604929 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.236706018 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.236826897 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.236841917 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.236850977 CET	49857	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.236856937 CET	443	49857	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.239592075 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.239641905 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.239720106 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.239872932 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.239886999 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.240694046 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.240741968 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.240792990 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.240895033 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.240895033 CET	49856	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.240928888 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.240952969 CET	443	49856	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.242815971 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.242846012 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.243055105 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.243055105 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.243098021 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.266820908 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.266889095 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.266948938 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.267066956 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.267066956 CET	49858	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.267090082 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.267127037 CET	443	49858	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.269278049 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.269321918 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.269387007 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.269498110 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.269507885 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.334661961 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.335442066 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.335503101 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.335880041 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.335894108 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353117943 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353185892 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353244066 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.353260040 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353296995 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353339911 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.353425026 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.353437901 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.353449106 CET	49859	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.353454113 CET	443	49859	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.355781078 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.355813026 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.355900049 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.356013060 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.356024981 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.473041058 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.473113060 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.473202944 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.473344088 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.473391056 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.473422050 CET	49860	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.473437071 CET	443	49860	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.476429939 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.476489067 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:51.476576090 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.476691961 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:51.476706982 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.018969059 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.019485950 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.019506931 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.019938946 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.019943953 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.051908970 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.052124023 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.052288055 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.052311897 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.052484989 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.052560091 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.052630901 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.052637100 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.052946091 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.052963018 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.130176067 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.130628109 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.130656004 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.131064892 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.131071091 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.180807114 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.180898905 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.180974960 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.181107044 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.181124926 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.181134939 CET	49863	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.181139946 CET	443	49863	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.183891058 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.183937073 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.184056997 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.184194088 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.184211969 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.217968941 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.217997074 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.218040943 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.218075037 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.218118906 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.218317986 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.218338013 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.218348980 CET	49864	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.218355894 CET	443	49864	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220307112 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220463991 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220532894 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.220598936 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.220598936 CET	49862	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.220654011 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220680952 CET	443	49862	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220796108 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.220834970 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.220889091 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.221000910 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.221016884 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.222505093 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.222549915 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.222620010 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.222740889 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.222755909 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.266438961 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.267052889 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.267069101 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.267638922 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.267643929 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.287767887 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.287919044 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.287978888 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.288017988 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.288034916 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.288053036 CET	49865	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.288058996 CET	443	49865	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.290755033 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.290779114 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.290841103 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.290987015 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.291003942 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.414351940 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.414524078 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.414608955 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.414666891 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.414688110 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.414700031 CET	49866	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.414706945 CET	443	49866	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.417146921 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.417197943 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.417279005 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.417398930 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.417409897 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.985388994 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.985872984 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.985908031 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:52.986351013 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:52.986358881 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.034832954 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.035309076 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.035368919 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.035847902 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.035856009 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.072876930 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.073297024 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.073321104 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.073584080 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.073590040 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.100296021 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.100716114 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.100733042 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.101111889 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.101115942 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.173501968 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.173593044 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.173651934 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.173831940 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.173857927 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.173872948 CET	49867	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.173881054 CET	443	49867	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.174329042 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.174355030 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.174396992 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.174408913 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.174448013 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.174551010 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.174571037 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.174586058 CET	49868	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.174597025 CET	443	49868	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.176626921 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176668882 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.176690102 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176712036 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.176758051 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176790953 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176923037 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176923990 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.176939011 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.176939011 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.226092100 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.226257086 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.226320028 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.226365089 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.226383924 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.226394892 CET	49869	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.226399899 CET	443	49869	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.228806019 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.228832006 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.228924036 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.229118109 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.229129076 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.231384993 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.231728077 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.231743097 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.232131958 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.232136011 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.258171082 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.258235931 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.258301020 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.258507967 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.258507967 CET	49870	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.258538961 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.258553028 CET	443	49870	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.260837078 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.260875940 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.260941029 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.261075020 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.261095047 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.426731110 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.426914930 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.426984072 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.427031040 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.427031040 CET	49871	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.427047968 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.427057028 CET	443	49871	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.429313898 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.429384947 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.429456949 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.429595947 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.429608107 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.991677999 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.992281914 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.992316961 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.992762089 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:53.992768049 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.999520063 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:53.999990940 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.000024080 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.000420094 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.000427961 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.054291010 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.054966927 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.055007935 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.055269957 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.055282116 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.092916012 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.093322039 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.093354940 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.093667030 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.093672991 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.138394117 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.138446093 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.138506889 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.138514996 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.138554096 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.140424967 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.140424967 CET	49873	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.140463114 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.140490055 CET	443	49873	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.143239021 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.143285036 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.143364906 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.143471956 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.143479109 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.166703939 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.166774988 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.166829109 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.166987896 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.167009115 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.167021990 CET	49874	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.167028904 CET	443	49874	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.170685053 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.170725107 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.170775890 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.170989990 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.171005964 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.184751987 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.184820890 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.184884071 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.184911966 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.184951067 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.184993982 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.184993982 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.184993982 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.185029984 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.186940908 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.186970949 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.187199116 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.187199116 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.187232971 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.233086109 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.233355999 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.233428955 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.233463049 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.233479023 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.233489037 CET	49876	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.233493090 CET	443	49876	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.235538006 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.235564947 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.235641956 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.235779047 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.235795975 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.241755009 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.242101908 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.242130041 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.242523909 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.242532969 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.375466108 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.375588894 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.375650883 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.375694990 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.375766039 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.375822067 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.375822067 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.375874996 CET	49877	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.375886917 CET	443	49877	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.378293037 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.378340006 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.378397942 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.378693104 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.378709078 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.494606972 CET	49875	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.494636059 CET	443	49875	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.898689985 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.899106026 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.899128914 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.899543047 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.899548054 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.929792881 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.930165052 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.930195093 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.930577993 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.930583954 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.938602924 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.938884020 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.938916922 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.939253092 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.939259052 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.985780001 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.986124039 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.986141920 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:54.986552954 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:54.986561060 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.030618906 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.030715942 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.030782938 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.030929089 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.030945063 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.030961037 CET	49878	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.030966043 CET	443	49878	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.033471107 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.033562899 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.033757925 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.033929110 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.033962965 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.063481092 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.063647985 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.063718081 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.063834906 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.063863039 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.063877106 CET	49881	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.063884020 CET	443	49881	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.066409111 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.066448927 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.066647053 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.066802979 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.066814899 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.076674938 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.076714993 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.076760054 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.076776028 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.076817036 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.076988935 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.077012062 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.077027082 CET	49880	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.077033997 CET	443	49880	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.079113007 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.079150915 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.079229116 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.079339027 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.079363108 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.112956047 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.113328934 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.113362074 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.113765001 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.113771915 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.127624989 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.127698898 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.127758980 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.127796888 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.127821922 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.127870083 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.130522966 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.130522966 CET	49882	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.130554914 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.130569935 CET	443	49882	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.145951986 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.145992041 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.146085024 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.148263931 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.148282051 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.247123003 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.247211933 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.247370958 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.247643948 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.247673035 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.247690916 CET	49883	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.247699022 CET	443	49883	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.250684977 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.250729084 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.250825882 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.251003027 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.251012087 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.648397923 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:55.648452997 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:55.648509026 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:55.769042015 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.769469023 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.769547939 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.769984007 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.769999027 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.794707060 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.795161009 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.795191050 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.795756102 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.795763969 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.808624029 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.809032917 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.809058905 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.809747934 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.809758902 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.900909901 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.900991917 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.901048899 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.901410103 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.901456118 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.901484013 CET	49885	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.901500940 CET	443	49885	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.902812958 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.903264046 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.903289080 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.903687954 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.903692961 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.904517889 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.904562950 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.904629946 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.904767036 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.904781103 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.924258947 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.924566031 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.924635887 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.924679995 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.924679995 CET	49886	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.924701929 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.924715996 CET	443	49886	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.928415060 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.928456068 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.928524017 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.928761959 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.928778887 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.939713001 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.939734936 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.939774990 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.939800024 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.939832926 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.939963102 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.939989090 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.940011978 CET	49887	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.940022945 CET	443	49887	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.942758083 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.942790031 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:55.942854881 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.942965031 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:55.942974091 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.024053097 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.024456024 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.024476051 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.024956942 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.024961948 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.037101030 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.037220955 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.037282944 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.037350893 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.037375927 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.037395954 CET	49888	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.037403107 CET	443	49888	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.057168961 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.057202101 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.057269096 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.057373047 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.057384968 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167092085 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167144060 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167201996 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.167216063 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167239904 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167309046 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.167378902 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.167393923 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.167404890 CET	49889	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.167409897 CET	443	49889	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.169666052 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.169706106 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.169799089 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.170030117 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.170044899 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.180849075 CET	49703	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.181040049 CET	49703	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.181238890 CET	49897	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.181318998 CET	443	49897	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:56.181416035 CET	49897	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.181593895 CET	49897	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.181623936 CET	443	49897	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:56.186250925 CET	443	49703	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:56.186314106 CET	443	49703	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:56.636965990 CET	49815	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:40:56.637002945 CET	443	49815	142.250.184.228	192.168.2.5
Oct 30, 2024 17:40:56.751763105 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.752332926 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.752357960 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.752784014 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.752791882 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.752952099 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.753315926 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.753331900 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.753761053 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.753772974 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.774983883 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.775777102 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.775777102 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.775813103 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.775837898 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.792093039 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.792464018 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.792484999 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.792931080 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.792937040 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.860899925 CET	443	49897	23.1.237.91	192.168.2.5
Oct 30, 2024 17:40:56.861017942 CET	49897	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:40:56.882230997 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.882301092 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.882427931 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.882615089 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.882615089 CET	49892	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.882639885 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.882652998 CET	443	49892	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.884990931 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.885050058 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.885274887 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.885878086 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.885917902 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.886002064 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.886006117 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.886029959 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.886060953 CET	49894	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.886069059 CET	443	49894	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.888145924 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.888154984 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.888169050 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.888233900 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.890384912 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.890384912 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.890470982 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.901137114 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.901740074 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.901758909 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.902214050 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.902220011 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.906409025 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.906573057 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.908303976 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.908303976 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.908387899 CET	49893	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.908412933 CET	443	49893	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.911173105 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.911218882 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.911421061 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.911556959 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.911575079 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.930186033 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.930980921 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.931035042 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.931056023 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.931174040 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.931174040 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.931288004 CET	49895	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.931293964 CET	443	49895	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.933386087 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.933418989 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:56.933572054 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.933639050 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:56.933653116 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.058818102 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.059012890 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.059298992 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.059298992 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.059706926 CET	49896	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.059720993 CET	443	49896	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.062040091 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.062074900 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.062208891 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.062338114 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.062360048 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.617378950 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.617835045 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.617851019 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.618304014 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.618308067 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.619184017 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.619489908 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.619558096 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.619856119 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.619870901 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.647402048 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.647720098 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.647747993 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.648052931 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.648058891 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.668453932 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.668785095 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.668864012 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.669167042 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.669179916 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.746826887 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.747020006 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.747070074 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.747073889 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.747122049 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.747181892 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.747200012 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.747217894 CET	49898	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.747226000 CET	443	49898	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.749309063 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.749366999 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.749458075 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.749599934 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.749600887 CET	49899	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.749650002 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.749674082 CET	443	49899	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.749967098 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.750055075 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.750145912 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.750490904 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.750519037 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.751760006 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.751811028 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.751884937 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.752024889 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.752054930 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.781230927 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.781990051 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.782036066 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.782079935 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.782099009 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.782109976 CET	49900	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.782116890 CET	443	49900	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.784050941 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.784075022 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.784194946 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.784301043 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.784315109 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.798059940 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.798243046 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.798357010 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.798418999 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.798418999 CET	49901	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.798439980 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.798449993 CET	443	49901	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.800396919 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.800437927 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.800517082 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.800709009 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.800734997 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.834481001 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.834880114 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.834903002 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.835309029 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.835324049 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.973543882 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.973625898 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.973695040 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.973933935 CET	49902	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.973956108 CET	443	49902	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.977797031 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.977833986 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:57.978144884 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.978457928 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:57.978473902 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.489362955 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.489965916 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.490046978 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.490437031 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.490453005 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.495361090 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.495644093 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.495719910 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.495960951 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.495980024 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.538122892 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.538575888 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.538599014 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.538964033 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.538969994 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.575850010 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.576257944 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.576318026 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.576607943 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.576622009 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.621978045 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.622061968 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.622277021 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.622378111 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.622378111 CET	49903	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.622427940 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.622459888 CET	443	49903	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.625077963 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.625133038 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.625221968 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.625377893 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.625408888 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.627737045 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.627798080 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.627916098 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.628012896 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.628012896 CET	49904	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.628081083 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.628118992 CET	443	49904	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.629920006 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.629960060 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.630019903 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.630126953 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.630142927 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.684283018 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.684449911 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.684506893 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.684536934 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.684556961 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.684567928 CET	49905	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.684572935 CET	443	49905	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.686554909 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.686604977 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.686687946 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.686827898 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.686855078 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.710794926 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.711177111 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.711210012 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.711601019 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.711607933 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.719906092 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.719947100 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.720011950 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.720078945 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.720177889 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.720179081 CET	49906	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.720249891 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.720283031 CET	443	49906	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.722187996 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.722230911 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.722301960 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.722424984 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.722445011 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.841290951 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.841362953 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.841542959 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.841574907 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.841593027 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.841603994 CET	49907	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.841609001 CET	443	49907	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.844135046 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.844165087 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:58.844252110 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.844479084 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:58.844486952 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.363888025 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.368149996 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.368212938 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.368616104 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.368633986 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.370150089 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.370484114 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.370502949 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.370815992 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.370821953 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.438990116 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.439522028 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.439553976 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.439996958 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.440007925 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.465121031 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.465974092 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.465998888 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.466588020 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.466593981 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.496365070 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.496438026 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.496499062 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.496721029 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.496757030 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.496787071 CET	49908	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.496803045 CET	443	49908	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.499887943 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.499929905 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.500017881 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.500176907 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.500195980 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.573545933 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.573573112 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.573641062 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.573663950 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.573848963 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.574044943 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.574067116 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.574095011 CET	49910	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.574107885 CET	443	49910	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.576971054 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.577018023 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.577308893 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.577308893 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.577348948 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.597888947 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.597930908 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.597985029 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.597989082 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.598030090 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.598223925 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.598244905 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.598259926 CET	49911	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.598268032 CET	443	49911	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.600572109 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.600615978 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.600697041 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.600852966 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.600867033 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.614115953 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.614542961 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.614557981 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.614990950 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.614996910 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.695923090 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.696011066 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.696100950 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.696388006 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.696402073 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.696414948 CET	49909	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.696419954 CET	443	49909	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.699793100 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.699846029 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.699915886 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.700048923 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.700071096 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.750668049 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.750710011 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.750772953 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.750879049 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.751003981 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.751383066 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.751400948 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.751414061 CET	49912	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.751420975 CET	443	49912	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.754272938 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.754323006 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:40:59.754519939 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.754607916 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:40:59.754625082 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.251686096 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.252312899 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.252351046 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.252752066 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.252760887 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.309648991 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.310129881 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.310161114 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.310584068 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.310590982 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.333676100 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.334238052 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.334258080 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.334662914 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.334670067 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.382994890 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.383080006 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.383132935 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.383268118 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.383294106 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.383322001 CET	49913	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.383330107 CET	443	49913	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.386207104 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.386257887 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.386343956 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.386511087 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.386531115 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.419955969 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.420329094 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.420352936 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.420717001 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.420725107 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.462626934 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.462783098 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.462853909 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.462933064 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.462954998 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.462974072 CET	49915	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.462980986 CET	443	49915	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.465653896 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.465697050 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.465785027 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.465944052 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.465959072 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.480077982 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.480110884 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.480156898 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.480180979 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.480212927 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.480350018 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.480376959 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.480395079 CET	49914	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.480401993 CET	443	49914	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.482455015 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.482492924 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.482570887 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.482716084 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.482734919 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.511075020 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.511578083 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.511600971 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.511986017 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.511991024 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549349070 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549380064 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549449921 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.549477100 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549556017 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549597979 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.549735069 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.549760103 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.549777985 CET	49916	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.549784899 CET	443	49916	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.552555084 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.552589893 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.552644968 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.552814007 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.552825928 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.646624088 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.646661997 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.646712065 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.646714926 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.646985054 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.646985054 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.647051096 CET	49917	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.647068024 CET	443	49917	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.649704933 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.649749994 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:00.649830103 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.650022984 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:00.650036097 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.122150898 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.122740984 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.122776985 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.123192072 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.123202085 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.214719057 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.215292931 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.215308905 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.215754032 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.215776920 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.232708931 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.233196974 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.233278036 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.233566999 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.233583927 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.253679037 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.253710985 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.253762007 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.253771067 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.253807068 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.254095078 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.254121065 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.254139900 CET	49918	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.254148006 CET	443	49918	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.256849051 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.256884098 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.256967068 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.257117033 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.257134914 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.295708895 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.296117067 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.296144009 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.296536922 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.296545029 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.359200954 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.359281063 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.359371901 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.359663963 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.359690905 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.359730959 CET	49919	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.359738111 CET	443	49919	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.367084026 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.367122889 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.367202044 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.367753983 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.367768049 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.370739937 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.370810986 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.370867968 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.371541977 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.371561050 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.371571064 CET	49920	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.371583939 CET	443	49920	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.386204958 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.386246920 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.386336088 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.386461973 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.386472940 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.387876034 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.388277054 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.388286114 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.388884068 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.388886929 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.431195974 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.431286097 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.431361914 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.431562901 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.431582928 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.431601048 CET	49921	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.431606054 CET	443	49921	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.435401917 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.435466051 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.435561895 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.435734987 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.435750008 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.517991066 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.518047094 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.518110991 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.518135071 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.518199921 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.518429041 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.518429041 CET	49922	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.518465042 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.518497944 CET	443	49922	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.521330118 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.521377087 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:01.521466970 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.521635056 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:01.521651030 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.001689911 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.002291918 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.002305984 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.002759933 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.002767086 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.111282110 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.111885071 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.111943007 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.112363100 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.112380028 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.126576900 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.127099991 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.127125978 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.127532005 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.127547979 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.136302948 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.136352062 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.136437893 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.136674881 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.136698961 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.136722088 CET	49923	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.136729956 CET	443	49923	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.139288902 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.139337063 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.139429092 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.139578104 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.139595985 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.168632030 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.169194937 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.169219971 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.169698000 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.169708967 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.244162083 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.244193077 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.244257927 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.244354963 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.244426012 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.244931936 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.244959116 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.244985104 CET	49924	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.244992971 CET	443	49924	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.248456001 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.248507023 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.248622894 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.248852968 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.248872995 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.257436037 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.257684946 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.257755041 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.257805109 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.257822037 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.257834911 CET	49925	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.257841110 CET	443	49925	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.258188009 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.258517027 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.258526087 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.259115934 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.259120941 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.260705948 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.260741949 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.260818958 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.260997057 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.261018991 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.297947884 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.297975063 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.298032999 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.298062086 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.298132896 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.298378944 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.298398972 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.298417091 CET	49926	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.298423052 CET	443	49926	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.301299095 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.301350117 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.301446915 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.301657915 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.301675081 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.389755964 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.389909029 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.389988899 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.390103102 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.390127897 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.390137911 CET	49927	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.390142918 CET	443	49927	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.398838997 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.398904085 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:02.399041891 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.399171114 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:02.399187088 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.044936895 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.045542002 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.045571089 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.046039104 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.046046972 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.046505928 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.046792984 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.046828032 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.047123909 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.047132015 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.047480106 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.047713041 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.047733068 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.048016071 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.048022032 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.049329996 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.049561977 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.049575090 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.049870014 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.049875021 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.134958982 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.135775089 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.135806084 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.136202097 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.136208057 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.177478075 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.177556038 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.177623034 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.177808046 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.177831888 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.177844048 CET	49931	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.177850008 CET	443	49931	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.179060936 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.179131031 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.179191113 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.179306984 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.179325104 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.179342985 CET	49929	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.179346085 CET	443	49929	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.180845022 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.180885077 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.181014061 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.181133986 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.181142092 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.181514978 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.181580067 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.181652069 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.181842089 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.181869984 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.184750080 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.184822083 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.184887886 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.185019970 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.185038090 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.185049057 CET	49928	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.185055017 CET	443	49928	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.187153101 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.187170982 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.187266111 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.187413931 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.187426090 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.288712025 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.288752079 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.288811922 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.288872957 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.288933039 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.289180040 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.289232969 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.289268017 CET	49932	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.289283991 CET	443	49932	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.292469978 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.292525053 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.292597055 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.292757988 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.292773962 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.310859919 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.310939074 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.310986996 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.311347008 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.311366081 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.311383009 CET	49930	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.311388969 CET	443	49930	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.314101934 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.314141035 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.314234972 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.314414024 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.314428091 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.902757883 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.903348923 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.903438091 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.903776884 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.903790951 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.919167995 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.919480085 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.919504881 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.919811964 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.919817924 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.922972918 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.923317909 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.923327923 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:03.923635006 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:03.923639059 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.026740074 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.027282953 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.027321100 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.027729034 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.027734041 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.031260014 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.031286001 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.031336069 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.031342030 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.031374931 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.031595945 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.031621933 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.031641960 CET	49934	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.031651020 CET	443	49934	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.034177065 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.034207106 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.034291983 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.034431934 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.034439087 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.054604053 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.054691076 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.054832935 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.054996967 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.055011034 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.055022955 CET	49933	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.055027962 CET	443	49933	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.057111025 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.057136059 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.057225943 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.057356119 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.057364941 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.094062090 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.094116926 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.094153881 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.094274044 CET	49935	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.094279051 CET	443	49935	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.097233057 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.097250938 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.097325087 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.097454071 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.097464085 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.126338959 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.132546902 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.132561922 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.132991076 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.132996082 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.172163010 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.172184944 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.172235012 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.172250032 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.172468901 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.172503948 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.172517061 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.172529936 CET	49936	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.172534943 CET	443	49936	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.174906969 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.174927950 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.175029039 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.175189972 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.175200939 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.260234118 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.260301113 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.260368109 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.260519981 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.260529041 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.260543108 CET	49937	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.260546923 CET	443	49937	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.262753963 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.262794018 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.262862921 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.262994051 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.263004065 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.535258055 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:04.535305977 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:04.535387039 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:04.535738945 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:04.535748959 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:04.781671047 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.782149076 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.782172918 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.782562971 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.782568932 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.797223091 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.799504042 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.799531937 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.799932957 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.799938917 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.819181919 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.819726944 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.819752932 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.820152998 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.820158005 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.913896084 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.913923025 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.913969994 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.913994074 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.914052010 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.914290905 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.914311886 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.914356947 CET	49938	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.914361954 CET	443	49938	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.917473078 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.917510033 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.917675972 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.917779922 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.917788982 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.923302889 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.923686028 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.923710108 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.924134016 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.924139023 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.932625055 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.932693958 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.932749033 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.932876110 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.932890892 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.932903051 CET	49939	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.932909012 CET	443	49939	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.935436010 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.935476065 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.935554028 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.935700893 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.935714960 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.948982954 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.949037075 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.949106932 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.949131012 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.949142933 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.949194908 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.949266911 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.949281931 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.949291945 CET	49940	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.949296951 CET	443	49940	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.951531887 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.951549053 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.951642990 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.951761961 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.951773882 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.988322020 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.988837957 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.988862991 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:04.989311934 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:04.989317894 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.056715965 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.056740046 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.056840897 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.056858063 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.056921005 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.056973934 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.057176113 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.057193995 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.057205915 CET	49941	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.057214022 CET	443	49941	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.060218096 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.060261965 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.060340881 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.060501099 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.060523987 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.118738890 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.118773937 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.118828058 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.118882895 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.118926048 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.119160891 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.119183064 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.119196892 CET	49942	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.119203091 CET	443	49942	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.122014046 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.122044086 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.122119904 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.122281075 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.122291088 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.662587881 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:05.662725925 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:05.666784048 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:05.666795969 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:05.667103052 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:05.675635099 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:05.708477974 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.709271908 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.709292889 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.709765911 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.709772110 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.719364882 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:05.726680040 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.727034092 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.727066994 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.727368116 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.727375031 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.766238928 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.766727924 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.766748905 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.767133951 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.767139912 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.848876953 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.849610090 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.849659920 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.850223064 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.850234985 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.857399940 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.857466936 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.857542992 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.857734919 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.857734919 CET	49944	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.857752085 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.857757092 CET	443	49944	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.860517025 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.860614061 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.860733986 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.860888958 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.860924959 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.901571035 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.901606083 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.901664019 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.901699066 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.901738882 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.901989937 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.902009964 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.902024031 CET	49945	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.902029991 CET	443	49945	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.904968977 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.905010939 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.905096054 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.905293941 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.905306101 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.919919968 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.920012951 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.920078039 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.920479059 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.920499086 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.920533895 CET	49946	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.920541048 CET	443	49946	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.921828032 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.922261953 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.922277927 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.922660112 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.922665119 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.923224926 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.923306942 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:05.923398018 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.923536062 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:05.923568010 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.001661062 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.001696110 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.001755953 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.001820087 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.001883984 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.002134085 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.002199888 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.002238989 CET	49947	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.002255917 CET	443	49947	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.005223036 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.005261898 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.005377054 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.005552053 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.005568027 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.069950104 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.070012093 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.070064068 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.070103884 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.070136070 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.070152044 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.070187092 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.073121071 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.073163986 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.073219061 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.073227882 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.073245049 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.074482918 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.074497938 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.074510098 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.074861050 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.074944019 CET	443	49943	4.175.87.197	192.168.2.5
Oct 30, 2024 17:41:06.075007915 CET	49943	443	192.168.2.5	4.175.87.197
Oct 30, 2024 17:41:06.075541973 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.075618029 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.075675964 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.075839996 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.075839996 CET	49948	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.075858116 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.075869083 CET	443	49948	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.079772949 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.079807043 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.079868078 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.080065012 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.080075979 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.657180071 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.657855988 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.657901049 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.658416986 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.658435106 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.715485096 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.716159105 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.716187000 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.716604948 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.716610909 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.757200956 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.757770061 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.757795095 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.758189917 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.758202076 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.818392038 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.818420887 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.818464994 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.818516970 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.818552017 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.818789959 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.818789959 CET	49949	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.818823099 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.818850994 CET	443	49949	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.821723938 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.821767092 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.821856022 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.822005033 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.822012901 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.851435900 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.851883888 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.851906061 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.852384090 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.852390051 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.876086950 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.876173019 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.876230955 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.876379967 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.876398087 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.876406908 CET	49950	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.876411915 CET	443	49950	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.879244089 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.879348040 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.879388094 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.879456997 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.879651070 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.879662991 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.879723072 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.879730940 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.880156994 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.880162954 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902225971 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902297020 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902364016 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.902390957 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902467012 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902538061 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.902582884 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.902582884 CET	49951	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.902606010 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.902626038 CET	443	49951	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.904936075 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.904970884 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:06.905040979 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.905184984 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:06.905200005 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.021116018 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.021178961 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.021259069 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.021512985 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.021533012 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.021543026 CET	49952	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.021548986 CET	443	49952	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.024450064 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.024483919 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.024573088 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.024733067 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.024744034 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.030549049 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.030617952 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.030668974 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.030726910 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.030735970 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.030746937 CET	49953	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.030757904 CET	443	49953	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.032720089 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.032758951 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.032814980 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.032954931 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.032968998 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.666661978 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.667298079 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.667331934 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.667745113 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.667748928 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.684010983 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.684556961 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.684583902 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.684900999 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.684906960 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.744297028 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.744796038 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.744832039 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.745207071 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.745213032 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.799633026 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.799737930 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.800097942 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.800124884 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.800220013 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.800246000 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.800534964 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.800539970 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.800610065 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.800615072 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.805476904 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.805504084 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.805546045 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.805576086 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.805648088 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.805780888 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.805828094 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.805845022 CET	49954	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.805855036 CET	443	49954	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.808314085 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.808339119 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.808408022 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.808521032 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.808527946 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.812498093 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.812649965 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.812711954 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.812735081 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.812748909 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.812764883 CET	49956	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.812769890 CET	443	49956	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.814713955 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.814754963 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.814815998 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.814966917 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.814985037 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.877012014 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.877597094 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.877675056 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.877701998 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.877720118 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.877728939 CET	49955	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.877732992 CET	443	49955	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.880373001 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.880462885 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.880574942 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.880719900 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.880753040 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930170059 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930197001 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930248022 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930288076 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930296898 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930330038 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930445910 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930500984 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930577040 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930592060 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930593967 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930600882 CET	49958	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930605888 CET	443	49958	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930609941 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.930627108 CET	49957	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.930634022 CET	443	49957	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.933464050 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933501959 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.933568001 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933587074 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933624029 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.933686972 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933711052 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933732033 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:07.933861971 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:07.933882952 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.536848068 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.537494898 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.537519932 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.537959099 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.537964106 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.553039074 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.553581953 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.553613901 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.553963900 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.553972006 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.625545979 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.626219034 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.626267910 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.626663923 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.626677990 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.666913986 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.666953087 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667009115 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667071104 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667088985 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.667108059 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.667366982 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.667377949 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667387009 CET	49959	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.667392015 CET	443	49959	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667581081 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.667623043 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.667999029 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.668010950 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.669898033 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.670289993 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.670296907 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.670330048 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.670335054 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.670404911 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.670516968 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.670535088 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.670694113 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.670707941 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.684711933 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.684895039 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.684993982 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.685071945 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.685094118 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.685106993 CET	49960	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.685113907 CET	443	49960	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.688093901 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.688169956 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.688282967 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.688468933 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.688502073 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.758388996 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.758476973 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.758666039 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.758934975 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.758972883 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.759001017 CET	49961	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.759016037 CET	443	49961	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.762119055 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.762170076 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.762286901 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.762474060 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.762490034 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.798808098 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.798860073 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.798988104 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.799175024 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.799204111 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.799216986 CET	49962	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.799222946 CET	443	49962	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801435947 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801503897 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801570892 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.801609993 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801681995 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801733971 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.801772118 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.801772118 CET	49963	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.801795959 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.801817894 CET	443	49963	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.802098989 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.802170992 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.802257061 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.802440882 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.802473068 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.803698063 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.803746939 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:08.803839922 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.803972960 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:08.803992033 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.423297882 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.423762083 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.423785925 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.424256086 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.424261093 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.432495117 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.432981014 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.433048010 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.433568001 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.433585882 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.492588997 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.493228912 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.493251085 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.493798971 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.493803024 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.549706936 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.550399065 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.550450087 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.550770998 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.550784111 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.552685976 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.553071976 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.553107977 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.553560019 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.553574085 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.555022955 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.555270910 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.555345058 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.555404902 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.555406094 CET	49964	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.555433035 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.555444956 CET	443	49964	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.558131933 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.558171988 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.558245897 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.558379889 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.558393955 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563308001 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563397884 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563524008 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.563549995 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563580990 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563635111 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.563683987 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.563683987 CET	49965	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.563718081 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.563741922 CET	443	49965	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.565933943 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.565999031 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.566088915 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.566207886 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.566222906 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.623044968 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.623286009 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.623377085 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.623486042 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.623512030 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.623528957 CET	49966	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.623537064 CET	443	49966	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.626446962 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.626486063 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.626570940 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.626744986 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.626763105 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.682444096 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.682527065 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.682575941 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.682595015 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.682678938 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.682914972 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.682936907 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.682950974 CET	49967	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.682959080 CET	443	49967	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.684504986 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.684575081 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.684624910 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.684762955 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.684772968 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.684787035 CET	49968	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.684791088 CET	443	49968	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.685973883 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.686007023 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.686115980 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.686321974 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.686335087 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.687176943 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.687222004 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:09.687298059 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.687434912 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:09.687450886 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.300528049 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.301074028 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.301098108 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.301548004 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.301553965 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.304184914 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.304577112 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.304620028 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.304991007 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.305003881 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.363023043 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.363599062 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.363627911 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.364183903 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.364192963 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.421122074 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.421663046 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.421698093 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.422264099 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.422271967 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.435651064 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.435947895 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.436011076 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.436341047 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.436357975 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.447462082 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.447613955 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.447686911 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.447897911 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.447916985 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.447927952 CET	49969	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.447932959 CET	443	49969	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451042891 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451102018 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451181889 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451203108 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451370001 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451438904 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451459885 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451483965 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451553106 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451592922 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.451622009 CET	49970	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.451637983 CET	443	49970	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.454114914 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.454145908 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.454205036 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.454351902 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.454365969 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.493927002 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.494010925 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.494105101 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.494129896 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.494155884 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.494219065 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.494363070 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.494376898 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.494385958 CET	49971	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.494390965 CET	443	49971	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.497021914 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.497056961 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.497131109 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.497277975 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.497292042 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.555701017 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.555803061 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.555866003 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.555896044 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.555964947 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.556010962 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.556061983 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.556072950 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.556083918 CET	49973	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.556088924 CET	443	49973	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.558809996 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.558903933 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.559019089 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.559144974 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.559168100 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.573385954 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.575247049 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.575334072 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.575390100 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.575390100 CET	49972	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.575423002 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.575447083 CET	443	49972	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.577724934 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.577744007 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:10.577812910 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.577950001 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:10.577959061 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.188604116 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.189399958 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.189440012 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.190049887 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.190057039 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.225027084 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.225697994 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.225743055 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.226231098 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.226238966 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.232532978 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.232892990 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.232959986 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.233350992 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.233365059 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.295665026 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.296170950 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.296230078 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.296751022 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.296763897 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.313596964 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.314043999 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.314057112 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.314551115 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.314557076 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321274996 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321325064 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321368933 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.321387053 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321405888 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321464062 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.321692944 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.321707010 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.321718931 CET	49975	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.321723938 CET	443	49975	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.334738016 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.334784031 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.334858894 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.335067987 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.335083008 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.355573893 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.355663061 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.355726004 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.355920076 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.355940104 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.355951071 CET	49976	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.355957031 CET	443	49976	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.359054089 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.359086037 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.359189987 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.359374046 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.359389067 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.397852898 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.399802923 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.399919987 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.400036097 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.400060892 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.400084972 CET	49974	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.400091887 CET	443	49974	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.402841091 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.402883053 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.402966022 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.403120041 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.403134108 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.426054001 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.426229000 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.426294088 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.426363945 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.426388979 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.426403046 CET	49977	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.426409006 CET	443	49977	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.429074049 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.429111004 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.429193020 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.429342031 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.429358006 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.444032907 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.444474936 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.444539070 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.444586039 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.444598913 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.444610119 CET	49978	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.444616079 CET	443	49978	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.447133064 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.447180986 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:11.447247028 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.447392941 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:11.447415113 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.072299004 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.072921991 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.072972059 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.073401928 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.073410034 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.136653900 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.137186050 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.137197018 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.137629986 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.137633085 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.139523983 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.139779091 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.139806986 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.140114069 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.140119076 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.179934978 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.180418968 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.180444956 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.180772066 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.180775881 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.193051100 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.193749905 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.193778992 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.194134951 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.194142103 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.202147007 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.202244043 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.202377081 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.202414036 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.202481985 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.202536106 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.202536106 CET	49979	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.202599049 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.202626944 CET	443	49979	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.205334902 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.205380917 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.205461979 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.205610037 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.205624104 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.291512012 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.291709900 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.291794062 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.291927099 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.291945934 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.291965008 CET	49981	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.291970968 CET	443	49981	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.294981003 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.295032978 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.295135021 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.295308113 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.295324087 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.297975063 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.298248053 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.298311949 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.298337936 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.298351049 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.298360109 CET	49980	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.298366070 CET	443	49980	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.300405025 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.300429106 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.300497055 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.300626993 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.300640106 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.310373068 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.310513973 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.310570002 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.310611963 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.310616970 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.310628891 CET	49982	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.310631990 CET	443	49982	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.312652111 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.312664986 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.312741041 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.312871933 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.312886953 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.327227116 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.327389002 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.327456951 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.327505112 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.327505112 CET	49983	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.327522993 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.327532053 CET	443	49983	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.329303980 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.329335928 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.329406023 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.329536915 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.329546928 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.975475073 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.976008892 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.976037025 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:12.976471901 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:12.976478100 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.031887054 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.047257900 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.053256989 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.054908991 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.054928064 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.055377960 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.055382967 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.055644035 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.055664062 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.056040049 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.056046009 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.056157112 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.056163073 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.056495905 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.056499004 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.102336884 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.102900982 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.102924109 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.103380919 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.103388071 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.103656054 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.103729963 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.103786945 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.103905916 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.103919029 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.103940010 CET	49984	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.103945971 CET	443	49984	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.106765985 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.106803894 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.106894016 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.107069016 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.107085943 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.180947065 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.181126118 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.181245089 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.181349993 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.181358099 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.181366920 CET	49986	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.181370974 CET	443	49986	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182607889 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182657003 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182704926 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.182715893 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182734966 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182777882 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.182873011 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.182882071 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.182893991 CET	49987	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.182898998 CET	443	49987	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.183070898 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.183149099 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.183202982 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.183705091 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.183708906 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.183727980 CET	49985	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.183732033 CET	443	49985	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.184665918 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.184699059 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.184777021 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.185003996 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.185018063 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.185837030 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.185878992 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.185960054 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.186065912 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.186085939 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.186136961 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.186167002 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.186218023 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.186350107 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.186366081 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.241425991 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.241498947 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.241708040 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.241967916 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.241981030 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.241991043 CET	49988	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.241996050 CET	443	49988	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.244970083 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.245055914 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.245153904 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.245388985 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.245424032 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.844449997 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.844990015 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.845055103 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.845452070 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.845468998 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.923702955 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.924253941 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.924278975 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.924710035 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.924725056 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.927767992 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.928076029 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.928097963 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.928102016 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.928356886 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.928392887 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.928412914 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.928420067 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.929018021 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.929027081 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.975502968 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.975567102 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.975683928 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.975687027 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.975732088 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.975972891 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.975991011 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.976003885 CET	49989	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.976011992 CET	443	49989	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.979103088 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.979147911 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.979232073 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.979398966 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.979413033 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.984040976 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.984476089 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.984553099 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:13.984899044 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:13.984915018 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.054941893 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.055728912 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.055830002 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.055865049 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.055865049 CET	49990	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.055882931 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.055895090 CET	443	49990	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.057089090 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.057121992 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.057174921 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.057188034 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.057225943 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.057410002 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.057431936 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.057465076 CET	49991	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.057472944 CET	443	49991	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.058526993 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.058732033 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.058782101 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.058912992 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059003115 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.059005022 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059022903 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.059036016 CET	49992	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059042931 CET	443	49992	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.059091091 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059681892 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059711933 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.059767962 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059798002 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.059916973 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.059987068 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.060000896 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.061237097 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.061259985 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.061326027 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.061429977 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.061444044 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.117877007 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.117965937 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.118156910 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.118370056 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.118415117 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.118448019 CET	49993	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.118463993 CET	443	49993	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.121498108 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.121541023 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.121613979 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.121829033 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.121845007 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.760765076 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.761368990 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.761389971 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.761764050 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.761770964 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.790985107 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.791670084 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.791702032 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.792098999 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.792105913 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.793032885 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.793361902 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.793390989 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.793683052 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.793692112 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.796127081 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.796403885 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.796432018 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.796734095 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.796741962 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.869019985 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.869761944 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.869779110 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.870130062 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.870136023 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.904551029 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.905827045 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.905925035 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.905997038 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.905997038 CET	49994	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.906021118 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.906030893 CET	443	49994	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.908732891 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.908833027 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.909125090 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.909125090 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.909214973 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923146009 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923178911 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923265934 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923307896 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923331976 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923369884 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923424959 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923455954 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923470020 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923474073 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923485041 CET	49996	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923491001 CET	443	49996	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923540115 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923626900 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923664093 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.923688889 CET	49995	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.923703909 CET	443	49995	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.926331997 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926371098 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.926424980 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926456928 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926457882 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.926589012 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926599979 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.926671982 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926671982 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.926709890 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.929094076 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.929799080 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.929862022 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.929900885 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.929900885 CET	49997	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.929922104 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.929960012 CET	443	49997	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.932023048 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.932033062 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:14.932104111 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.932265997 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:14.932276011 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.001543999 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.001578093 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.001750946 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.001785040 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.002094030 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.002160072 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.002310038 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.002321959 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.002332926 CET	49998	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.002337933 CET	443	49998	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.006067991 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.006098032 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.006359100 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.006359100 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.006388903 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.660150051 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.660717964 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.660748005 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.661142111 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.661148071 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.661384106 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.661725998 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.661755085 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.662134886 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.662144899 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.683371067 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.684034109 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.684046984 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.684499979 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.684504986 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.689002991 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.689372063 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.689397097 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.689703941 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.689711094 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.739275932 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.739964962 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.739989996 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.740461111 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.740468979 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.791868925 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.791903973 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.791980982 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.792020082 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.792062998 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.792207003 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.792229891 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.792244911 CET	50000	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.792252064 CET	443	50000	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.793785095 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.794070005 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.794122934 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.799556971 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.799602985 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.799618959 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.799619913 CET	49999	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.799633026 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.799644947 CET	443	49999	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.799683094 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.800738096 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.800765038 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.802182913 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.802229881 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.802293062 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.802413940 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.802428961 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816600084 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816637993 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816695929 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.816704988 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816898108 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816915989 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.816926003 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.816942930 CET	50002	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.816950083 CET	443	50002	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.819535017 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.819574118 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.819658041 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.819801092 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.819818020 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.822964907 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823009968 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823051929 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.823070049 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823189020 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.823204041 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823211908 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.823400021 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823440075 CET	443	50001	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.823479891 CET	50001	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.825146914 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.825184107 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.825249910 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.825360060 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.825375080 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.870378017 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.870421886 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.870500088 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.870543957 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.870574951 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.870809078 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.870827913 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.870840073 CET	50003	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.870846033 CET	443	50003	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.873812914 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.873857975 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:15.873979092 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.874147892 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:15.874161959 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.011796951 CET	443	49897	23.1.237.91	192.168.2.5
Oct 30, 2024 17:41:16.011971951 CET	49897	443	192.168.2.5	23.1.237.91
Oct 30, 2024 17:41:16.535027981 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.535598993 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.535645962 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.536031008 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.536046028 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.540108919 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.540436029 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.540461063 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.540745974 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.540751934 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.567127943 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.567698002 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.567708015 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.568121910 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.568128109 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.571614981 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.572045088 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.572067022 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.572257996 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.572264910 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.616147041 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.616758108 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.616787910 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.617151022 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.617156029 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.668972969 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.669411898 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.669492960 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.669538975 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.669538975 CET	50004	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.669559002 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.669570923 CET	443	50004	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.670191050 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.670275927 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.670335054 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.670461893 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.670481920 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.670491934 CET	50005	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.670497894 CET	443	50005	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.672389030 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672435045 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.672465086 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672501087 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672511101 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.672580004 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672705889 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672708035 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.672720909 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.672722101 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.697699070 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.697762012 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.697799921 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.697941065 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.697947025 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.697956085 CET	50007	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.697959900 CET	443	50007	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.700083017 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.700098991 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.700165987 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.700320959 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.700331926 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.701909065 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.702598095 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.702666044 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.702728987 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.702728987 CET	50006	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.702763081 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.702786922 CET	443	50006	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.704488039 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.704530954 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.704591990 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.704720020 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.704735041 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.756079912 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.756100893 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.756150961 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.756194115 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.756228924 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.756432056 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.756445885 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.756454945 CET	50008	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.756459951 CET	443	50008	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.758796930 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.758833885 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:16.758917093 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.759052038 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:16.759066105 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.411190033 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.411739111 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.411765099 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.412209034 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.412214994 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.418457985 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.418858051 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.418884993 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.419219017 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.419223070 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.453958035 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.454454899 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.454468966 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.454893112 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.454898119 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.504760981 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.505173922 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.505203009 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.505604982 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.505610943 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.540014029 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.540034056 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.540088892 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.540102959 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.540138960 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.540378094 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.540396929 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.540407896 CET	50009	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.540414095 CET	443	50009	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.543658972 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.543690920 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.543757915 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.543889999 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.543905973 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.637625933 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.637655020 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.637728930 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.637754917 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.637794971 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.638046980 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.638056040 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.638067007 CET	50013	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.638072014 CET	443	50013	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.640911102 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.640922070 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.641016006 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.641174078 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.641191006 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.659037113 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.659151077 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.659225941 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.659235001 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.659286022 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.665968895 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.666038990 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.666043997 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.666107893 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.666115046 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.666120052 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.666157961 CET	50010	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.666157961 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.666172981 CET	443	50010	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.668359995 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.668447018 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.668529987 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.668652058 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.668689013 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.693751097 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.693820000 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.693861961 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.693903923 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.693922997 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.693937063 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.693968058 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701163054 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701208115 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701231956 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701241970 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701255083 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701273918 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701278925 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701351881 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701385021 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701395988 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.701410055 CET	50012	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.701415062 CET	443	50012	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.703594923 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.703629971 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:17.703722954 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.703846931 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:17.703860998 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.275095940 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.275888920 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.275913000 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.276351929 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.276357889 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.385567904 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.386120081 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.386141062 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.386610031 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.386615992 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.403881073 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.403899908 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.403963089 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.404064894 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.404190063 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.407903910 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.407918930 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.407931089 CET	50014	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.407936096 CET	443	50014	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.414541960 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.414628029 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.414772987 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.414947987 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.414968014 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.425143003 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.425647974 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.425681114 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.426068068 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.426080942 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.431423903 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.431917906 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.431934118 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.432336092 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.432342052 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.447179079 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.448179007 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.448204041 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.448573112 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.448579073 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.518663883 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.518734932 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.518794060 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.518963099 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.518979073 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.518990993 CET	50015	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.518996954 CET	443	50015	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.522047043 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.522078991 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.522166014 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.522340059 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.522367954 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.555926085 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.567658901 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.567816973 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.567889929 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.568027973 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.568027973 CET	50017	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.568047047 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.568056107 CET	443	50017	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.570643902 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.570727110 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.570878983 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.571008921 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.571058035 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577022076 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577076912 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577126026 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.577153921 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577219963 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577261925 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.577306032 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.577322960 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.577332973 CET	50011	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.577338934 CET	443	50011	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.579787016 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.579826117 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.579905987 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.580018044 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.580030918 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.604031086 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.604079008 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.604351044 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.604378939 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.604407072 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.604851007 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.604939938 CET	443	50016	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.605021000 CET	50016	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.609914064 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.609968901 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:18.610120058 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.610573053 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:18.610613108 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.172214031 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.172887087 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.172950983 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.173377991 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.173413038 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.263489962 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.264296055 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.264312983 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.264785051 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.264808893 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.322910070 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.322983027 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.323113918 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.323368073 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.323426962 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.323461056 CET	50018	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.323477030 CET	443	50018	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.326668978 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.326714039 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.326925993 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.327061892 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.327075958 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.337580919 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.338179111 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.338227034 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.338743925 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.338757038 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.343027115 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.343430996 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.343447924 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.343822956 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.343827963 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.420911074 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.420943022 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.420989037 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.421015024 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.421070099 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.421431065 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.421431065 CET	50019	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.421448946 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.421458960 CET	443	50019	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.495126963 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.495336056 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.495429039 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.495598078 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.495629072 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.495662928 CET	50020	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.495678902 CET	443	50020	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.517770052 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.517846107 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.517925024 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.518217087 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.518237114 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.518249035 CET	50021	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.518255949 CET	443	50021	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.596548080 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.599632025 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.599663973 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.600207090 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.600217104 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.752939939 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.753020048 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.753093958 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.753334999 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.753349066 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:19.753365993 CET	50022	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:19.753372908 CET	443	50022	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.130363941 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.131449938 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:20.131464958 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.132088900 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:20.132095098 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.312074900 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.312150002 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.312330008 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:20.312419891 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:20.312438965 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:20.312495947 CET	50023	443	192.168.2.5	13.107.246.45
Oct 30, 2024 17:41:20.312508106 CET	443	50023	13.107.246.45	192.168.2.5
Oct 30, 2024 17:41:25.197870016 CET	49782	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:25.203243971 CET	80	49782	204.79.197.212	192.168.2.5
Oct 30, 2024 17:41:25.635206938 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:25.640496969 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:41:40.636760950 CET	49782	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:40.642642021 CET	80	49782	204.79.197.212	192.168.2.5
Oct 30, 2024 17:41:40.642735958 CET	49782	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:44.394984007 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:41:44.395087004 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:44.637588978 CET	49780	80	192.168.2.5	204.79.197.212
Oct 30, 2024 17:41:44.642918110 CET	80	49780	204.79.197.212	192.168.2.5
Oct 30, 2024 17:41:44.823977947 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:44.823997021 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:44.824070930 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:44.824301004 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:44.824315071 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:45.690182924 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:45.690614939 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:45.690628052 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:45.690968037 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:45.691406965 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:45.691478968 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:45.744683027 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:55.696150064 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:55.696247101 CET	443	50025	142.250.184.228	192.168.2.5
Oct 30, 2024 17:41:55.696305037 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:56.639487982 CET	50025	443	192.168.2.5	142.250.184.228
Oct 30, 2024 17:41:56.639508009 CET	443	50025	142.250.184.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 30, 2024 17:40:26.746407986 CET	51624	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:39.988302946 CET	50311	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:39.988483906 CET	61751	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:39.996321917 CET	53	50311	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:40.011733055 CET	53	61751	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:40.102463961 CET	53	57481	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:40.106748104 CET	53	50315	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:40.641480923 CET	63029	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:40.642090082 CET	53010	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:40.650027990 CET	53	53010	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:40.650051117 CET	53	63029	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:41.516181946 CET	53	56109	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:43.590308905 CET	56969	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:43.590439081 CET	56815	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:43.594182014 CET	49347	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:43.594405890 CET	53388	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:44.760418892 CET	52875	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:44.760529995 CET	61724	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:44.769443035 CET	53	52875	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:44.769536972 CET	53	61724	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:44.973751068 CET	53	53416	1.1.1.1	192.168.2.5
Oct 30, 2024 17:40:45.017671108 CET	50451	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:45.017797947 CET	57138	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:45.601620913 CET	54922	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:45.601763964 CET	64346	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:46.169051886 CET	61568	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:46.169202089 CET	49592	53	192.168.2.5	1.1.1.1
Oct 30, 2024 17:40:58.689985037 CET	53	52991	1.1.1.1	192.168.2.5
Oct 30, 2024 17:41:17.549590111 CET	53	59897	1.1.1.1	192.168.2.5
Oct 30, 2024 17:41:39.909663916 CET	53	62737	1.1.1.1	192.168.2.5
Oct 30, 2024 17:41:39.975338936 CET	53	52496	1.1.1.1	192.168.2.5
Oct 30, 2024 17:42:09.144165039 CET	53	50512	1.1.1.1	192.168.2.5
Oct 30, 2024 17:42:54.342143059 CET	53	56963	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 30, 2024 17:40:44.813051939 CET	192.168.2.5	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 30, 2024 17:40:26.746407986 CET	192.168.2.5	1.1.1.1	0x50a4	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:39.988302946 CET	192.168.2.5	1.1.1.1	0x4f44	Standard query (0)	hotmail.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:39.988483906 CET	192.168.2.5	1.1.1.1	0xbc8	Standard query (0)	hotmail.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:40.641480923 CET	192.168.2.5	1.1.1.1	0xd9a5	Standard query (0)	outlook.live.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:40.642090082 CET	192.168.2.5	1.1.1.1	0x8ef0	Standard query (0)	outlook.live.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:43.590308905 CET	192.168.2.5	1.1.1.1	0xec9	Standard query (0)	assets.onestore.ms	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:43.590439081 CET	192.168.2.5	1.1.1.1	0x943	Standard query (0)	assets.onestore.ms	65	IN (0x0001)	false
Oct 30, 2024 17:40:43.594182014 CET	192.168.2.5	1.1.1.1	0x38a	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:43.594405890 CET	192.168.2.5	1.1.1.1	0x5a15	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:44.760418892 CET	192.168.2.5	1.1.1.1	0xac98	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:44.760529995 CET	192.168.2.5	1.1.1.1	0xf5b5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:45.017671108 CET	192.168.2.5	1.1.1.1	0x81a6	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:45.017797947 CET	192.168.2.5	1.1.1.1	0x7a88	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:45.601620913 CET	192.168.2.5	1.1.1.1	0xda07	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:45.601763964 CET	192.168.2.5	1.1.1.1	0x2886	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Oct 30, 2024 17:40:46.169051886 CET	192.168.2.5	1.1.1.1	0x210d	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:46.169202089 CET	192.168.2.5	1.1.1.1	0x37b4	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 30, 2024 17:40:25.507976055 CET	1.1.1.1	192.168.2.5	0xb7b0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:25.507976055 CET	1.1.1.1	192.168.2.5	0xb7b0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:26.755052090 CET	1.1.1.1	192.168.2.5	0x50a4	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:39.996321917 CET	1.1.1.1	192.168.2.5	0x4f44	No error (0)	hotmail.com		204.79.197.212	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650027990 CET	1.1.1.1	192.168.2.5	0x8ef0	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	outlook.live.com	olc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	olc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	outlook.ms-acdc.office.com	FRA-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.114	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	FRA-efz.ms-acdc.office.com		52.98.252.226	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:40.650051117 CET	1.1.1.1	192.168.2.5	0xd9a5	No error (0)	FRA-efz.ms-acdc.office.com		52.98.179.242	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:43.598618031 CET	1.1.1.1	192.168.2.5	0x943	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:43.598697901 CET	1.1.1.1	192.168.2.5	0xec9	No error (0)	assets.onestore.ms	assets.onestore.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:43.602570057 CET	1.1.1.1	192.168.2.5	0x38a	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:43.602801085 CET	1.1.1.1	192.168.2.5	0x5a15	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:44.769443035 CET	1.1.1.1	192.168.2.5	0xac98	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 30, 2024 17:40:44.769536972 CET	1.1.1.1	192.168.2.5	0xf5b5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 30, 2024 17:40:45.025805950 CET	1.1.1.1	192.168.2.5	0x7a88	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:45.026823997 CET	1.1.1.1	192.168.2.5	0x81a6	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:45.610502005 CET	1.1.1.1	192.168.2.5	0xda07	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:45.610958099 CET	1.1.1.1	192.168.2.5	0x2886	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:46.178570032 CET	1.1.1.1	192.168.2.5	0x210d	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 30, 2024 17:40:46.178592920 CET	1.1.1.1	192.168.2.5	0x37b4	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

slscr.update.microsoft.com

armmf.adobe.com

otelrules.azureedge.net

outlook.live.com

hotmail.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49780	204.79.197.212	80	8068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:40:40.282587051 CET	426	OUT	GET / HTTP/1.1 Host: hotmail.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 30, 2024 17:40:40.633636951 CET	235	IN	HTTP/1.1 301 Moved Permanently Location: https://outlook.live.com/owa/ X-MSEdge-Ref: Ref A: BF61193EDE894DF8AC0E90CE2BD85A60 Ref B: DFW30EDGE1707 Ref C: 2024-10-30T16:40:40Z Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Length: 0
Oct 30, 2024 17:41:25.635206938 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49782	204.79.197.212	80	8068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 30, 2024 17:41:25.197870016 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49714	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:40:23 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=25935 Date: Wed, 30 Oct 2024 16:40:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:25 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-30 16:40:25 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25924 Date: Wed, 30 Oct 2024 16:40:25 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-30 16:40:25 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=P8Po15hOhsRmhFA&MD=KMzDkLFF HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-30 16:40:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: dd5157ad-f3c6-4cdf-a602-7b443f4c92e1 MS-RequestId: add6c150-6779-4f91-ba49-cba3653f4699 MS-CV: 4KwwbvrBp0mpZNBV.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 30 Oct 2024 16:40:26 GMT Connection: close Content-Length: 24490
2024-10-30 16:40:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-30 16:40:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49723	96.7.168.138	443	6768	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:27 UTC	475	OUT	GET /onboarding/smskillreader.txt HTTP/1.1 Host: armmf.adobe.com Connection: keep-alive Accept-Language: en-US,en;q=0.9 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br If-None-Match: "78-5faa31cce96da" If-Modified-Since: Mon, 01 May 2023 15:02:33 GMT
2024-10-30 16:40:28 UTC	198	IN	HTTP/1.1 304 Not Modified Content-Type: text/plain; charset=UTF-8 Last-Modified: Mon, 01 May 2023 15:02:33 GMT ETag: "78-5faa31cce96da" Date: Wed, 30 Oct 2024 16:40:28 GMT Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:28 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:29 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:28 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: acfedf75-801e-002a-2768-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164028Z-17c5cb586f6f8m6jnehy0z65x400000007pg0000000056be x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:29 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-30 16:40:29 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:31 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 2923fc04-801e-0047-2d8c-2a7265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164031Z-r197bdfb6b4n9cxdnknw89p4zg000000015g00000000mcrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:31 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:31 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:31 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 20969678-a01e-006f-3ab0-2a13cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164031Z-r197bdfb6b4gx6v9pg74w9f47s0000000aeg000000009y12 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:31 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:31 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 85f3058c-201e-00aa-6c2c-283928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164031Z-15b8d89586fvpb59307bn2rcac00000003ag00000000hrpp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:31 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:31 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 23ba7a24-801e-0015-5af3-24f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164031Z-17c5cb586f6r59nt4rzfbx40ys00000000fg000000005y26 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:31 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:31 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:31 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 2b09286a-a01e-003d-7487-2998d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164031Z-17c5cb586f6fqqst87nqkbsx1c00000006vg000000002kf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:31 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-16849878b78km6fmmkbenhx76n00000007h000000000xky5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3443e7a9-f01e-0085-6a6b-2a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-15b8d89586f8nxpt6ys645x5v000000009kg000000008y1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 4755be7f-e01e-0052-062b-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-16849878b78km6fmmkbenhx76n00000007q00000000080nx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-16849878b78qf2gleqhwczd21s00000008k0000000004xdw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:31 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-16849878b78p8hrf1se7fucxk8000000096g000000009pvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:32 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 359c92e3-901e-0064-7ce8-28e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-17c5cb586f6wmhkn5q6fu8c5ss00000007ug000000001zb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:32 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6a8de29f-101e-0079-4f99-2a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-r197bdfb6b4zbthzeykwgnvx8s000000012000000000d4fd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:32 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:32 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-15b8d89586f6nn8zqg1h5suba800000003d000000000mzrm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:32 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:32 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 73421f5c-b01e-001e-1796-2a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-r197bdfb6b4cnxt4mv5f3apubw00000000xg00000000a8at x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49738	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:32 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:32 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164032Z-16849878b78qfbkc5yywmsbg0c0000000810000000005mru x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:33 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:33 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 2fd6bd5d-d01e-007a-394f-26f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164033Z-16849878b78qf2gleqhwczd21s00000008m0000000000rmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:33 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:33 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164033Z-15b8d89586fmhkw429ba5n22m800000009v0000000004yu5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:33 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:33 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 7d21e20b-801e-0015-30df-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164033Z-17c5cb586f66g7mvgrudxte954000000037g00000000hh8g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:33 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:33 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 41883048-901e-005b-06d9-2a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164033Z-15b8d89586f989rkwt13xern5400000003gg00000000gham x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:33 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:33 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: e7bd3bd0-f01e-003c-42e3-258cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164033Z-15b8d89586fmhjx6a8nf3qm53c000000025000000000akhv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:33 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:34 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:34 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: bfc21b6c-401e-0067-2636-2809c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164034Z-15b8d89586f989rkwt13xern5400000003pg000000003yb0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:34 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:34 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:34 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 864201cb-901e-0015-2b18-26b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164034Z-16849878b786fl7gm2qg4r5y7000000008k000000000gt19 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:34 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49750	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:34 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:34 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164034Z-16849878b78smng4k6nq15r6s400000009v000000000ahdg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:34 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:34 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: def6a666-601e-0001-6e47-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164034Z-17c5cb586f6z6tq2xr35mhd5x000000000xg0000000081fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:34 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:34 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:34 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 67fffc2c-401e-000a-5dae-264a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164034Z-16849878b78p49s6zkwt11bbkn00000007zg00000000b2db x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:34 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:35 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:35 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 54a08b66-801e-008f-529b-272c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164035Z-16849878b78j5kdg3dndgqw0vg0000000a0000000000fpvq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:35 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:35 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:35 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 4e15243a-401e-005b-2294-2a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164035Z-r197bdfb6b4g24ztpxkw4umce800000009x000000000a3mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:35 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:35 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:35 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 48c2ab4b-a01e-006f-620c-2813cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164035Z-15b8d89586fmc8ck21zz2rtg1w00000005k00000000085d4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:35 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:35 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:35 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:35 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c1e62926-201e-005d-3f75-2aafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164035Z-r197bdfb6b4n9cxdnknw89p4zg000000017000000000ee7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:35 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:35 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:35 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:35 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: fa11464d-701e-0032-1f49-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164035Z-16849878b78fssff8btnns3b1400000008p00000000035tw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:35 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:36 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:36 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164036Z-16849878b7828dsgct3vrzta7000000006sg000000008e4p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:36 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:36 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:36 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164036Z-17c5cb586f6r59nt4rzfbx40ys00000000mg000000005bw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:36 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:36 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:36 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:36 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164036Z-16849878b78qg9mlz11wgn0wcc00000007wg00000000d1pe x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:36 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:36 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:36 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 01fc617d-601e-000d-05a4-262618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164036Z-16849878b7898p5f6vryaqvp58000000094000000000f21b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:36 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:36 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:36 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164036Z-16849878b782d4lwcu6h6gmxnw00000007w000000000x2gk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:36 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:37 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:37 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: d5dcea80-601e-0050-0829-2a2c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164037Z-r197bdfb6b4g24ztpxkw4umce800000009t000000000mugu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:37 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:37 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:37 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164037Z-16849878b78qwx7pmw9x5fub1c00000006dg00000000kauy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:37 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:37 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: b906435d-801e-008c-78a0-297130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164037Z-17c5cb586f66g7mvgrudxte95400000003bg0000000034zw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:37 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:37 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:37 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:37 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164037Z-16849878b78qwx7pmw9x5fub1c00000006eg00000000cu6k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:37 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:38 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:38 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 2b9d96d3-301e-0020-4e31-276299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164038Z-15b8d89586fhl2qtatrz3vfkf00000000ekg000000007zdr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:38 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:38 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:38 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 99f07890-301e-0051-29d2-2538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164038Z-16849878b78xblwksrnkakc08w00000007k000000000d01w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:38 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:38 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:38 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164038Z-16849878b7867ttgfbpnfxt44s000000082g00000000tup0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:38 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:38 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:38 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 0ce3105a-501e-0029-7cd2-26d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164038Z-16849878b787bfsh7zgp804my4000000074g000000006zwq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:38 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:38 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:38 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:38 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 39d89106-201e-003f-20a3-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164038Z-16849878b78j7llf5vkyvvcehs00000009d000000000b3v3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:38 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:39 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:39 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164039Z-16849878b78p8hrf1se7fucxk8000000098g000000000mwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:39 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:39 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:39 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 18fe904c-c01e-00a1-4257-277e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164039Z-15b8d89586f6nn8zqg1h5suba800000003g000000000dk1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:39 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:39 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164039Z-16849878b7867ttgfbpnfxt44s000000081g00000000xawx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:39 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:39 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:39 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 336bf192-401e-00ac-1a67-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164039Z-15b8d89586f6nn8zqg1h5suba800000003m00000000053eg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:39 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:39 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:39 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:39 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 9e4d4e08-401e-0047-1d64-278597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164039Z-16849878b78zqkvcwgr6h55x9n00000007v0000000000myp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:39 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:40 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: dca3eddb-501e-008c-6f6b-2acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164040Z-r197bdfb6b4skzzvqpzzd3xetg00000007sg00000000bzb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:40 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 07599615-001e-0082-48f6-265880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164040Z-17c5cb586f69w69mgazyf263an00000007f000000000h2q1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:40 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:40 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164040Z-16849878b78zqkvcwgr6h55x9n00000007r000000000hry0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:40 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: cb951b4e-f01e-0020-727f-28956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164040Z-17c5cb586f6wnfhvhw6gvetfh400000007pg00000000n62e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:40 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 26e7cda7-e01e-001f-32f8-251633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164040Z-15b8d89586f8nxpt6ys645x5v000000009n0000000004t8p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 9016a745-201e-0096-70e6-25ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164041Z-16849878b78qg9mlz11wgn0wcc00000007tg00000000tpxd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:41 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: ad1b4984-801e-002a-3571-2931dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164041Z-17c5cb586f672xmrz843mf85fn000000075000000000fgg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:41 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:41 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:41 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: a3f41134-c01e-00ad-7d0b-29a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164041Z-15b8d89586fmhjx6a8nf3qm53c000000025g000000009pb7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:41 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:41 UTC	498	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:41 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 1048e377-301e-0000-11d0-2aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164041Z-r197bdfb6b48pl4k4a912hk2g400000007eg00000000khhk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 16:40:41 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:41 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:41 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164041Z-16849878b78fhxrnedubv5byks00000006r0000000001v59 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:41 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49786	52.98.252.114	443	8068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:41 UTC	663	OUT	GET /owa/ HTTP/1.1 Host: outlook.live.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-30 16:40:42 UTC	2867	IN	HTTP/1.1 302 Cache-Control: no-cache Pragma: no-cache Content-Length: 245 Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0 Server: Microsoft-IIS/10.0 request-id: c2e9d697-967a-26ab-f980-fde19f027c53 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-CalculatedBETarget: FRYP281MB3305.DEUP281.PROD.OUTLOOK.COM X-BackEndHttpStatus: 302 Set-Cookie: ClientId=24166EB93E2E488D83B7FB68EC3DB750; expires=Thu, 30-Oct-2025 16:40:41 GMT; path=/;SameSite=None; secure Set-Cookie: ClientId=24166EB93E2E488D83B7FB68EC3DB750; expires=Thu, 30-Oct-2025 16:40:41 GMT; path=/;SameSite=None; secure Set-Cookie: RoutingKeyCookie=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: logonLatency=LGN01=638659032418962031; domain=live.com; path=/; secure; HttpOnly Set-Cookie: ClientId=24166EB93E2E488D83B7FB68EC3DB750; expires=Thu, 30-Oct-2025 16:40:41 GMT; path=/;SameSite=None; secure Set-Cookie: RoutingKeyCookie=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: HostSwitchPrg=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: OptInPrg=; expires=Sun, 30-Oct-1994 16:40:41 GMT; path=/;SameSite=None; secure; HttpOnly Set-Cookie: logonLatency=LGN01=638659032418962031; domain=live.com; path=/; secure; HttpOnly Set-Cookie: X-OWA-RedirectHistory=AmVSIGQBb0rtlwH53Ag; expires=Wed, 30-Oct-2024 22:42:41 GMT; path=/;SameSite=None; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-Content-Type-Options: nosniff X-BeSku: WCS7 X-OWA-DiagnosticsInfo: 6;0;0; X-BackEnd-Begin: 2024-10-30T16:40:41.896 X-BackEnd-End: 2024-10-30T16:40:41.896 X-DiagInfo: FRYP281MB3305 X-BEServer: FRYP281MB3305 X-UA-Compatible: IE=EmulateIE7 X-ResponseOrigin: OwaAppPool X-Proxy-RoutingCorrectness: 1 Report-To: {"group":"NelOfficeUpload1","max_age":7200,"endpoints":[{"url":"https://exo.nel.measure.office.net/api/report?TenantId=&FrontEnd=Cafe&DestinationEndpoint=FRA&RemoteIP=173.254.250.0&Environment=MT"}],"include_subdomains":true} NEL: {"report_to":"NelOfficeUpload1","max_age":7200,"include_subdomains":true,"failure_fraction":1.0,"success_fraction":0.01} Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: FRA X-FEProxyInfo: FR4P281CA0161.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: FRA X-FEServer: FR4P281CA0161 Date: Wed, 30 Oct 2024 16:40:41 GMT Connection: close
2024-10-30 16:40:42 UTC	245	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 6f 75 74 6c 6f 6f 6b 2f 65 6d 61 69 6c 2d 61 6e 64 2d 63 61 6c 65 6e 64 61 72 2d 73 6f 66 74 77 61 72 65 2d 6d 69 63 72 6f 73 6f 66 74 2d 6f 75 74 6c 6f 6f 6b 3f 64 65 65 70 6c 69 6e 6b 3d 25 32 66 6f 77 61 25 32 66 26 61 6d 70 3b 73 64 66 3d 30 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://www.microsoft.com/en-us/microsoft-365/outlook/email-and-calendar-software-microsoft-outlook?deeplink=%2fowa%2f&sdf=0">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:42 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:42 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: f4a85f8f-401e-00ac-0701-270a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164042Z-16849878b78wv88bk51myq5vxc00000008k000000000h0bs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:42 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:42 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:42 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 151676fb-b01e-0084-4068-28d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164042Z-15b8d89586flzzksdx5d6q7g1000000003b000000000huar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:42 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:42 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:42 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: be8c19eb-d01e-0017-68de-26b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164042Z-r197bdfb6b4wmcgqdschtyp7yg000000088000000000mknh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:42 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:42 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:42 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: e1e6f089-901e-005b-1e15-262005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164042Z-15b8d89586f8nxpt6ys645x5v000000009g000000000exhr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:42 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:42 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:42 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5ef35a72-501e-007b-6836-285ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164042Z-15b8d89586f5s5nz3ffrgxn5ac00000008yg00000000e030 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:42 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:43 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:43 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: f491e318-501e-008f-212c-289054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164043Z-r197bdfb6b4gx6v9pg74w9f47s0000000af00000000092vm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:43 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:43 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:43 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164043Z-16849878b786lft2mu9uftf3y400000009m00000000095ay x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:43 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:43 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:43 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 48ec36c7-d01e-00a1-338d-2735b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164043Z-15b8d89586f6nn8zqg1h5suba800000003fg00000000fz0e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:43 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:43 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: e1f5471d-e01e-0051-4f6c-2784b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164043Z-15b8d89586f5s5nz3ffrgxn5ac000000094000000000110d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:43 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:43 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 53c53d4f-801e-008c-1772-287130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164043Z-15b8d89586f42m673h1quuee4s0000000cg0000000000t0h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:43 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:44 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:44 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 9f581369-601e-00ab-15c9-2a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164044Z-16849878b78p8hrf1se7fucxk8000000097g0000000055u8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:44 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:44 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:44 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: deb87e8e-601e-0001-3532-2afaeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164044Z-r197bdfb6b4n9cxdnknw89p4zg000000013000000000u6rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:44 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:44 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:44 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 9577fd14-901e-0016-4fa3-26efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164044Z-15b8d89586f989rkwt13xern5400000003qg000000000pka x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:44 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:44 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:44 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164044Z-16849878b78wc6ln1zsrz6q9w800000007vg00000000yqty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:44 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:44 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:44 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: af2b1dc9-001e-0066-0d6c-27561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164044Z-16849878b7867ttgfbpnfxt44s000000086000000000bx57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:44 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:45 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:45 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:45 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 080ba15e-001e-0082-732b-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164045Z-16849878b78p49s6zkwt11bbkn00000007wg00000000rx90 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:45 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:45 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:45 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:45 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: bb28544f-801e-0047-7562-267265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164045Z-16849878b785dznd7xpawq9gcn00000009k000000000xsh8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:45 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:45 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:45 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 45a27b82-c01e-002b-5784-2a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164045Z-r197bdfb6b4gx6v9pg74w9f47s0000000afg000000007ycs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:45 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:45 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:45 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:45 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 335320d3-001e-000b-4596-2a15a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164045Z-15b8d89586f4zwgbgswvrvz4vs00000009mg00000000g0h5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:45 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:45 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:46 UTC	491	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164045Z-16849878b78wc6ln1zsrz6q9w8000000080g000000008bh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:46 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:46 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164046Z-16849878b78fssff8btnns3b1400000008p00000000036fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:46 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:46 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:46 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: fb8efb24-701e-0050-0ba3-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164046Z-16849878b78fssff8btnns3b1400000008p00000000036fq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:46 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:46 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 97090380-701e-0032-52b4-2aa540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164046Z-16849878b785dznd7xpawq9gcn00000009kg00000000wpq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:46 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:46 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:46 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: f3c8e2ed-001e-0049-7afa-285bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164046Z-15b8d89586fqj7k5h9gbd8vs9800000009gg0000000073vt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:46 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:46 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:46 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ca4b2a6a-001e-000b-1aff-2615a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164046Z-17c5cb586f626sn8grcgm1gf8000000006p000000000q8h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:47 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 44be6224-701e-0032-738d-27a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164047Z-r197bdfb6b4g24ztpxkw4umce800000009y00000000089rn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:47 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:47 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164047Z-16849878b78q9m8bqvwuva4svc00000006sg00000000qatp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:47 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164047Z-15b8d89586f8nxpt6ys645x5v000000009kg000000008ymm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:47 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:47 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: eb17c832-b01e-0097-1249-274f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164047Z-16849878b78q9m8bqvwuva4svc00000006v000000000csbk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:47 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:47 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:47 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164047Z-16849878b786lft2mu9uftf3y400000009mg000000006d4z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:47 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:48 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:48 UTC	591	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:48 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 24b2bddd-501e-0016-07ca-2a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164048Z-15b8d89586f989rkwt13xern5400000003n0000000007vd1 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-30 16:40:48 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:48 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:48 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164048Z-16849878b78bcpfn2qf7sm6hsn00000009z0000000005qk8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:48 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:48 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:48 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4e087ea8-e01e-0099-0e5a-28da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164048Z-15b8d89586f4zwgbgswvrvz4vs00000009rg000000005y9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:48 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:48 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:48 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:48 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164048Z-16849878b78wv88bk51myq5vxc00000008k000000000h105 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:48 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:48 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:48 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:48 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 04bfc9b2-001e-0017-54ad-260c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164048Z-16849878b78j7llf5vkyvvcehs00000009dg000000009r89 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:48 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:49 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:49 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164049Z-16849878b78j5kdg3dndgqw0vg00000009wg00000000wzts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:49 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:49 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:49 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: f0c9e92d-201e-0000-1199-25a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164049Z-16849878b78fkwcjkpn19c5dsn00000007cg000000004pcn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:49 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:49 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:49 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:49 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: cb3ec3ab-c01e-0014-40b8-26a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164049Z-16849878b787bfsh7zgp804my4000000073g00000000b9xq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:49 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:49 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164049Z-16849878b78zqkvcwgr6h55x9n00000007pg00000000smpn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:49 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:49 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164049Z-16849878b78tg5n42kspfr0x4800000008bg000000007z5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:50 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:50 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: fcac5f09-801e-007b-3f67-28e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164050Z-15b8d89586fdmfsg1u7xrpfws00000000cp0000000001fr2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:50 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:50 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:50 UTC	561	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:50 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e1cf8e51-d01e-00a1-6880-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164050Z-r197bdfb6b4wmcgqdschtyp7yg00000008e0000000003c5e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:50 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:50 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:50 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:50 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: f0ac2fb9-601e-003e-0667-2a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164050Z-r197bdfb6b4wbz6dd37axgrp9s000000012000000000r3wt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:50 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:50 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:50 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:50 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 07185127-a01e-001e-68b5-2a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164050Z-r197bdfb6b4cxj4bmw6ag8gees00000000zg00000000aa9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:50 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:50 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b92dace7-601e-0097-311b-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164050Z-15b8d89586f989rkwt13xern5400000003m000000000ap4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:51 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:51 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 92eac08a-601e-0001-29b2-26faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164051Z-16849878b78p49s6zkwt11bbkn000000081g000000001zyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:51 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:51 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:51 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 92f9c42c-401e-0015-6893-290e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164051Z-17c5cb586f62bgw58esgbu9hgw00000000z000000000f7a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:51 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:51 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:51 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164051Z-17c5cb586f6r59nt4rzfbx40ys00000000ng000000001swg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:51 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:51 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:51 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:51 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164051Z-16849878b78km6fmmkbenhx76n00000007hg00000000uawr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:51 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:51 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:51 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:51 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 141f8a5a-601e-000d-3b74-272618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164051Z-16849878b78g2m84h2v9sta29000000007a00000000002nk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:51 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:52 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164052Z-16849878b78qf2gleqhwczd21s00000008h000000000a49f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:52 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 80bd6f28-d01e-002b-3d65-2725fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164052Z-17c5cb586f626sn8grcgm1gf8000000006w000000000266q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: a4e3dea6-301e-005d-1111-29e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164052Z-r197bdfb6b4skzzvqpzzd3xetg00000007w00000000019r1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:52 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: c633743c-801e-007b-7ea5-2ae7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164052Z-17c5cb586f6z6tq2xr35mhd5x000000000s000000000ub09 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:52 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:52 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:52 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 54290c1c-d01e-008e-01bf-27387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164052Z-16849878b78zqkvcwgr6h55x9n00000007q000000000qqh1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:52 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.5	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:52 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a9c77195-601e-003e-7294-293248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164053Z-15b8d89586fmhkw429ba5n22m800000009u0000000006ktq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:53 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164053Z-15b8d89586fbmg6qpd9yf8zhm0000000034000000000p1cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:53 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:53 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: cf3e7330-401e-0078-5ca6-264d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164053Z-16849878b785jrf8dn0d2rczaw00000009h0000000003wn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:53 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: f9013c52-001e-0079-5ef2-2412e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164053Z-15b8d89586fqj7k5h9gbd8vs9800000009k0000000002v7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:53 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:53 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:53 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: a9595a72-801e-0015-2bad-26f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164053Z-16849878b7867ttgfbpnfxt44s000000088g00000000084z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:53 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:54 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-16849878b78x6gn56mgecg60qc0000000a3g00000000e772 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:54 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:53 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:54 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-16849878b78j7llf5vkyvvcehs000000098g00000000xzxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:54 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:54 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 2ea78088-901e-0083-5428-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-15b8d89586fmhjx6a8nf3qm53c0000000260000000007vzb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:54 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:54 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: fad7475d-801e-002a-7d7c-2a31dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-15b8d89586fmc8ck21zz2rtg1w00000005gg00000000af7t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:54 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:54 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 3cf1e449-401e-00a3-55d5-288b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-15b8d89586f5s5nz3ffrgxn5ac00000008wg00000000mat0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:54 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 48a66efd-001e-00a2-625d-26d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-17c5cb586f67hfgj2durhqcxk8000000079g0000000057n8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 2d08e37c-b01e-0021-309c-27cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-17c5cb586f6hn8cl90dxzu28kw00000008h0000000001q41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:54 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 63860650-101e-00a2-42b4-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164054Z-16849878b7867ttgfbpnfxt44s0000000880000000002bbt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:54 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5278af64-001e-0034-3fad-26dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-16849878b78bcpfn2qf7sm6hsn00000009v000000000rf51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:55 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: c9ef38c2-001e-002b-2fff-2599f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-16849878b78bcpfn2qf7sm6hsn00000009y000000000afvf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:55 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: b4130024-d01e-0082-10a3-26e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-16849878b78xblwksrnkakc08w00000007dg00000000zh2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:55 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e20e9adc-401e-0083-18ae-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-16849878b78bjkl8dpep89pbgg000000071000000000a6tb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:55 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:55 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 903d302d-701e-0050-069c-276767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-16849878b78wv88bk51myq5vxc00000008eg00000000zaye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:55 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:55 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:55 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 419dffea-201e-003c-451f-2830f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164055Z-15b8d89586flspj6y6m5fk442w0000000e4000000000gme4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 0064e569-401e-0067-43f2-2409c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-r197bdfb6b4wmcgqdschtyp7yg000000089g00000000g77g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 27f7fbdb-301e-0096-2237-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-16849878b78qwx7pmw9x5fub1c00000006gg000000003utw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule700150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE54CA33F" x-ms-request-id: e9bbe3b2-401e-005b-3496-259c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-15b8d89586f8l5961kfst8fpb00000000m4000000000589n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e 65 4e 6f 74 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOneNote" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule700151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0A2434F" x-ms-request-id: 23d501f6-c01e-0079-39b4-2ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-r197bdfb6b4hsj5bywyqk9r2xw00000009xg000000002y58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 6e 65 4e 6f 74 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OneNote.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOn

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule703451v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:56 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1409 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFC438CF" x-ms-request-id: 6dfdd6d0-d01e-00a1-15fd-2535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-17c5cb586f64v7xsc2ahm8gsgw00000003a0000000007d1u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:56 UTC	1409	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703451" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:56 UTC	192	OUT	GET /rules/rule703450v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:56 GMT Content-Type: text/xml Content-Length: 1372 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6669CA7" x-ms-request-id: 54b09425-601e-0097-522c-2af33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164056Z-r197bdfb6b48pl4k4a912hk2g400000007f000000000gvb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1372	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 66 66 69 63 65 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703450" V="1" DC="SM" EN="Office.Telemetry.Event.Office.OfficeMobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOfficeMobile" S="Medium" /> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:57 UTC	192	OUT	GET /rules/rule700901v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:57 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1038EF2" x-ms-request-id: b9221649-501e-0064-3dfa-281f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164057Z-r197bdfb6b4wmcgqdschtyp7yg00000008dg000000004um0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700901" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:57 UTC	192	OUT	GET /rules/rule700900v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	563	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:57 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:06 GMT ETag: "0x8DC582BED3D048D" x-ms-request-id: 64700a16-201e-000c-10a6-2a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164057Z-15b8d89586f4zwgbgswvrvz4vs00000009qg000000008hrn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 39 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4e 61 74 75 72 61 6c 4c 61 6e 67 75 61 67 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6f 66 69 6e 67 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700900" V="1" DC="SM" EN="Office.Telemetry.Event.Office.NaturalLanguage" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProofing" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:57 UTC	192	OUT	GET /rules/rule702251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:57 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE0F427E7" x-ms-request-id: bb32e714-c01e-008d-58b0-262eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164057Z-16849878b7828dsgct3vrzta7000000006r000000000dzpq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:57 UTC	192	OUT	GET /rules/rule702250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	540	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:57 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDD0A87E5" x-ms-request-id: 7526ce6b-701e-003e-79c0-2a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164057Z-r197bdfb6b4xfp4mncra29rqkc00000001mg00000000vzpy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 4c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 4c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.ML" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenML" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-30 16:40:57 UTC	192	OUT	GET /rules/rule702651v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-30 16:40:57 UTC	584	IN	HTTP/1.1 200 OK Date: Wed, 30 Oct 2024 16:40:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDEC600CC" x-ms-request-id: 2d748408-801e-0048-3eee-25f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241030T164057Z-16849878b7898p5f6vryaqvp5800000008zg0000000128mr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-30 16:40:57 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 36 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4d 65 64 69 61 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4d 65 64 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702651" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Media.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenMedi

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: Acrobat.exePID: 2704, Parent PID: 1028

General

Target ID:	0
Start time:	12:40:12
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\CV2.pdf"
Imagebase:	0x7ff686a00000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 1644, Parent PID: 2704

General

Target ID:	2
Start time:	12:40:13
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: AcroCEF.exePID: 6768, Parent PID: 1644

General

Target ID:	4
Start time:	12:40:14
Start date:	30/10/2024
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2160 --field-trial-handle=1516,i,4072766168734837792,13195658575506224028,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6413e0000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7880, Parent PID: 5764

General

Target ID:	8
Start time:	12:40:37
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "http://mailto:aamir_manzoor@hotmail.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 8068, Parent PID: 7880

General

Target ID:	9
Start time:	12:40:38
Start date:	30/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 --field-trial-handle=1948,i,4532878139139312722,16722810616985355556,262144 /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report CV2.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\67264d1f-67b0-4e87-a20e-4f8e7e9ac1c6.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-241030164018Z-181.bmp

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Windows Analysis Report
CV2.pdf