Edit tour

Windows Analysis Report
https://hidrive.ionos.com/lnk/FamigcCEF

Overview

General Information

Sample URL:	https://hidrive.ionos.com/lnk/FamigcCEF
Analysis ID:	1546134
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected landing page (webpage, office document or email)

Downloads suspicious files via Chrome

Allocates memory with a write watch (potentially for evading sandboxes)

Contains long sleeps (>= 3 min)

Creates a process in suspended mode (likely to inject code)

HTML body contains low number of good links

HTML body contains password input but no form action

May sleep (evasive loops) to hinder dynamic analysis

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2044 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1948,i,8650896634388582776,7673543875609925860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

unarchiver.exe (PID: 5012 cmdline: "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Business and Financial Details.zip" MD5: 16FF3CC6CC330A08EED70CBC1D35F5D2)

7za.exe (PID: 2828 cmdline: "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w" "C:\Users\user\Downloads\Business and Financial Details.zip" MD5: 77E556CDFDC5C592F5C46DB4127C6F4C)

conhost.exe (PID: 3384 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hidrive.ionos.com/lnk/FamigcCEF" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /api/sharelink/info HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveContent-Length: 84sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://hidrive.ionos.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_69.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_69.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_59.2.dr	String found in binary or memory: https://my.hidrive.com
Source: chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	String found in binary or memory: https://wl.hidrive.com/ionos/0005
Source: chromecache_59.2.dr	String found in binary or memory: https://wl.hidrive.com/ionos/0006
Source: chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	String found in binary or memory: https://wl.hidrive.com/ionos/0007
Source: chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	String found in binary or memory: https://wl.hidrive.com/ionos/0008
Source: Building Plan and Property details.pdf.htm.8.dr	String found in binary or memory: https://www.html-code-generator.com
Source: chromecache_59.2.dr	String found in binary or memory: https://www.strato.de/apps/get_image

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49894 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\Business and Financial Details.zip (copy)

Jump to dropped file

Source: classification engine

Classification label: mal48.win@22/38@8/6

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\Downloads\4b514cdd-6afc-448e-ba26-f053fa21258d.tmp

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Mutant created: NULL
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:3384:120:WilError_03

Source: C:\Windows\SysWOW64\unarchiver.exe

File created: C:\Users\user\AppData\Local\Temp\unarchiver.log

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1948,i,8650896634388582776,7673543875609925860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hidrive.ionos.com/lnk/FamigcCEF"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Business and Financial Details.zip"
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w" "C:\Users\user\Downloads\Business and Financial Details.zip"
Source: C:\Windows\SysWOW64\7za.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1948,i,8650896634388582776,7673543875609925860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Windows\SysWOW64\unarchiver.exe "C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Business and Financial Details.zip"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w" "C:\Users\user\Downloads\Business and Financial Details.zip"	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\7za.exe	Section loaded: 7z.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Windows\SysWOW64\unarchiver.exe

File opened: C:\Windows\WinSxS\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.9672_none_d08f9da24428a513\MSVCR80.dll

Jump to behavior

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://hidrive.ionos.com/lnk/FamigcCEF#file

LLM: Page contains button: 'Download' Source: '2.1.pages.csv'

Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 14A0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 3340000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Windows\SysWOW64\unarchiver.exe	Memory allocated: 5340000 memory commit \| memory reserve \| memory write watch	Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe TID: 7116

Thread sleep time: -922337203685477s >= -30000s

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Code function: 7_2_0143B1D6 GetSystemInfo,

7_2_0143B1D6

Source: C:\Windows\SysWOW64\unarchiver.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Process created: C:\Windows\SysWOW64\7za.exe "C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w" "C:\Users\user\Downloads\Business and Financial Details.zip"

Jump to behavior

Source: C:\Windows\SysWOW64\unarchiver.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	11 Process Injection	1 Masquerading	OS Credential Dumping	31 Virtualization/Sandbox Evasion	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	3 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Extra Window Memory Injection	31 Virtualization/Sandbox Evasion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	11 Process Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	1 Extra Window Memory Injection	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://fontawesome.com/license/free	0%	URL Reputation	safe
https://fontawesome.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
ce1.uicdn.net	213.165.66.58	true	false	unknown
hidrive.ionos.com	85.214.3.95	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	172.217.18.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://hidrive.ionos.com/api/sharelink/download?id=FamigcCEF	false	unknown
https://hidrive.ionos.com/OpenSans-Bold-webfont.b57886ecb84a5d8aa715.woff	false	unknown
https://hidrive.ionos.com/OpenSans-SemiBold-webfont.773343aa665d7ab6ceb5.woff	false	unknown
https://hidrive.ionos.com/lnk/js/bootstrap.556f531165a982e55ac1.js	false	unknown
https://ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=15	false	unknown
https://hidrive.ionos.com/lnk/FamigcCEF	false	unknown
https://hidrive.ionos.com/fa-solid-900.b6879d41b0852f01ed5b.woff2	false	unknown
https://hidrive.ionos.com/api/sharelink/info	false	unknown
https://hidrive.ionos.com/api/sharelink/info?id=FamigcCEF	false	unknown
https://hidrive.ionos.com/lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js	false	unknown
https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css	false	unknown
https://hidrive.ionos.com/fa-regular-400.b041b1fa4fe241b23445.woff2	false	unknown
https://hidrive.ionos.com/OpenSans-Regular-webfont.8e4fce4052b0df5529c7.woff	false	unknown
https://hidrive.ionos.com/lnk/js/hdshare.d10440b3317db342388a.js	false	unknown
https://hidrive.ionos.com/lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js	false	unknown
https://hidrive.ionos.com/v146/images/static/favicon.ico	false	unknown
https://hidrive.ionos.com/lnk/FamigcCEF#file	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.html-code-generator.com	Building Plan and Property details.pdf.htm.8.dr	false		unknown
https://my.hidrive.com	chromecache_59.2.dr	false		unknown
https://wl.hidrive.com/ionos/0007	chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	false		unknown
https://wl.hidrive.com/ionos/0006	chromecache_59.2.dr	false		unknown
https://wl.hidrive.com/ionos/0005	chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	false		unknown
https://fontawesome.com/license/free	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://wl.hidrive.com/ionos/0008	chromecache_59.2.dr, chromecache_76.2.dr, chromecache_61.2.dr	false		unknown
https://fontawesome.com	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://www.strato.de/apps/get_image	chromecache_59.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.214.3.95	hidrive.ionos.com	Germany	6724	STRATOSTRATOAGDE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
213.165.66.58	ce1.uicdn.net	Germany	8560	ONEANDONE-ASBrauerstrasse48DE	false
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1546134
Start date and time:	2024-10-31 14:49:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://hidrive.ionos.com/lnk/FamigcCEF
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@22/38@8/6
EGA Information:	Successful, ratio: 100%
HCA Information:	Successful, ratio: 100% Number of executed functions: 44 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 216.58.206.46, 74.125.206.84, 34.104.35.123, 142.250.181.234, 172.217.16.138, 142.250.186.170, 216.58.206.42, 216.58.212.138, 142.250.185.234, 172.217.16.202, 142.250.185.202, 172.217.18.10, 142.250.186.42, 142.250.185.170, 142.250.184.202, 142.250.186.106, 142.250.184.234, 142.250.186.138, 172.217.18.106, 4.175.87.197, 199.232.214.172, 192.229.221.95, 13.85.23.206, 142.250.185.99
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, otelrules.afd.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, translate.googleapis.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://hidrive.ionos.com/lnk/FamigcCEF

Process:	C:\Windows\SysWOW64\7za.exe
File Type:	HTML document, ASCII text, with very long lines (65472), with CRLF line terminators
Category:	dropped
Size (bytes):	3528709
Entropy (8bit):	4.783038033571961
Encrypted:	false
SSDEEP:	6144:qeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeaeS:S
MD5:	9DFDEFBD6AECD432AF64CC7098B9A267
SHA1:	80CDCA344F7CE5C9C67B120EE60C398C0C8F33B1
SHA-256:	08AF8001B1D3A99D3BB9F06141ABF1EB95E97F9CBCA7A88B3B61286A3CA34464
SHA-512:	A5552F9D2C8BDEB8A865DE349B2D5585B116E949976D1A3F3BB43BD9AD76CEAC81C5F9B823B739E953B64EB4F93D66863FB557F78D323C79F1D69A74E23618AB
Malicious:	false
Reputation:	low
Preview:	<script>.. code by https://www.html-code-generator.com -->..document.write(unescape('%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%0A%3C%21DOCTYPE%20html%3E%0A%3Chtml%20lang%3D%22en%22%3E%0A%3Chead%3E%0A%3Cmeta%20charset%3D%22utf-8%22%3E%0A%3Ctitle%3EBusiness%20Information%3C/title%3E%0A%3C/head%3E%0A%3Cbody%3E%0A%0A%3Cscript%20type%3D%22text/javascript%22%3E%0A%09window.location.replace%28%22https%3A//kicforms.com/img/oofff/%22%29%0A%3C/script%3E%0A%3C/body%3E%0A%3C/html%3E%20%20%0A%0A%3Chtml%3E%0A%0A%3Chead%3E%0A%3Cmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text/html%3B%20charset%3Dwindows-1252%22%3E%0A%3Ctitle%3ENew%20Page%205%3C/title%3E%0A%3C/head%3E%0A%0A%3Cbody%3E%0A%0A%3Cdiv%20role%3D%22presentation%22%20id%3D%22headerArea%22%20data-m%3D%22%7B%26quot%3BcN%26quot%3B%3A%26quot%3BheaderArea%201%26quot%3B%2C%26quot%3BcT%26quot%3B%3A%26quot%3BArea_coreuiArea%26quot%3B%2C%26quot%3Bid%26quot%3B%3A%26quot%3Ba1Body%26quot%3B%2C%26quot%3BsN%26quot%3B%3A1%2C%26quot%3BaN%26quot%3B%3A%26quo

C:\Users\user\AppData\Local\Temp\unarchiver.log

Download File

Process:	C:\Windows\SysWOW64\unarchiver.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1514
Entropy (8bit):	5.111567787105646
Encrypted:	false
SSDEEP:	24:MXxeefZiJKiJjWIPSiJKiJUwQiJf/piJKiJFTAxetiJb0iJTxetiJo/iJJMiJKi0:AeCZGKGbKGKGpQGHpGKGp2etGb0Glet5
MD5:	6247804D40E39B66252D10F6D082F108
SHA1:	D4BE397B7FEDBD0DDDE612951B32D366AC7E9B7C
SHA-256:	3B8FDB53C06FE2B7AC49BDAED76AA1C889AA692453018503328E15DACB2CF714
SHA-512:	8EF0CDD998E8848D10DAD04819297A72F845058F30D5F875C6E2F7DAC56C6D02E3FDE985121ABCE879B5CD7DF277B511514CA6FB0396B7E482611E4CC7436096
Malicious:	false
Reputation:	low
Preview:	10/31/2024 9:50 AM: Unpack: C:\Users\user\Downloads\Business and Financial Details.zip..10/31/2024 9:50 AM: Tmp dir: C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w..10/31/2024 9:50 AM: Received from standard out: ..10/31/2024 9:50 AM: Received from standard out: 7-Zip 18.05 (x86) : Copyright (c) 1999-2018 Igor Pavlov : 2018-04-30..10/31/2024 9:50 AM: Received from standard out: ..10/31/2024 9:50 AM: Received from standard out: Scanning the drive for archives:..10/31/2024 9:50 AM: Received from standard out: 1 file, 176713 bytes (173 KiB)..10/31/2024 9:50 AM: Received from standard out: ..10/31/2024 9:50 AM: Received from standard out: Extracting archive: C:\Users\user\Downloads\Business and Financial Details.zip..10/31/2024 9:50 AM: Received from standard out: --..10/31/2024 9:50 AM: Received from standard out: Path = C:\Users\user\Downloads\Business and Financial Details.zip..10/31/2024 9:50 AM: Received from standard out: Type = zip..10/31/2024 9:50 AM: Received from standard out:

C:\Users\user\Downloads\4b514cdd-6afc-448e-ba26-f053fa21258d.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	9789
Entropy (8bit):	7.92328594204529
Encrypted:	false
SSDEEP:	192:gAd9ZhQruM++VX+DM9HPfFp3D2i+4uBSTPZgIwLzVi:H9ZhIx9HP9BD214uBYMVi
MD5:	F5293C223B9F64E700577F4DB84137C6
SHA1:	57FDE975BEB8BF356FDF4277C977CD9DECB4158F
SHA-256:	690CE55A27AE249200719F8492116FF9DD251395446FF60747719A09AA21C2DB
SHA-512:	1B04C1CA7815BBF4F47B883975793DD8803AD9D3686F39B27BA191932667DBCB1F23140FEF94C5F79529F497C565050061AD4F33371D77C5DCBA1ACD2AA3379A
Malicious:	false
Reputation:	low
Preview:	PK.........l_Y................Business and Financial Details/PK........l_Y.'a......5.I...Business and Financial Details/Building Plan and Property details.pdf.htm.ko....\|.y..y....J.3.c..i..f...G.,.vd..\...^%R"e.N...{N.X.I...>\$.w............_....dA.......\|...WW....\|.{."[..y.^....y...H...l...4.....,.v..../.....f..._g......>{...;._..8......}...)..`Q\lH...:H3....\|.M..y..^..~cF#..]&.&.dK.\.."...y.x...Z..M#.......W_..@=S......"y......2%.8..E.}!/.....c....X.^E..U.,..+.R.Z~.L..J...7."......Z.:..}.G..GO"7.d..Z.>.....CqG.H..(z.....G}[..B.i...M..5........~...w)..g.Z...-....IoR.... ...xv1..=.k..o...)..(/......?.b.v.f...$%.H$a.N...=....ce.'....+?..'.d......\^.u.X...K.-k...R...WU........7...kB;.l.I...~...&..o..?."...'o.l..U./....>....}.?a.gF..H.D.(d....j4.9..I. .?.`.y.....U4sD\|So.{...B`O.Lt.....J......U..G..+.3.V.\<..".Ob..$..]..%..L..fF<.{..z.......A.k.hg.].=.UN..<.i1i.^.%...y....x.X.7>.9I..G./...?F.].Y.&..).k..-..J....m.<Ro........81E..dU...4R~.{$.z.

C:\Users\user\Downloads\Business and Financial Details.zip (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	176713
Entropy (8bit):	7.924451436201835
Encrypted:	false
SSDEEP:	3072:hMiWzzU9RmsCSnLo9N/EvsCSnLo94k5yV8JjJ25yV8JjJc:BWzzUvMTSh4u
MD5:	779CE391A1851D7AD3C74D14F659E60A
SHA1:	8EAEFE62B33250A5543D5723213E0ABAFDF48ECA
SHA-256:	ECA1EBF3B186EE66D96C2E4E0ABBD9163500C0E0ACFED6D5BAE6477B2D40DB5D
SHA-512:	B2A604C06376CF4F3151FD51936505589B663A6C5F9D58576E1C4F8D3128C3D6D98EF33867CD738602EA1FA5E5C0231D26B929E2D9E66005402D2D9BFE58BD9D
Malicious:	true
Reputation:	low
Preview:	PK.........l_Y................Business and Financial Details/PK........l_Y.'a......5.I...Business and Financial Details/Building Plan and Property details.pdf.htm.ko....\|.y..y....J.3.c..i..f...G.,.vd..\...^%R"e.N...{N.X.I...>\$.w............_....dA.......\|...WW....\|.{."[..y.^....y...H...l...4.....,.v..../.....f..._g......>{...;._..8......}...)..`Q\lH...:H3....\|.M..y..^..~cF#..]&.&.dK.\.."...y.x...Z..M#.......W_..@=S......"y......2%.8..E.}!/.....c....X.^E..U.,..+.R.Z~.L..J...7."......Z.:..}.G..GO"7.d..Z.>.....CqG.H..(z.....G}[..B.i...M..5........~...w)..g.Z...-....IoR.... ...xv1..=.k..o...)..(/......?.b.v.f...$%.H$a.N...=....ce.'....+?..'.d......\^.u.X...K.-k...R...WU........7...kB;.l.I...~...&..o..?."...'o.l..U./....>....}.?a.gF..H.D.(d....j4.9..I. .?.`.y.....U4sD\|So.{...B`O.Lt.....J......U..G..+.3.V.\<..".Ob..$..]..%..L..fF<.{..z.......A.k.hg.].=.UN..<.i1i.^.%...y....x.X.7>.9I..G./...?F.].Y.&..).k..-..J....m.<Ro........81E..dU...4R~.{$.z.

C:\Users\user\Downloads\Business and Financial Details.zip.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=store
Category:	dropped
Size (bytes):	176713
Entropy (8bit):	7.924451436201835
Encrypted:	false
SSDEEP:	3072:hMiWzzU9RmsCSnLo9N/EvsCSnLo94k5yV8JjJ25yV8JjJc:BWzzUvMTSh4u
MD5:	779CE391A1851D7AD3C74D14F659E60A
SHA1:	8EAEFE62B33250A5543D5723213E0ABAFDF48ECA
SHA-256:	ECA1EBF3B186EE66D96C2E4E0ABBD9163500C0E0ACFED6D5BAE6477B2D40DB5D
SHA-512:	B2A604C06376CF4F3151FD51936505589B663A6C5F9D58576E1C4F8D3128C3D6D98EF33867CD738602EA1FA5E5C0231D26B929E2D9E66005402D2D9BFE58BD9D
Malicious:	false
Reputation:	low
Preview:	PK.........l_Y................Business and Financial Details/PK........l_Y.'a......5.I...Business and Financial Details/Building Plan and Property details.pdf.htm.ko....\|.y..y....J.3.c..i..f...G.,.vd..\...^%R"e.N...{N.X.I...>\$.w............_....dA.......\|...WW....\|.{."[..y.^....y...H...l...4.....,.v..../.....f..._g......>{...;._..8......}...)..`Q\lH...:H3....\|.M..y..^..~cF#..]&.&.dK.\.."...y.x...Z..M#.......W_..@=S......"y......2%.8..E.}!/.....c....X.^E..U.,..+.R.Z~.L..J...7."......Z.:..}.G..GO"7.d..Z.>.....CqG.H..(z.....G}[..B.i...M..5........~...w)..g.Z...-....IoR.... ...xv1..=.k..o...)..(/......?.b.v.f...$%.H$a.N...=....ce.'....+?..'.d......\^.u.X...K.-k...R...WU........7...kB;.l.I...~...&..o..?."...'o.l..U./....>....}.?a.gF..H.D.(d....j4.9..I. .?.`.y.....U4sD\|So.{...B`O.Lt.....J......U..G..+.3.V.\<..".Ob..$..]..%..L..fF<.{..z.......A.k.hg.].=.UN..<.i1i.^.%...y....x.X.7>.9I..G./...?F.].Y.&..).k..-..J....m.<Ro........81E..dU...4R~.{$.z.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11384)
Category:	downloaded
Size (bytes):	14284
Entropy (8bit):	5.135816400645804
Encrypted:	false
SSDEEP:	192:bvk/9Hjj73MhSmqwkCdxImDWQdWrhokCdxImDFtAnEY26sU9I+R/zJ:bvk/9Hjj78b7ID+7IEtAnjTbDrJ
MD5:	40E51B33A3D2034CE9CF399EEAB5F503
SHA1:	DF9D2B6A4744BBABD18029014A7C5CCDEF409583
SHA-256:	DFAB0BDD23AE75D2B12C8605803ADF6CDCEB4A4BD5425F44FB20BCF83E188735
SHA-512:	038BAE8C427ACD81269F9CB55B31A7DC1C75B234F8BB57088A36875B477BEE5883C94F436BAE174504A2DABF376AB8606BA2FC7474E58FCEDD9C2EB5EEFDF93B
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/lnk/FamigcCEF
Preview:	<!doctype html><html lang="de"><head><meta charset="utf-8"><title>HiDrive</title><meta name="description" content=""><meta name="viewport" content="width=device-width,minimum-scale=1,maximum-scale=2,initial-scale=1"><meta name="format-detection" content="telephone=no"/><meta name="robots" content="noindex"><link href="../v146/images/static/favicon.ico" rel="SHORTCUT ICON" type="image/x-icon"/><link rel="apple-touch-icon" sizes="180x180" href="../images/static/apple-touch-icon-180x180.png"><style>/* more viewport-specific properties can be found in stylesheet */</style><script>window.Config = {"beaconUrl":"https://www.strato.de/apps/get_image","beaconApp":"IONOS_HIDRIVE","consentKey":"privacy_consent_ion","consentVersion":1,"has2FA":true,"hasAddons":true,"hasBackup":true,"hasDarkmode":false,"tenantId":"IONOS","hasEuCookie":false,"hasExternalAccountManagement":false,"hasFeedback":true,"hasHotkeySupport":true,"hasMailupload":true,"hasNews":true,"hasOffice":true,"hasOnboarding":true,"hasPo

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44061), with no line terminators
Category:	downloaded
Size (bytes):	44061
Entropy (8bit):	4.389041798360264
Encrypted:	false
SSDEEP:	768:5YDGNftO5LkxojJWdNV3QqqDfL1kfOFZVCcQb4+wU97Im:5toUZ/VCDwshQb5wU97Im
MD5:	987E7DAAB0A17C6B908ADCB9D2BAA55F
SHA1:	7452873DBE5B30201AFDD0BCA330B9E314CAF363
SHA-256:	31DE6BB26AEBFB82FDC42207F4AA27A66872EFE80E03E8257648FAE67D7EB9F8
SHA-512:	E2097F3C4609574B8375431E010BF7171AA2876635A365599E20B1108E5E6105FD80D8F95C15F9D7A63BA492F58B0BD7DA15298CE635320CF46FE0FD468D8E77
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js
Preview:	"use strict";(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[5],{964:function(l){l.exports='<svg viewBox="0 0 480 480" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M240 480c132.548 0 240-107.452 240-240S372.548 0 240 0 0 107.452 0 240s107.452 240 240 240Z" fill="#DDD"/><path d="M120 215.17v105c0 11.05 8.96 25.83 20 25.83h200c11.04 0 20-14.79 20-25.83V202H120v13.17ZM340 156h-80c-5.43 0-10.79-1.19-16.47-6.87C236.67 142.26 229.57 136 220 136h-80c-11.04 0-20 4.79-20 15.83V190h240v-16.5c0-11.04-8.96-17.5-20-17.5Z" fill="#fff"/></svg>\n'},9838:function(l){l.exports='<svg viewBox="0 0 473 473" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#a)"><path d="M236.26 472.52c130.483 0 236.26-105.777 236.26-236.26S366.743 0 236.26 0 0 105.777 0 236.26s105.777 236.26 236.26 236.26Z" fill="#DDD"/><path d="M235.35 102.22c27.95.16 50.55 22.97 50.4 50.86-.12 21.14-.25 45.08-.32 49.12l34.83-4.6s-.77-35.57-.72-44.34c.26-46.55-37.34-84.5-84-84.77-46.65-.2

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65322), with no line terminators
Category:	dropped
Size (bytes):	442057
Entropy (8bit):	5.31655303509494
Encrypted:	false
SSDEEP:	6144:TIUOYcj1GII0iBzkpkIl51iOrfU7IkO6qYJgWqTj+rgt:TIUOYcjkIILkpko+JgWqTjP
MD5:	468E040E0683D176A2AA220E12804DFE
SHA1:	3B645A0EABB5EA489E34B615F865F64A3F700D40
SHA-256:	AAC41A4E8AAF73D354722C728F98DD416DE3FB588550E33BAF5A8BF243409E98
SHA-512:	0CA64DB2D8DD7A1D5FB44340F981927E80B68A866EB0C431ADFB30E98F82835B4801C26E8E1A46A1E0CE23C12E7C7A9D9F0E4417FF81A0FE40FA58B57B10B7F4
Malicious:	false
Reputation:	low
Preview:	!function(){var e,t={3998:function(e,t,i){"use strict";i(6337);var r=i(4459);window.ResizeObserver\|\|(window.ResizeObserver=r.do),void 0===Node.prototype.replaceChildren&&(Node.prototype.replaceChildren=function(e){for(;this.lastChild;)this.removeChild(this.lastChild);void 0!==e&&this.append(e)});var n=i(5113),s=i.n(n),o=(i(1703),i(7658),i(615)),a=i.n(o),l=i(972),c=i.n(l);function d(e){try{if(3===e.relatedTarget.nodeType&&e.relatedTarget.parentNode===e.target)return!1}catch(e){}return e.target!==e.relatedTarget}function h(e){return".droppable-"+e.cid}var u={bind(e,t){var i,r,n,o;function l(e){n&&(o&&"none"!==o&&(e.originalEvent.dataTransfer.dropEffect=o),e.preventDefault(),e.stopPropagation())}function u(){r=[],n=null}function p(i,r){if(c().has(t,"eventData")){var s=t.eventData.call(e,n,r);e.trigger(i,n,r,s)}else e.trigger(i,n,r)}if(!(e&&e instanceof s().View))throw new Error("first argument needs to be a Backbone view.");if(!c().isUndefined(t)&&!c().isObject(t))throw new Error("options

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14192, version 1.1
Category:	downloaded
Size (bytes):	14192
Entropy (8bit):	7.950922812285735
Encrypted:	false
SSDEEP:	384:nzsqITOptSVfgb0x8DGlPrasTen/qZOSO7O7RWfA+g+c:zsqISpef5x8DuTxenSsSSSRWeP
MD5:	452638A13F622FC7E06C0768EF41E9F9
SHA1:	77F1DE1DD89C27121ECEC91D529D42177CF7F31B
SHA-256:	C4663AA44B0667D4D847A38EE25B1369F97655C3355BAEA54A366943B65BA3A8
SHA-512:	ADC0B54E8BA92C66249C1E1D0C6B475C778951247E81965D19A9E4592323A2E05F978DCB2B5CC1573D7D7A14611ADBA59CE2E167A91A89FB60D375AC75CC510B
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/OpenSans-Bold-webfont.b57886ecb84a5d8aa715.woff
Preview:	wOFF......7p......_@........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......`...`.u..cmap...8...........gasp................glyf......$...4.7...head..&....6...6.K.mhhea..'(.......$....hmtx..'H.......l.M.kern..)L...........loca..3d........M.Y=maxp..5.... ... .V..name..50.......\..3Xpost..5........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../....................3.......3.....f..................@. [...(....1ASC. . ...........X ........^..... ..x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..z.\Li..=.s'...f.....$5M...6..$I.6E.$.M.6..........o...eC,...[o... .Z.j....;M...{?.6w.}.9....#\9..m..9.Sr...Yk......d.i].._oN.ns82...\.Fv.8..Z..7...U...'l}f..Z..5fBlDd,...._.....=a<{;./..........{V.$..b...qb...B......u.J.....e..r5..v.........^...R1...

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65406)
Category:	downloaded
Size (bytes):	237319
Entropy (8bit):	5.343988534272572
Encrypted:	false
SSDEEP:	3072:JfGq7axGHlHGWFbwwX6N7P/A7l1UeC+rdPdbma2440r:lGq7axGHoWFXX6BPk1UeC+ddbma244k
MD5:	21B86381AFE823F2D48453A809EDD38A
SHA1:	47F2426C067FBE8762C576B49CA9AE4C1886F242
SHA-256:	4A24AAACAA67C7BDD56268B475EC0861FD96441C3B2712C22ED3DDD335A9E6A5
SHA-512:	BCF78CBCC360A1568CBF37509243F6ECCD32E0DB28E004EADD9D1538BB02032C46CFD65A0E339236D923CA54320AF1851C57AD087988FD6545A38BA920E4C80B
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js
Preview:	/! For license information please see hdshare-vendor.e87c7ef075c6fc68a726.js.LICENSE.txt /.(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[906],{3476:function(t,e,n){"use strict";if(n.d(e,{D:function(){return i}}),18==n.j)var r=n(5877);var i=function(t){if((0,r.xj)(t))return 1/0;for(var e=0,n=t.parentNode;n;)e+=1,n=n.parentNode;return e}},1428:function(t,e,n){"use strict";n.d(e,{L:function(){return i}});var r="ResizeObserver loop completed with undelivered notifications.",i=function(){var t;"function"==typeof ErrorEvent?t=new ErrorEvent("error",{message:r}):((t=document.createEvent("Event")).initEvent("error",!1,!1),t.message=r),window.dispatchEvent(t)}},6633:function(t,e,n){"use strict";if(n.d(e,{T:function(){return o}}),18==n.j)var r=n(3748);if(18==n.j)var i=n(3476);var o=function(t){r.C.forEach((function(e){e.activeTargets.splice(0,e.activeTargets.length),e.skippedTargets.splice(0,e.skippedTargets.length),e.observationTargets.forEach((function(n){n.isActiv

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44061), with no line terminators
Category:	dropped
Size (bytes):	44061
Entropy (8bit):	4.389041798360264
Encrypted:	false
SSDEEP:	768:5YDGNftO5LkxojJWdNV3QqqDfL1kfOFZVCcQb4+wU97Im:5toUZ/VCDwshQb5wU97Im
MD5:	987E7DAAB0A17C6B908ADCB9D2BAA55F
SHA1:	7452873DBE5B30201AFDD0BCA330B9E314CAF363
SHA-256:	31DE6BB26AEBFB82FDC42207F4AA27A66872EFE80E03E8257648FAE67D7EB9F8
SHA-512:	E2097F3C4609574B8375431E010BF7171AA2876635A365599E20B1108E5E6105FD80D8F95C15F9D7A63BA492F58B0BD7DA15298CE635320CF46FE0FD468D8E77
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[5],{964:function(l){l.exports='<svg viewBox="0 0 480 480" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M240 480c132.548 0 240-107.452 240-240S372.548 0 240 0 0 107.452 0 240s107.452 240 240 240Z" fill="#DDD"/><path d="M120 215.17v105c0 11.05 8.96 25.83 20 25.83h200c11.04 0 20-14.79 20-25.83V202H120v13.17ZM340 156h-80c-5.43 0-10.79-1.19-16.47-6.87C236.67 142.26 229.57 136 220 136h-80c-11.04 0-20 4.79-20 15.83V190h240v-16.5c0-11.04-8.96-17.5-20-17.5Z" fill="#fff"/></svg>\n'},9838:function(l){l.exports='<svg viewBox="0 0 473 473" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#a)"><path d="M236.26 472.52c130.483 0 236.26-105.777 236.26-236.26S366.743 0 236.26 0 0 105.777 0 236.26s105.777 236.26 236.26 236.26Z" fill="#DDD"/><path d="M235.35 102.22c27.95.16 50.55 22.97 50.4 50.86-.12 21.14-.25 45.08-.32 49.12l34.83-4.6s-.77-35.57-.72-44.34c.26-46.55-37.34-84.5-84-84.77-46.65-.2

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 16x16, 8 bits/pixel, 24x24, 8 bits/pixel
Category:	dropped
Size (bytes):	120614
Entropy (8bit):	1.981356591269442
Encrypted:	false
SSDEEP:	192:GM3GKpwhqciQ/OcUaf8okeBIa/bREx98P3m2ap2L2uDJ:GM3GKpwGQ9UafjOa9Eb8P29gB
MD5:	685CDFC4CCEE148B32D8E8A71D856FD7
SHA1:	A09C73B78BE31C4380CB6ECDD29B11D402B66BDF
SHA-256:	863EBAE139403B1F99E1D1576AA46DC0CC4CFEF0DB69D745804A28B779F50255
SHA-512:	2E1FF4013AAD15BA2378E4756BED89D082F5A3C59D5486ABA45A6FD20C9578A6E777324118A4FB1D2E95246CE7AD6CE0E7B24B30375726BDAA85B22741496CC1
Malicious:	false
Reputation:	low
Preview:	..............h....................... ..............00..........^...@@......(....$..``.......,...:..........(L...f..........($......(....... ...........@............................................w..{g.xC%.m4..c%................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65406)
Category:	dropped
Size (bytes):	237319
Entropy (8bit):	5.343988534272572
Encrypted:	false
SSDEEP:	3072:JfGq7axGHlHGWFbwwX6N7P/A7l1UeC+rdPdbma2440r:lGq7axGHoWFXX6BPk1UeC+ddbma244k
MD5:	21B86381AFE823F2D48453A809EDD38A
SHA1:	47F2426C067FBE8762C576B49CA9AE4C1886F242
SHA-256:	4A24AAACAA67C7BDD56268B475EC0861FD96441C3B2712C22ED3DDD335A9E6A5
SHA-512:	BCF78CBCC360A1568CBF37509243F6ECCD32E0DB28E004EADD9D1538BB02032C46CFD65A0E339236D923CA54320AF1851C57AD087988FD6545A38BA920E4C80B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see hdshare-vendor.e87c7ef075c6fc68a726.js.LICENSE.txt /.(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[906],{3476:function(t,e,n){"use strict";if(n.d(e,{D:function(){return i}}),18==n.j)var r=n(5877);var i=function(t){if((0,r.xj)(t))return 1/0;for(var e=0,n=t.parentNode;n;)e+=1,n=n.parentNode;return e}},1428:function(t,e,n){"use strict";n.d(e,{L:function(){return i}});var r="ResizeObserver loop completed with undelivered notifications.",i=function(){var t;"function"==typeof ErrorEvent?t=new ErrorEvent("error",{message:r}):((t=document.createEvent("Event")).initEvent("error",!1,!1),t.message=r),window.dispatchEvent(t)}},6633:function(t,e,n){"use strict";if(n.d(e,{T:function(){return o}}),18==n.j)var r=n(3748);if(18==n.j)var i=n(3476);var o=function(t){r.C.forEach((function(e){e.activeTargets.splice(0,e.activeTargets.length),e.skippedTargets.splice(0,e.skippedTargets.length),e.observationTargets.forEach((function(n){n.isActiv

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/OpenSans-SemiBold-webfont.773343aa665d7ab6ceb5.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2863)
Category:	dropped
Size (bytes):	2922
Entropy (8bit):	5.315081867234228
Encrypted:	false
SSDEEP:	48:HQAQbCEP9M/x6X/NQR9lSRvNQZxdqNTadTSVOPW4QHWOMNDus/FkcqxQwqVkf6pY:wA+1UvzlpZxURrINDuwFkmP6fYPrEjN
MD5:	9120558DC3A6220F7AFE479C95E360CB
SHA1:	5C0FC9E7CBB704E321A83DB4F988B560FCFE32F9
SHA-256:	4BA6228A99115E94EE1442F73B54BC76DAF4E1672E5FEF1F00B379CB2DE7CF86
SHA-512:	6DF2560FDCA6C4A4C060D1FDF391F30FD96ED91CDAA493EB4F5E7B403ED17EC0AC57F25568C2B5426F92CD87700C6A4A69457E1EFA0C4C11919F1DAB45C19CD8
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var t,e={8892:function(t,e,o){o(7601),o(4916);window.Bootstrap=function(t){t="string"==typeof t?t.toLowerCase():"";const e=()=>-1!==t.indexOf("windows"),o=()=>-1!==t.indexOf("chrom");this.navigator={isSafari:-1!==t.indexOf("safari/")&&!o(),isChrome:o(),isFirefoxDesktop:/rv:[0-9].+Gecko[/]20[0-9]+/i.test(t)},this.os={isWindows:e(),isAndroid:-1!==t.indexOf("android")&&!e(),isIOS:/iphone\|ipad\|ipod/.test(t)&&!e()},this.darkmode={toggle(t){if(!this.supports())return;const e=document.querySelector("html");t?e.classList.add("is-darkmode"):e.classList.remove("is-darkmode");try{window.localStorage.setItem("sfm.darkmode",t?"1":"0")}catch(t){}this.updateThemeColor()},isActive(){if(!this.supports())return!1;try{return"1"===window.localStorage.getItem("sfm.darkmode")}catch(t){}return!1},supports(){const t=window.CSS&&window.CSS.supports.bind(window.CSS);return!!window.Config.hasDarkmode&&!!t&&(t("--f:0")\|\|t("--f",0))},init(){"complete"===document.readyState?(this.isActive()

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (38299)
Category:	downloaded
Size (bytes):	284902
Entropy (8bit):	5.213834374055376
Encrypted:	false
SSDEEP:	3072:vI5cQED1FUCpydgYgmLQSFnFefs4a5GpVn1rvR/HjS:vI5cQ61F/lmLf5GpVn1rvR/HjS
MD5:	E8B5247C84254D0A849923C32FBB9D17
SHA1:	9E54222EF5AD61419EA2B1D9659F075FD5185FF0
SHA-256:	0B0A5A8E593A8B1E7C4C96BE326B965F03CF6069A01FBBF04F90A43C8EA5CBDF
SHA-512:	0560C2F85F82657B7A3891548197FD20EC08703F527D34050ED55158944155C6F9C987C6F3BF0CF3A726DDD23344230678801D3BD19267F279F0187CC806F317
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css
Preview:	:root{--gap-xs:8px;--gap-s:12px;--gap-m:16px;--gap-l:24px;--gap-xl:32px;--gap-xxl:48px}@keyframes hdf-spin{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}body{tap-highlight-color:transparent;-webkit-tap-highlight-color:rgba(0,0,0,0);-webkit-text-size-adjust:none;-ms-overflow-style:scrollbar;cursor:default;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}@-ms-viewport{width:device-width}@-o-viewport{width:device-width}@viewport{width:device-width}.sj-selectable,h1,h2,h3,h4,h5{cursor:auto;-webkit-user-select:text;-moz-user-select:text;-ms-user-select:text;user-select:text}input[type=search]{-webkit-appearance:none}input[type=search]::-webkit-search-cancel-button,input[type=search]::-webkit-search-decoration,input[type=search]::-webkit-search-results-button,input[type=search]::-webkit-search-results-decoration{-webkit-appearance:none}fieldset{-webkit-appearance:none;-moz-appearance:none;appearance:none;border:none;margin:0;outline:none;padding:0

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 8 icons, 16x16, 8 bits/pixel, 24x24, 8 bits/pixel
Category:	downloaded
Size (bytes):	120614
Entropy (8bit):	1.981356591269442
Encrypted:	false
SSDEEP:	192:GM3GKpwhqciQ/OcUaf8okeBIa/bREx98P3m2ap2L2uDJ:GM3GKpwGQ9UafjOa9Eb8P29gB
MD5:	685CDFC4CCEE148B32D8E8A71D856FD7
SHA1:	A09C73B78BE31C4380CB6ECDD29B11D402B66BDF
SHA-256:	863EBAE139403B1F99E1D1576AA46DC0CC4CFEF0DB69D745804A28B779F50255
SHA-512:	2E1FF4013AAD15BA2378E4756BED89D082F5A3C59D5486ABA45A6FD20C9578A6E777324118A4FB1D2E95246CE7AD6CE0E7B24B30375726BDAA85B22741496CC1
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/v146/images/static/favicon.ico
Preview:	..............h....................... ..............00..........^...@@......(....$..``.......,...:..........(L...f..........($......(....... ...........@............................................w..{g.xC%.m4..c%................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 150020, version 772.1280
Category:	downloaded
Size (bytes):	150020
Entropy (8bit):	7.99708187417653
Encrypted:	true
SSDEEP:	3072:vPtxURbSTtDXSLXe0itudYTPEnus4blfNUqKrC7ZOBS9C3bzlLX4/NKOTD5:P15Die0UPblfNUqLZg9I/Qk5
MD5:	D5E647388E2415268B700D3DF2E30A0D
SHA1:	97F0942C6627DDD89FB62170E5CAC9A2CBD6C98C
SHA-256:	886C86112A804EF1DDD1CB206AF4C8C40E34B73C26652CA231404AA35A6B30D9
SHA-512:	50B2FFD7537D0424286936CB7BA566004A664F447E4AAAC8FA40CEB2850EAD6CDB39C957515AE05A07AAEB8F6E3E428C4B95E4EFA3EDCADC9473E9E200BB47D6
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/fa-solid-900.b6879d41b0852f01ed5b.woff2
Preview:	wOF2......J........0..I..........................8.$. .`..<......D.@..p. .....Dp....z.aD.f.O.=i.x.TUUU....l........g...o~..?..o...........O......l...x}~........!.@/..U.....>.........{;m.B..w.@^Q^.Z...f ........t....7....`..Lr.......P.B.Jx....J.0).K.T;S........ODg..>@If3..{.7..#.?..t.n'.M...@F....D..S..Gz}.0$.X..D....p5.vw......y.......O8.....F..,i..q.X...$.+..&.4^....P.x...=....G..b. .1....d....V.u+...;WwMw.L.LwOMuM....Zi.w.[y..!.I.5Y..!.l.....6^..".q.`.:c^.8<..6..^...yK.sK}..f..y;.f....].V;r.d[..M.la/.X6M.q...N.]...fH%.X .t'.?..%....H..?<.:.}(...#.....Jp...2\@....0.)d....d.j.CM.B.!K...p.a....".@.(.6 ......\|............1.S..;...'2..2VjC{RFX.;8aG.ZG....._....'......:....<_6.....\..d.h.....7.....Z.2MAT4I.$.....o...~..".sV.......h..^...&4)........!...!).<..n.Na%R.....h.p...KM.h..[.z_.CX zoF..H`.2(U.S.v...;m.UvjA...T........^........._... ....G......2..9L=...s...{........A0w...=.s.......=3w...@w. ...Y......rE.l.Ze...G.....X......A..

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2863)
Category:	downloaded
Size (bytes):	2922
Entropy (8bit):	5.315081867234228
Encrypted:	false
SSDEEP:	48:HQAQbCEP9M/x6X/NQR9lSRvNQZxdqNTadTSVOPW4QHWOMNDus/FkcqxQwqVkf6pY:wA+1UvzlpZxURrINDuwFkmP6fYPrEjN
MD5:	9120558DC3A6220F7AFE479C95E360CB
SHA1:	5C0FC9E7CBB704E321A83DB4F988B560FCFE32F9
SHA-256:	4BA6228A99115E94EE1442F73B54BC76DAF4E1672E5FEF1F00B379CB2DE7CF86
SHA-512:	6DF2560FDCA6C4A4C060D1FDF391F30FD96ED91CDAA493EB4F5E7B403ED17EC0AC57F25568C2B5426F92CD87700C6A4A69457E1EFA0C4C11919F1DAB45C19CD8
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/lnk/js/bootstrap.556f531165a982e55ac1.js
Preview:	!function(){"use strict";var t,e={8892:function(t,e,o){o(7601),o(4916);window.Bootstrap=function(t){t="string"==typeof t?t.toLowerCase():"";const e=()=>-1!==t.indexOf("windows"),o=()=>-1!==t.indexOf("chrom");this.navigator={isSafari:-1!==t.indexOf("safari/")&&!o(),isChrome:o(),isFirefoxDesktop:/rv:[0-9].+Gecko[/]20[0-9]+/i.test(t)},this.os={isWindows:e(),isAndroid:-1!==t.indexOf("android")&&!e(),isIOS:/iphone\|ipad\|ipod/.test(t)&&!e()},this.darkmode={toggle(t){if(!this.supports())return;const e=document.querySelector("html");t?e.classList.add("is-darkmode"):e.classList.remove("is-darkmode");try{window.localStorage.setItem("sfm.darkmode",t?"1":"0")}catch(t){}this.updateThemeColor()},isActive(){if(!this.supports())return!1;try{return"1"===window.localStorage.getItem("sfm.darkmode")}catch(t){}return!1},supports(){const t=window.CSS&&window.CSS.supports.bind(window.CSS);return!!window.Config.hasDarkmode&&!!t&&(t("--f:0")\|\|t("--f",0))},init(){"complete"===document.readyState?(this.isActive()

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.850489295854282
Encrypted:	false
SSDEEP:	3:ol860QiymCjVFV3dwcw0drY:old0QAWv3dpwIM
MD5:	56796DF897BAB4E096DA6BE67576E23C
SHA1:	823F73FB084B97DBDD9FFF76516789E6F6C07B27
SHA-256:	D3D1B177A0C60C513401D942ABA50BA3F06D61202D19824C717530EBB8547DCA
SHA-512:	33C95BE33F8B62A168B98FB5D7C3AD4FD3A9D2AFDBBFD1BFADBEFE80A870C0ACA16518CE557CF89DD9104A2F8717FF6D06782668EEE7409D378317D1BF2BA964
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlN6QO5rAUDJxIFDQo_7tU=?alt=proto
Preview:	CikKJw0KP+7VGgQISxgCKhoIClIWCgwuIS0jX0AkJj8qLyUQARj/////Dw==

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 24488, version 772.1280
Category:	downloaded
Size (bytes):	24488
Entropy (8bit):	7.987907109929418
Encrypted:	false
SSDEEP:	384:Ok8mTTNu15tM1xuB9dYY7YRHmOdjzUJsAr4p8Oq7kpPyXBpqrhDRBybCpMuT33SI:OGg15tM1xuBYY7YRHmcjzUJJr4p8Oq7a
MD5:	747442FA76F1D9A31F9A54A2E8A4B448
SHA1:	07FC0AE14BB3187839082AED3BCA11DFB1E04524
SHA-256:	9169D8BE7A8177E5A92A4D04B6DE7F6504B938573BF4DA5889871C4F376D3849
SHA-512:	274DBE5BC31C560D2CC2D15AFE5485687B2F7DD0EE24FFED99627310EA36A6A3CC1C91E22368F909D056F4FAAB051838D469E0BFE8A30169B735ACA5EB0F402F
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/fa-regular-400.b041b1fa4fe241b23445.woff2
Preview:	wOF2......_..........._].........................8.$. .`..P.....h.,.... .svU!=o.=DT.z8#9i...j..w..~...?..3p\.u.<<..~.N.... e..........!.i..G.........wFA.?...S.C...H48Y..`:.=........{ ....@.. .J.D...J.Y..=.).Is..;.>c.Tg.(...j..x..:.uo..;..7e...'\.^%.JE.Vi1:.i...N...G?..\|..7.g..Yg.....8..7+'.g.sb..C.Y.f..I.I ..-...PE......l..d..E....KM.).w..O{7,'....`c........%0.....fw){F[G..M-.t...H..i.w...M).......H...!...M5{...@..1.)t!..{.o...-v.....T.<]. ..I.?..]..@R.@..)^J.C...L.yTq18'....C......S...to..\.mc0...,P.[E.T...0B...8.._.r.0H..i...te..B.D..M.....oi7.......I.._..5.r...h..6eCR..2...a.w.'.s..V...('n.~.n..(....h...R..4.t......+.+...~...b.j MH...TB."Lj.J..RZS.T,.aS\|][~...M...K...]...r].Uy.2......,........r<.^._.G].I.2v...W_.H..~....H.S.n..v^..2.i....=.....\|..'...kR(.....U.k........4..k.r[Y..j./X.S{K.,....57..._Un...C..b.V2.....u..5Zy.:..L._.6n...D3.Q.. ....v;..n{..~..t.aG.u.q'.t.ig..l.x...k.........T.q&...&d....lS.9.....>.7.[.....\|V>'_

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 43452, version 1.0
Category:	downloaded
Size (bytes):	43452
Entropy (8bit):	7.992046504087876
Encrypted:	true
SSDEEP:	768:Xy2Wz6tbYHdQv19AEMCJ+kjMLha8Ke0At7yTVQPQiEgBGKSrCU5SARCfLL:ip6NYH2v7AtO/2a85tEcQipYZxELL
MD5:	A9826C5816E24764B2F3F674255E87BB
SHA1:	35EFC109C923F1FC19A408AFECD98EC6035B8791
SHA-256:	73F8CB41EA4FB41E7DD6A99F2F84A564DCE83010F7BBFF2F3EB0884092CC91C5
SHA-512:	9820515C8F0F698A0741CB530A3F858EAF08449422223F17B431A285E2C5A1D2B2B900B07741AE815003AC1B89A4A85063DA57F02F53948B959E3E366A421DA0
Malicious:	false
Reputation:	low
URL:	https://ce1.uicdn.net/exos/icons/exos-icon-font.woff?v=15
Preview:	wOFF.............. <........................GSUB.......;...T .%zOS/2...D...B...V<3P>cmap.......l....=.Q\glyf............$\..head.......3...63...hhea...D... ...$...dhmtx...d...T........loca.......B...B....maxp........... .=./name.......4...^.6.Opost...P...i....f-..x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d.`.............B3>`0ddb``b`ef....\S....\....b~.....Ar..3....x...........;..R.b......QD..Ei....)...+..V.`.'...{O..c.cz..3.g...zX...e......h!}..>\|...hzS.-.oA...lzC...........F.F.h.^1?....g...O.TG7h...e...".....{....O9..(....VS......I..^ik..vz=..H':.E...{.....{....k.....A..W=.C9..9.#9..9.c9N./.s.....N.$Nf .p*.q:g0....L.r..8[....s.#8.......BF3...c<...$&3.....Lc:3..%\.e..rf3.+..<.s%Wq5.p-....Y.M,b1KX....,c9....Y....].b5kX.......<.:..!...<.&6........O...lc;;x....i..Y..y^.E^.e./^.U^.uv.....x?...\|......\|....>..4..\|.......2_.\|.......6..\|....~..1?......~..5... x...;~.[....#.......7..?.'.......?..J)M.EiYZ..M..]i_:...S.\....[.t/=J..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65322), with no line terminators
Category:	downloaded
Size (bytes):	442057
Entropy (8bit):	5.31655303509494
Encrypted:	false
SSDEEP:	6144:TIUOYcj1GII0iBzkpkIl51iOrfU7IkO6qYJgWqTj+rgt:TIUOYcjkIILkpko+JgWqTjP
MD5:	468E040E0683D176A2AA220E12804DFE
SHA1:	3B645A0EABB5EA489E34B615F865F64A3F700D40
SHA-256:	AAC41A4E8AAF73D354722C728F98DD416DE3FB588550E33BAF5A8BF243409E98
SHA-512:	0CA64DB2D8DD7A1D5FB44340F981927E80B68A866EB0C431ADFB30E98F82835B4801C26E8E1A46A1E0CE23C12E7C7A9D9F0E4417FF81A0FE40FA58B57B10B7F4
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/lnk/js/hdshare.d10440b3317db342388a.js
Preview:	!function(){var e,t={3998:function(e,t,i){"use strict";i(6337);var r=i(4459);window.ResizeObserver\|\|(window.ResizeObserver=r.do),void 0===Node.prototype.replaceChildren&&(Node.prototype.replaceChildren=function(e){for(;this.lastChild;)this.removeChild(this.lastChild);void 0!==e&&this.append(e)});var n=i(5113),s=i.n(n),o=(i(1703),i(7658),i(615)),a=i.n(o),l=i(972),c=i.n(l);function d(e){try{if(3===e.relatedTarget.nodeType&&e.relatedTarget.parentNode===e.target)return!1}catch(e){}return e.target!==e.relatedTarget}function h(e){return".droppable-"+e.cid}var u={bind(e,t){var i,r,n,o;function l(e){n&&(o&&"none"!==o&&(e.originalEvent.dataTransfer.dropEffect=o),e.preventDefault(),e.stopPropagation())}function u(){r=[],n=null}function p(i,r){if(c().has(t,"eventData")){var s=t.eventData.call(e,n,r);e.trigger(i,n,r,s)}else e.trigger(i,n,r)}if(!(e&&e instanceof s().View))throw new Error("first argument needs to be a Backbone view.");if(!c().isUndefined(t)&&!c().isObject(t))throw new Error("options

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
Reputation:	low
URL:	https://hidrive.ionos.com/OpenSans-Regular-webfont.8e4fce4052b0df5529c7.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 14:49:51.856735945 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 14:50:01.465928078 CET	49675	443	192.168.2.4	173.222.162.32
Oct 31, 2024 14:50:04.230380058 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.230428934 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:04.230506897 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.230530024 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.230567932 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:04.230635881 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.231005907 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.231017113 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:04.231146097 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:04.231157064 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.282799959 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.286869049 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.290446997 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.290471077 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.290962934 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.290982962 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.291996002 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.292058945 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.292067051 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.292089939 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.292108059 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.292155981 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.292166948 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.292200089 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.330986977 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.331161976 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.376274109 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.376297951 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.388626099 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.390999079 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.391820908 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.434387922 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.434417009 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.435326099 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.482995033 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.656177044 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.656204939 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.656256914 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.656276941 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.656311989 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.794275045 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.794287920 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.794349909 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.794493914 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.794543028 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.794555902 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.794595957 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.794975042 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:05.795016050 CET	443	49736	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:05.795074940 CET	49736	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.050010920 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.053247929 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.053293943 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.053364992 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.053821087 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.053836107 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.054697037 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.054747105 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.054805040 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.055170059 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.055181026 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.055783987 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.055808067 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.055917978 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.056344032 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.056358099 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.056807041 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.056816101 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.056910992 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.057130098 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.057141066 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.095338106 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.318687916 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.318718910 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.318825960 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.318857908 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.320122957 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.459670067 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.459692001 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.459775925 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.459789991 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.459801912 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.459830046 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.459836960 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.503695011 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.596749067 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.596796036 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.596828938 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.596879959 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.596888065 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.637353897 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.718866110 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.718902111 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.718938112 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.718957901 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.718969107 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.719011068 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.719021082 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.719059944 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.735625029 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.735656023 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.735686064 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.736221075 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.736280918 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.736287117 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.736411095 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.857804060 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.857877016 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.857903004 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.869267941 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:06.869318008 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:06.869389057 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:06.870479107 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:06.870496035 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:06.903431892 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.980107069 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.980123043 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.980145931 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.980155945 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.980185986 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.980207920 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:06.980228901 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:06.980246067 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.082170963 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.083404064 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.083429098 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.083795071 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.084676981 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.084737062 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.085441113 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.085827112 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.085865021 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.085897923 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.085911989 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.085922956 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.085941076 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.085958004 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.085962057 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.086062908 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.086102009 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.086106062 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.103612900 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.103707075 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.103719950 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.103841066 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.103928089 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.103931904 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.114895105 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.115405083 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.115433931 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.115603924 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.116043091 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.116050959 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.116636038 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.116687059 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.116693974 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.116734982 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.116969109 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.117216110 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.117264986 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.117455959 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.117465019 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.117908001 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.117959023 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.118154049 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.118227005 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.118410110 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.118422985 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.119456053 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.119513988 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.119519949 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.119555950 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.120848894 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.120903015 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.121227980 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.121237040 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.127334118 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.159322023 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.162316084 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.162405968 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.207520008 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.207602024 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.207617044 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.207659006 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.225440025 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.225454092 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.225495100 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.225502014 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.225514889 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.225555897 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.310194969 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:07.310226917 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:07.310286045 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:07.317975044 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:07.317991972 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:07.329669952 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.329688072 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.329734087 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.329747915 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347692013 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347728968 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347745895 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347754955 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.347764969 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347770929 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.347805023 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.354064941 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.354089975 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.354132891 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.354154110 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.354192019 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.354232073 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.354264975 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.384330988 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.384356976 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.384401083 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.384427071 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.384464025 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.385185003 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.385201931 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.385237932 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.385245085 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.385276079 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.387212038 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.387234926 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.387285948 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.387299061 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.387331009 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.396119118 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.396164894 CET	443	49742	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.396287918 CET	49742	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.451524019 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.451576948 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.468811035 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.468826056 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.468851089 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.468871117 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.468878031 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.468919039 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.469465017 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.469507933 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.497790098 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.497850895 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.497859001 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.497869968 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.497912884 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.498776913 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.498843908 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.522416115 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.522478104 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.523113012 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.523178101 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.525415897 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.525479078 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.525721073 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.525768042 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.525974989 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.526012897 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.573757887 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.573827028 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.591864109 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.591890097 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.591928005 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.591950893 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.591969967 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.591985941 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.642474890 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.642534018 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.715075970 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.715099096 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.715141058 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.715167046 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.715186119 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.715213060 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.750122070 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:07.750452995 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:07.750478029 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:07.751560926 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:07.751614094 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:07.761245966 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.761256933 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.761296988 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.761311054 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.761323929 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.761341095 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.761354923 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.761410952 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.783301115 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.783324003 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.783338070 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.783353090 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.783391953 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.783401012 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.783432961 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.784204960 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.784245014 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.784287930 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.784296989 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.784328938 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.824465990 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.835664988 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.835692883 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.835726023 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.835751057 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.835767031 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.835783958 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.874437094 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.874478102 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.874506950 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.874526024 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.874538898 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.874540091 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.874588966 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.874593973 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.874628067 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.876748085 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.876775980 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.876806974 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.876827002 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.876842022 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.876861095 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.903012037 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903054953 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903103113 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.903168917 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903228045 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.903352976 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903403044 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903455019 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.903455019 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.903465986 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.903521061 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.931163073 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931196928 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931248903 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.931286097 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.931293011 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931358099 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931406021 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.931415081 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931533098 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.931576014 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.931582928 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.954149961 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:07.954379082 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:07.958373070 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.958429098 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.958462954 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.958534002 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.958570004 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.958918095 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.958969116 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.960958958 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.961004019 CET	443	49735	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.961054087 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.961077929 CET	49735	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.989643097 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:07.989718914 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:07.989742041 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.017352104 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.017420053 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.017446995 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.021150112 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.021190882 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.021231890 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.021246910 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.021322012 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.021754980 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.021842003 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.021851063 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.026129007 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026165009 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.026223898 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026372910 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026415110 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.026462078 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026688099 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026698112 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.026887894 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.026901960 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.028080940 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.031872034 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:08.031891108 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:08.049477100 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049494982 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049526930 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049555063 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.049559116 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049614906 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.049624920 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049660921 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.049767971 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.049804926 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.049823046 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.050282955 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.050324917 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.051269054 CET	49740	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.051289082 CET	443	49740	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.059144974 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.059185982 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.059243917 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.059546947 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.059556961 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.062666893 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.064455032 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.105137110 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.105153084 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.105190992 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.105232000 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.105259895 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.105278015 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.105299950 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.139657021 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:08.140368938 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.140381098 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.140409946 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.140495062 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.140495062 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.140513897 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.140746117 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.140836000 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.143852949 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.181091070 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.181185007 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.194119930 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.194142103 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.194442034 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.220598936 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.220613003 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.220654964 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.220691919 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.220761061 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.220807076 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.259335041 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.259381056 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.259465933 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.259465933 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.259484053 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.292136908 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.292165995 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.292223930 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.292294979 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.292335033 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.292335033 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.306226969 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.306399107 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.306416035 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.327491045 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.336148977 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.336209059 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.345896959 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.356529951 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.364204884 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.364269972 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.378164053 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.378177881 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.378191948 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.378201962 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.378225088 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.378259897 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.378398895 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.387326956 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.450999022 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.451010942 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.451044083 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.451149940 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.451168060 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.451221943 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.455544949 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.455600023 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.455666065 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.455730915 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.455766916 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.455790043 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.455809116 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.479857922 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.479934931 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.479952097 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.526909113 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.544033051 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.544050932 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.544075012 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.544111967 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.544150114 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.544164896 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.544178963 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.544229984 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.571063995 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.571080923 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.571119070 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.571161032 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.571173906 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.571232080 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.571260929 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.571280956 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.595199108 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.595410109 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.595482111 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.615458012 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.615514994 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.615567923 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.615586042 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.615607977 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.663265944 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.663348913 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.663357019 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.663379908 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.663475037 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.686026096 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.686053038 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.686104059 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.686170101 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.686208010 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.686340094 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.714409113 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.781582117 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.781593084 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.781627893 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.781642914 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.781668901 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.781691074 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.781753063 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.781753063 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.796139002 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.796165943 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.796247959 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.796312094 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.796351910 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.797962904 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.826885939 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.826916933 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.827008009 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.827058077 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.827085018 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.829953909 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.854439974 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.854454041 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.854485035 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.854543924 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.854564905 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.854608059 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.854680061 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.911020994 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.911422968 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.942123890 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.942151070 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.942281008 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.942308903 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.942353964 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.954097033 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.954471111 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.972096920 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.973486900 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.973553896 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.973634005 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.973660946 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:08.973781109 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.974092007 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:08.988748074 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.988749027 CET	49744	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:08.988825083 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.988857031 CET	443	49744	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:08.994012117 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.007762909 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.007791996 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.007981062 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.007994890 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.008326054 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.008343935 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.009013891 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.009079933 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.009095907 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.009135962 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.010154963 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.010229111 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.010236979 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.010272980 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.011358023 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.011435032 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.011630058 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.011708021 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.016906977 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.017062902 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.017605066 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.017710924 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.018594027 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.018727064 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.019740105 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.019762993 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.019854069 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.019854069 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.019870043 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.019961119 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.024697065 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.024724007 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.024811983 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.024836063 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.024914980 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.024936914 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.035058975 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.035085917 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.035136938 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.035152912 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.035177946 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.035207033 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.058506966 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.058536053 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.058578968 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.058598995 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.058624983 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.058639050 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.069051027 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.069103956 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:09.069168091 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.069664955 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.069680929 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:09.076428890 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.076560974 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.092315912 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.092341900 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.092431068 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.092458963 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.092495918 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.092495918 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.140774965 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.173608065 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.173659086 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.173708916 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.173737049 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.173770905 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.173866987 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.174876928 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.174926996 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.174946070 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.174953938 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.174997091 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.175483942 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.175510883 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.175625086 CET	443	49739	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.175678968 CET	49739	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.212145090 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.212167025 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.212224960 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.212251902 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.212301016 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.212390900 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.260818005 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.260840893 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.260937929 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.260957956 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.261006117 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.261006117 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288600922 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288624048 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288630009 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288690090 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288697958 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288753986 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288757086 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288788080 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288789988 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288800001 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288811922 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288830042 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288842916 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288850069 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288861990 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288872004 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288872004 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288877964 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288881063 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288901091 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288919926 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288921118 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.288990021 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.288999081 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.289041042 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.296436071 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.296535015 CET	443	49747	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.296591997 CET	49747	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.330559015 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.330583096 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.330626965 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.330642939 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.330694914 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.330694914 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.377799034 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.377819061 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.377866030 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.377891064 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.377932072 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.377932072 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.449632883 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.449645042 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.449716091 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.449826956 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.449840069 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.449887037 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.495362997 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.495379925 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.495450020 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.495475054 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.495628119 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.543205976 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.543219090 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.543278933 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.543299913 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.543401957 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.543418884 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.543462992 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.543484926 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.564903021 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.564982891 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.565004110 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.565046072 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.566310883 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.566354036 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.566382885 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.566407919 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.566428900 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.566447973 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.566478968 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.571070910 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.571090937 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.571151972 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.571182013 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.571324110 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.614773989 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.614793062 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.615406036 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.615427017 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.615921974 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.681494951 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.681572914 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.681602955 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.681642056 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.681945086 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.681988001 CET	443	49745	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.682037115 CET	49745	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.682704926 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.682724953 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.682742119 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.682779074 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.682805061 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.682821035 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.690658092 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.690677881 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.690869093 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.690886021 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.691287994 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.733702898 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.733722925 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.733786106 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.733819008 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.733947039 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.737618923 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.799860001 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.799876928 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.799902916 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.799915075 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.799927950 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.799930096 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.799981117 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.809145927 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.809165001 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.809222937 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.809238911 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.809278011 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.853607893 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.853625059 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.853669882 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.853693008 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.853722095 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.853739977 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.894442081 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.894459963 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.894495010 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.894526958 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.894558907 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.894575119 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.894678116 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.894714117 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.894721031 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928651094 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928675890 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928718090 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.928735971 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928771973 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.928778887 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928824902 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.928858995 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.930080891 CET	49741	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.930093050 CET	443	49741	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.930150986 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:09.930210114 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.938488960 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.977054119 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.977075100 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:09.977437973 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:09.979064941 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:09.982487917 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.982532978 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:09.982587099 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.982825041 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:09.982835054 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010565042 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010581970 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010612011 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010634899 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.010658979 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010674953 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010678053 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.010699987 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.010705948 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.010725975 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.019326925 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:10.059669018 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.114182949 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.114217997 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.114275932 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.114487886 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.114497900 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127554893 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127568960 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127609015 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127629042 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.127634048 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127650023 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.127679110 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.150115967 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.150168896 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.150176048 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.191365004 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.216485977 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.216526031 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.216584921 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.217160940 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.217185020 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.217236996 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.217670918 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.217678070 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.217724085 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.218492985 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.218502045 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.218545914 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.219134092 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.219182014 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.219221115 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.221760988 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.221774101 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.222352982 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.222366095 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.222727060 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.222738981 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.222871065 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.222879887 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.223010063 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.223017931 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.223346949 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:10.223377943 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:10.223433018 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:10.223592997 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:10.223603964 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:10.225079060 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:10.225141048 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:10.225187063 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:10.227737904 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:10.227756977 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:10.227768898 CET	49748	443	192.168.2.4	184.28.90.27
Oct 31, 2024 14:50:10.227773905 CET	443	49748	184.28.90.27	192.168.2.4
Oct 31, 2024 14:50:10.244719028 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244735003 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244750977 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244765997 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244771957 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244779110 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.244793892 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.244821072 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.267241955 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.267254114 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.267318964 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.267329931 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.309657097 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.385426998 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385437012 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385468006 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385481119 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385488987 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.385507107 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385520935 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.385541916 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.385566950 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.502409935 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.502424955 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.502486944 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.502501965 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.502594948 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.502624989 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.502641916 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.502641916 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.502661943 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.595793962 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.595818996 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.595884085 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.595946074 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.595980883 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.595999002 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.620237112 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.620286942 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.620317936 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.620338917 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.620373964 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.620393991 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.737173080 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.737199068 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.737245083 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.737267971 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.737298012 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.737313986 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.856714964 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.856740952 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.856796026 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.856829882 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.856857061 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.856882095 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.856916904 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.856930971 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.856971025 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.865142107 CET	49746	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.865175009 CET	443	49746	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.878423929 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.878880024 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.878906965 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.880392075 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.880481005 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.880495071 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.880527020 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.880909920 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.880980968 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.881083965 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.927330971 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:10.996210098 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:10.996241093 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.025754929 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.037833929 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.037856102 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.038430929 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.038887978 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.038955927 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.082283020 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.101624012 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.114377022 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.116988897 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.119617939 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.127460003 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.152487993 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.152559042 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.152615070 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.152633905 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.154347897 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.154390097 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.154398918 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.154407978 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.154423952 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.154443979 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.158941984 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.174952984 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.175884008 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.232769012 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.289513111 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.289658070 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.289674997 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.289706945 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.289706945 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.289731979 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.289751053 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.289767027 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.289783955 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.296533108 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.296561956 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.296802044 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.296825886 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.296967030 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.296982050 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297058105 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.297066927 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297373056 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297812939 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297827959 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297877073 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.297887087 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.297924995 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.298158884 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.298207045 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.298216105 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.298217058 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.298234940 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.298243046 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.298261881 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.298268080 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.298531055 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.299554110 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.299619913 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.300143003 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.300246954 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.304107904 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.304203033 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.304218054 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.304338932 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.304373980 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.335335016 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.348314047 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.349896908 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.351367950 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.363565922 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.369549036 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.369561911 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.370706081 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.370883942 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.387339115 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.387480974 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.390467882 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.390480042 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.407588005 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.407604933 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.407639027 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.407782078 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.407782078 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.407793999 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.434243917 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.434247017 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.434264898 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.449361086 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.456557989 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.456573009 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.456614017 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.456633091 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.456648111 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.456681967 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.470316887 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.470474005 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.470490932 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.484458923 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.484666109 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.484682083 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.486152887 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.486244917 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.486254930 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.486337900 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.486613035 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.486690998 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.486813068 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.486824036 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.512063026 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.512075901 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.527441025 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.547076941 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547092915 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547128916 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547144890 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547147036 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.547159910 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547171116 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547197104 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.547213078 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.547224998 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547552109 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547599077 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.547605991 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.547650099 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.558876991 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.559310913 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559348106 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559397936 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559405088 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559436083 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.559468985 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559511900 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.559526920 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.559887886 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.566854954 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.566915035 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.566977978 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567018032 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567116022 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567308903 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567337036 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567394018 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567498922 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567498922 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567517042 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567790031 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567850113 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567864895 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567868948 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.567926884 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.567945004 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.568409920 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.568443060 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.568454981 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.568465948 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.568487883 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.571397066 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.571418047 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.571480036 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.571505070 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.571564913 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.614022017 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.666629076 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.666672945 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.666707039 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.666723967 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.666758060 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.666768074 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.666780949 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.678812027 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.678879023 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.678889036 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.678927898 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.681935072 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.681967974 CET	443	49751	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.682012081 CET	49751	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.682327986 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.682372093 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.682423115 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.683206081 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.683222055 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.683232069 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.683278084 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.683583021 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.683629990 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.684204102 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684247017 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684256077 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.684262037 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684279919 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684310913 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.684760094 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684797049 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684830904 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.684967995 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.684978008 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.686011076 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.686069965 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.686078072 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.686146021 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.686321974 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.686328888 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.704066038 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.704119921 CET	443	49753	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.704209089 CET	49753	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.714510918 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.714519024 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.714589119 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.714771986 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.714778900 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.714828968 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.714847088 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.714894056 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.732639074 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.735181093 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.735234022 CET	443	49754	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.735292912 CET	49754	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.735635042 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.735656977 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.735707045 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.735724926 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.735780954 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.737046957 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.737054110 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.737128973 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.762212038 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762229919 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762237072 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762252092 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762279987 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762320042 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.762341976 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.762358904 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.762386084 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.784738064 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.784806967 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.800285101 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.800343990 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.800657988 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.800720930 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.800834894 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.800878048 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.809268951 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.821902037 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.821965933 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.847311020 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.847327948 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.847348928 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.847368956 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.847414017 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.847429991 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.847455978 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.847474098 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.850946903 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.850960016 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.851021051 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.851058960 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.851363897 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.851665974 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.851726055 CET	443	49752	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.851775885 CET	49752	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.856544971 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.856564999 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.860420942 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.860521078 CET	443	49755	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.860589027 CET	49755	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.864109039 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.864130974 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.864197969 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.865308046 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.865322113 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.874924898 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.874954939 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.875135899 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.875365019 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.875376940 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.881300926 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.881320953 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.881376982 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.881386042 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.881890059 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.900405884 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.900449991 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.900463104 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.900473118 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.900484085 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.900501013 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.900518894 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.900835991 CET	49757	443	192.168.2.4	213.165.66.58
Oct 31, 2024 14:50:11.900847912 CET	443	49757	213.165.66.58	192.168.2.4
Oct 31, 2024 14:50:11.903122902 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.903233051 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.903433084 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.903440952 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.917455912 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.917520046 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.917551041 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.917566061 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.917587042 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.923804998 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.923866987 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.923902988 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.923911095 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:11.925899029 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:11.969969034 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.022475004 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.022538900 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.022569895 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.022599936 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.022622108 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.022639990 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.023956060 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.024017096 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034338951 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034364939 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034408092 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034413099 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034449100 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034449100 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034486055 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034487963 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034502029 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034575939 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034631014 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034682035 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034718990 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034775972 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.034806013 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.034859896 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.055891991 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.055975914 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.055988073 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.080010891 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.080049992 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.080061913 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.080084085 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.081886053 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.141155005 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.141210079 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.141272068 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.141287088 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.141333103 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.156543970 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.156582117 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.156622887 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.156650066 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.156666994 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.156877041 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.162626982 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.162657022 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.162703037 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.162710905 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.162743092 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.217554092 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.270875931 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.270937920 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.270973921 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.271039963 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.271085978 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.271086931 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.271116972 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280771017 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280787945 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280837059 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.280857086 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280906916 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280936956 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.280955076 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.281094074 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.314328909 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.314379930 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.314419031 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.314501047 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.314639091 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.382169962 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.382200003 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.382240057 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.382270098 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.382294893 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.382311106 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.390450954 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.390515089 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.390557051 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.390645981 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.390698910 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.390698910 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.390726089 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.401031971 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.401093960 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.401106119 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.401129961 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.401153088 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.401170969 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.441839933 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.452678919 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.452780008 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.452836990 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.452917099 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.457592010 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.457761049 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.457865000 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.459821939 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.459882021 CET	443	49756	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.459908962 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.459944963 CET	49756	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.518568039 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.518645048 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.518676996 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.518707991 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.518723011 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.518801928 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.562644958 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.562911034 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.562938929 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.569077969 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.569149017 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.569158077 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.569215059 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.569518089 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.569581985 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.569783926 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.569793940 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.617122889 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.617182970 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.617223024 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.617249012 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.617278099 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.617301941 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.621906042 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.637753963 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.637826920 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.637897015 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.637908936 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.638065100 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.752125978 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.752160072 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.752202034 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.752238035 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.752257109 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.752294064 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.760663033 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.760715008 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.760745049 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.760755062 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.760792971 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.760803938 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.766422033 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.766670942 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.766696930 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.766773939 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.767024040 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.767069101 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.768064976 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.768522024 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.768599033 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.768618107 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.768671036 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.768737078 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.768826008 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.769119024 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.769259930 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.769260883 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.769336939 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.769357920 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.811333895 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.824368000 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.830941916 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831005096 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831062078 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.831085920 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831127882 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.831563950 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831572056 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831603050 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831624985 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.831634045 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.831674099 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.870987892 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.871062040 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.871104956 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.871131897 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.871159077 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.871185064 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.879369974 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.879416943 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.879465103 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.879478931 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.879513979 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.879535913 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.971076965 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.971091032 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.971146107 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.997773886 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.997848034 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.997883081 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.997910976 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.997929096 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.997951984 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.998713017 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.998765945 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.998800039 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.998806953 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:12.998836994 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:12.998850107 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.051713943 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.072670937 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.086045027 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.086055040 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.086091995 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.086117983 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.086133003 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.086168051 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.099478006 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.099505901 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.099993944 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.100089073 CET	443	49763	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.100146055 CET	49763	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.110491991 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.110551119 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.110594034 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.110625982 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.110644102 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.110805035 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.117645025 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.117666960 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.117743969 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.117743969 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.117768049 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.117836952 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.124113083 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.124139071 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.126482964 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.126586914 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.126817942 CET	443	49762	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.126894951 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.126915932 CET	49762	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.131758928 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.131814003 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.131849051 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.131861925 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.131902933 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.220796108 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.220843077 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.220915079 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.221359968 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.221371889 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.227451086 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.227502108 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.227518082 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.227520943 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.227536917 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.227570057 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.229482889 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.229511976 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.229551077 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.229578018 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.229604006 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.229620934 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.236632109 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.236656904 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.236711025 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.236720085 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.236747980 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.236769915 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.277193069 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.341487885 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.341502905 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.341543913 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.341581106 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.341594934 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.341609955 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.341614008 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.341629982 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.347779989 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.347812891 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.347856998 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.347875118 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.347898960 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.347913980 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.347959042 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.347995996 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.348249912 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.348325968 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.348372936 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.348741055 CET	49749	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.348752975 CET	443	49749	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.386563063 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.450822115 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.450836897 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.450936079 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.450958014 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.450975895 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.450999022 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.456201077 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.456271887 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.456288099 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.456322908 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.456379890 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.456391096 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.511590004 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.547224998 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.547238111 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.547276974 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.547295094 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.547311068 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.547354937 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.571480989 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.571549892 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.593780041 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.593837976 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.593864918 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.594002008 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.594335079 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.594400883 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.594466925 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.602935076 CET	49761	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.602952957 CET	443	49761	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.613174915 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.613220930 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:13.613270044 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.613625050 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:13.613639116 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.210520983 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.210879087 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.210892916 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.211946011 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.212028027 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.212033987 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.212204933 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.212477922 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.212524891 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.212687016 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.212707043 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.262819052 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.490036964 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.497075081 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.497339010 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.497374058 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.498529911 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.498857975 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.498944998 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.499042034 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.543337107 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.544183016 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.544199944 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.544714928 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.544965029 CET	443	49764	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.545033932 CET	49764	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.762270927 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.762299061 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.762336969 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.762347937 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.762372971 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.762402058 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.762411118 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.900995970 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.901068926 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.901798010 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.901861906 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:14.901879072 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:14.902195930 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.016845942 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.016895056 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.016923904 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.016949892 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.016990900 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.131681919 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.131725073 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.131757021 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.131766081 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.131812096 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.156491995 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.156544924 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.156564951 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.156575918 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.156614065 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.197551012 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.271581888 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.271642923 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.271683931 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.271716118 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.271733046 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.272022009 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.272089005 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.272094965 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.272140980 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.272195101 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.272242069 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.363374949 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.363440037 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.387057066 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.387123108 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.387165070 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.387176037 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.387191057 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.387737036 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.387794018 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.387799978 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.388067961 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.388185024 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.388190985 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.440229893 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.502785921 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502799034 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502856016 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502860069 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.502882957 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502912045 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.502922058 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502950907 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.502964973 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.502980947 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.503071070 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:15.503209114 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.503648996 CET	49765	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:15.503665924 CET	443	49765	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:17.762692928 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:17.762794018 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:17.762841940 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:18.685673952 CET	49743	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:50:18.685703993 CET	443	49743	172.217.18.100	192.168.2.4
Oct 31, 2024 14:50:18.964086056 CET	49723	80	192.168.2.4	199.232.210.172
Oct 31, 2024 14:50:18.969882011 CET	80	49723	199.232.210.172	192.168.2.4
Oct 31, 2024 14:50:18.969939947 CET	49723	80	192.168.2.4	199.232.210.172
Oct 31, 2024 14:50:27.967276096 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.967344999 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:27.967420101 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.967478037 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.967567921 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:27.967627048 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.970349073 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.970403910 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:27.970557928 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:27.970592976 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.849095106 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.849451065 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.849489927 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.849816084 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.850517035 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.850583076 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.850922108 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.852868080 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.853131056 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.853173018 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.854665041 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.854746103 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.854782104 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.854830027 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.855170965 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.855256081 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.895333052 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.903433084 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.903451920 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:28.951145887 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:28.978982925 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.023329973 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227581024 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227639914 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227709055 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.227735996 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227778912 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.227895021 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227931023 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.227941990 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.227948904 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.228003025 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.268131971 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.309952974 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.309982061 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.315905094 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.316037893 CET	443	49773	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.316196918 CET	49773	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.319365978 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.319402933 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.319511890 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.319720030 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.319731951 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.342947006 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.343018055 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.366401911 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.366442919 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.366467953 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.366512060 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.366529942 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.419137955 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.458482981 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.458491087 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.458549023 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.458563089 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.458596945 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.458772898 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.481967926 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.481975079 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.482040882 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.482073069 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.482152939 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.482203007 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.482213974 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.527035952 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.574157953 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.574170113 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.574193954 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.574225903 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.574273109 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.574287891 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.574320078 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.574518919 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.574533939 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.597239971 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.597296000 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.597327948 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.637973070 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.689445019 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.689455032 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.689470053 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.689490080 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.689512968 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.689553022 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.689568043 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.689637899 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.712949991 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.712958097 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.713005066 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.713020086 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.713057995 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.713118076 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.759989977 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.759999037 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.760075092 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.760113001 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.809782982 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.922640085 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922651052 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922673941 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922679901 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922696114 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922702074 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.922724009 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.922765970 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:29.923151016 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:29.923203945 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.035856009 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.035887957 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.035948038 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.035990000 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.036010027 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.076426029 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.082724094 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.082737923 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.082762003 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.082837105 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.082878113 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.082896948 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.082926989 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.107045889 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.107144117 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.151475906 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.151560068 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.153409958 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.153481007 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.175311089 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.175348997 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.175399065 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.175437927 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.175456047 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.211965084 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.212843895 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.212887049 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.214633942 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.215539932 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.215734959 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.216056108 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.217042923 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.221699953 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.221788883 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.259371042 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.290632963 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.290661097 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.290715933 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.290762901 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.290797949 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.290818930 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.384680033 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.384701014 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.384799004 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.384882927 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.384969950 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.384973049 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.385221004 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.385240078 CET	443	49772	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.385273933 CET	49772	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.661818981 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.662036896 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:30.662101984 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.663052082 CET	49774	443	192.168.2.4	85.214.3.95
Oct 31, 2024 14:50:30.663085938 CET	443	49774	85.214.3.95	192.168.2.4
Oct 31, 2024 14:50:55.932027102 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:55.932063103 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:55.932138920 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:55.932473898 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:55.932485104 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.733601093 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.733670950 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:56.735804081 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:56.735814095 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.736038923 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.744999886 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:56.787362099 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.992208004 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.992235899 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.992255926 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.992291927 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:56.992312908 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:56.992335081 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:56.992373943 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.111828089 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.111857891 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.111916065 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.111934900 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.111968040 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.111987114 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.231046915 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.231066942 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.231122971 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.231147051 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.231159925 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.231452942 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.391823053 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.391849995 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.391899109 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.391922951 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.391963005 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.391976118 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.510103941 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.510124922 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.510159969 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.510226965 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.510234118 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.510288954 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.590182066 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.590200901 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.590269089 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.590295076 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.590370893 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.708709955 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.708729982 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.708798885 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.708820105 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.708863020 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.827754974 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.827786922 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.827822924 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.827832937 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.827876091 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.827891111 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.869638920 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.869654894 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.869718075 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.869729042 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.869858980 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.990180969 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.990197897 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.990267038 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:57.990277052 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:57.990313053 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.107923031 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.107944012 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.107988119 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.108004093 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.108052015 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.108072042 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.187417984 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.187436104 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.187526941 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.187536001 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.187576056 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.227982044 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.227998018 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.228075027 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.228082895 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.228125095 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.308743000 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.308816910 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.308832884 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.308845043 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.308893919 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.308969021 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.308986902 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.309001923 CET	49776	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.309007883 CET	443	49776	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.360486031 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.360532045 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.360599041 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.361753941 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.361778021 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.361922979 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.362231970 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.362241983 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.362323999 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.362339973 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.363955021 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.363965988 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.364027977 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.366739988 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.366766930 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.366832972 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367345095 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367408037 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.367472887 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367599010 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367614985 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.367763042 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367777109 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:58.367882013 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:58.367893934 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.083111048 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.083992958 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.084014893 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.084161997 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.084182978 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.100493908 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.101391077 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.101391077 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.101423025 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.101437092 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.104140043 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.104870081 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.104870081 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.104897022 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.104912996 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.110310078 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.111144066 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.111144066 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.111171961 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.111185074 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.126247883 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.126971960 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.126971960 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.126986980 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.126996040 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211086035 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211121082 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211244106 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.211272001 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211381912 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.211486101 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211513042 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.211513042 CET	49777	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.211519957 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.211550951 CET	443	49777	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.214195967 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.214230061 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.214515924 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.214515924 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.214543104 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.229476929 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.229496956 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.229549885 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.229569912 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.229607105 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.229859114 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.229870081 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.229903936 CET	49780	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.229908943 CET	443	49780	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.232551098 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.232690096 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.233047009 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.233078003 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.233107090 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.233198881 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.233198881 CET	49781	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.233207941 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.233217001 CET	443	49781	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.233237028 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.234337091 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.234350920 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.235968113 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.235992908 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.236140966 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.238492966 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.238509893 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.241925001 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.242095947 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.244055986 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.244240046 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.244256973 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.244288921 CET	49778	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.244294882 CET	443	49778	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.246572018 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.246612072 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.246690035 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.247241974 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.247257948 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263004065 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263035059 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263158083 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.263165951 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263180017 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263405085 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.263437033 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.263437033 CET	49779	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.263448954 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.263459921 CET	443	49779	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.265733957 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.265760899 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.266061068 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.266156912 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.266175032 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.943633080 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.944607019 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.944621086 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.946440935 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.946445942 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.960095882 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.961062908 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.961093903 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.962765932 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.962770939 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.964756966 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.967969894 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.967989922 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.968908072 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.968914032 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.992005110 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.992372990 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.992413998 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:50:59.992779970 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:50:59.992784977 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.001034021 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.001370907 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.001389980 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.001765013 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.001769066 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.072655916 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.072850943 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.072909117 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.072940111 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.072954893 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.072966099 CET	49782	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.072972059 CET	443	49782	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.076066017 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.076092005 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.076150894 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.076286077 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.076297045 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.087949038 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.088013887 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.088131905 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.088152885 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.088164091 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.088175058 CET	49784	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.088179111 CET	443	49784	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.091248989 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.091296911 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.091367960 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.091475010 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.091491938 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.097208977 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.098103046 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.098156929 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.098191023 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.098205090 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.098216057 CET	49783	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.098222017 CET	443	49783	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.101638079 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.101741076 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.101830959 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.101972103 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.102006912 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.131781101 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.131937027 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.131998062 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.132055044 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.132066011 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.132076025 CET	49786	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.132078886 CET	443	49786	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.134248972 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.134296894 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.134396076 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.134572983 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.134615898 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.328289986 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.328713894 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.328778028 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.328824997 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.328841925 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.328860998 CET	49785	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.328866959 CET	443	49785	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.331568003 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.331650019 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.331720114 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.331911087 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.331940889 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.837012053 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.837527990 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.837591887 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.837974072 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.837990999 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.845837116 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.846210003 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.846245050 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.846606016 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.846611977 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.862601995 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.862946987 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.863014936 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.863343000 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.863357067 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.900794029 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.901123047 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.901159048 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.901530981 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.901542902 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.967211962 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.967350960 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.967442036 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.967540026 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.967585087 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.967627048 CET	49789	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.967642069 CET	443	49789	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.970341921 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.970375061 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.970436096 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.970594883 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.970607042 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.983580112 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.983649969 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.983732939 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.983839989 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.983863115 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.983875990 CET	49787	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.983881950 CET	443	49787	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.986144066 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.986175060 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.986243010 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.986351967 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.986366034 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.994400024 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.994837046 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.994899035 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.994995117 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.994995117 CET	49790	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.995035887 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.995060921 CET	443	49790	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.997349977 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.997364044 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:00.997553110 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.997904062 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:00.997915030 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.030189991 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.030349970 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.030405045 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.030544043 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.030560970 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.030574083 CET	49788	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.030580044 CET	443	49788	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.032639027 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.032650948 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.032708883 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.032880068 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.032892942 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.067174911 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.067698956 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.067744970 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.068236113 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.068252087 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.197977066 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.198144913 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.198223114 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.198312044 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.198312998 CET	49791	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.198353052 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.198385000 CET	443	49791	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.201276064 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.201354980 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.201575994 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.201729059 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.201761961 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.699306011 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.700637102 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.700637102 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.700673103 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.700689077 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.736166954 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.736665964 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.736685991 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.739968061 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.739974022 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.763104916 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.763627052 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.763658047 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.764147997 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.764153957 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.827641964 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.827790022 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.827905893 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.828192949 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.828207970 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.828237057 CET	49792	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.828242064 CET	443	49792	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.830766916 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.830859900 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.831934929 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.831934929 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.832015991 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.867136002 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.867420912 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.867638111 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.867681980 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.867681980 CET	49794	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.867692947 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.867700100 CET	443	49794	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.871993065 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.872092962 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.874181986 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.876301050 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.876334906 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.891424894 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.891495943 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.891745090 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.891745090 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.891776085 CET	49795	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.891789913 CET	443	49795	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.897022009 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.897100925 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.897293091 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.897490978 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.897525072 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.911729097 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.919539928 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.919570923 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.942081928 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.959979057 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.959991932 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.961020947 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.961107016 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:01.961437941 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:01.961453915 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.084300041 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.084526062 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.089421988 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.089454889 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.089562893 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.091974974 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.136343002 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.136343002 CET	49793	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.136373997 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.136388063 CET	443	49793	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.146501064 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.146545887 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.146584988 CET	49796	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.146605968 CET	443	49796	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.150006056 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150046110 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.150175095 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150223017 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.150273085 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150343895 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150377035 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150386095 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.150717020 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.150737047 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.596288919 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.596800089 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.596864939 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.597275019 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.597289085 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.610001087 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.610364914 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.610407114 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.610769987 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.610785007 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.626058102 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.626421928 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.626461029 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.626828909 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.626841068 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.732223988 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.732621908 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.732695103 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.732796907 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.732839108 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.732868910 CET	49797	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.732882977 CET	443	49797	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.735748053 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.735790968 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.735867023 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.736000061 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.736015081 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.739810944 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.740508080 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.740585089 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.740653038 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.740674019 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.740689993 CET	49798	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.740696907 CET	443	49798	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.742747068 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.742784023 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.743093967 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.743221998 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.743235111 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.757967949 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.758712053 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.758781910 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.758865118 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.758891106 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.758914948 CET	49799	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.758927107 CET	443	49799	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.760787010 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.760812044 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.760924101 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.761048079 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.761059999 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.872662067 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.873301983 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.873337984 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.873991966 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.873999119 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.879061937 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.879491091 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.879513979 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:02.879851103 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:02.879857063 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.001077890 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.001764059 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.001823902 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.009282112 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.009558916 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.009614944 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.020757914 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.020782948 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.020797968 CET	49802	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.020803928 CET	443	49802	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.023030996 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.023061037 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.023061991 CET	49801	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.023070097 CET	443	49801	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.028090954 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.028121948 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.028186083 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.028553009 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.028580904 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.028633118 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.029496908 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.029510975 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.030009985 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.030020952 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.474843979 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.475334883 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.475358009 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.475802898 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.475810051 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.476571083 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.476903915 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.476924896 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.477329969 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.477334976 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.489136934 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.489540100 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.489554882 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.490010977 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.490016937 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.604166031 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.604778051 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.604829073 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.604859114 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.604877949 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.604891062 CET	49804	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.604896069 CET	443	49804	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607480049 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607522011 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607564926 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607583046 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607754946 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607779980 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607793093 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607815981 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607830048 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607839108 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.607847929 CET	49803	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.607851982 CET	443	49803	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.609971046 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.610012054 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.610136032 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.610300064 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.610312939 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.619098902 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.619154930 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.619226933 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.619321108 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.619322062 CET	49805	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.619334936 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.619343996 CET	443	49805	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.622287989 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.622299910 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.622359991 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.622534037 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.622546911 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.755516052 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.755985975 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.755995989 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.756447077 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.756462097 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.775773048 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.776720047 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.776720047 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.776750088 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.776760101 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.884562016 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.884637117 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.884701014 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.884839058 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.884854078 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.884864092 CET	49807	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.884869099 CET	443	49807	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.888317108 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.888345003 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.888444901 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.888781071 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.888792038 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.908885956 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.908962011 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.909028053 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.909203053 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.909223080 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.909235954 CET	49806	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.909240961 CET	443	49806	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.911906958 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.911937952 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:03.912013054 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.912184954 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:03.912200928 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.345351934 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.345931053 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.345957994 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.346436024 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.346445084 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.349805117 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.350125074 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.350157022 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.350953102 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.350959063 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.366648912 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.390393019 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.390438080 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.391181946 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.391194105 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.481205940 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.481476068 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.482572079 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.482572079 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.482624054 CET	49808	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.482642889 CET	443	49808	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.485142946 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.485173941 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.485352039 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.485522985 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.485531092 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.485872030 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.486069918 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.486270905 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.486270905 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.486507893 CET	49809	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.486521006 CET	443	49809	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.488269091 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.488302946 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.488464117 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.488529921 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.488544941 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.519460917 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.519834042 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.519936085 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.519982100 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.519982100 CET	49810	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.519994020 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.520004034 CET	443	49810	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.522154093 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.522177935 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.522320986 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.522367001 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.522372007 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.630991936 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.631969929 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.631969929 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.631995916 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.632004976 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.643976927 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.644977093 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.644977093 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.645011902 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.645029068 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.762752056 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.762836933 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.762998104 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.763266087 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.763266087 CET	49811	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.763282061 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.763289928 CET	443	49811	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.766172886 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.766228914 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.766483068 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.766558886 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.766568899 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.772635937 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.772730112 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.772887945 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.772937059 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.772937059 CET	49812	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.772953033 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.772967100 CET	443	49812	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.775002956 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.775046110 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:04.775139093 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.775307894 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:04.775327921 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.238424063 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.238765001 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.239325047 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.239325047 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.239342928 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.239352942 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.239634037 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.239650011 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.240092039 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.240097046 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.271373034 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.272043943 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.272043943 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.272063017 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.272072077 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.387674093 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.387873888 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.388082027 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.388107061 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.388122082 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.388134003 CET	49813	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.388138056 CET	443	49813	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.391072989 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.391122103 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.391190052 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.391386032 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.391402960 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.391592026 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.392170906 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.392388105 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.392441034 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.392461061 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.392472029 CET	49814	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.392479897 CET	443	49814	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.394440889 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.394479990 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.394577980 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.394731998 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.394748926 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.410501957 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.410573006 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.410712004 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.410859108 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.410868883 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.410880089 CET	49815	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.410883904 CET	443	49815	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.414623022 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.414664030 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.414732933 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.414890051 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.414911985 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.516844034 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.517257929 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.517271996 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.517671108 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.517674923 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.534435034 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.534822941 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.534851074 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.535218000 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.535224915 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.652765989 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.653515100 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.653587103 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.653718948 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.653731108 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.653740883 CET	49817	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.653747082 CET	443	49817	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.656685114 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.656770945 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.656876087 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.656976938 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.657008886 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.668848038 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.669011116 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.669069052 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.669267893 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.669286966 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.669297934 CET	49816	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.669303894 CET	443	49816	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.671554089 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.671581984 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:05.671756029 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.671911001 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:05.671926022 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.121896029 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.122548103 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.122581005 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.123101950 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.123107910 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.135271072 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.135893106 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.135921001 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.136424065 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.136725903 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.136732101 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.137257099 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.137289047 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.137713909 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.137728930 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.253086090 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.253263950 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.253323078 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.253437996 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.253454924 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.253465891 CET	49818	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.253470898 CET	443	49818	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.256304026 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.256390095 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.256472111 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.256782055 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.256809950 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.264841080 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265146971 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265239000 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265324116 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265324116 CET	49820	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265366077 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265389919 CET	443	49820	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265479088 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265718937 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265765905 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265857935 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265873909 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.265883923 CET	49819	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.265888929 CET	443	49819	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.267699003 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.267748117 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.267905951 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.267910957 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.267947912 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.268019915 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.268049002 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.268059969 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.268292904 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.268310070 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.375421047 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.375924110 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.375971079 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.376400948 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.376427889 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.414006948 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.414431095 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.414459944 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.415359020 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.415366888 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.502053976 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.502149105 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.502226114 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.503725052 CET	49821	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.503779888 CET	443	49821	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.509639025 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.509671926 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.509752035 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.510158062 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.510175943 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.545581102 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.545696020 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.545811892 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.546088934 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.546129942 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.546160936 CET	49822	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.546176910 CET	443	49822	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.551423073 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.551461935 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.551542997 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.551944971 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.551961899 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.848545074 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:06.848587036 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:06.848732948 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:06.848895073 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:06.848911047 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:06.989578009 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.990086079 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.990127087 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.990581989 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.990592957 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.990605116 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.990923882 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.990993977 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:06.991270065 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:06.991282940 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.043647051 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.044461966 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.044487953 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.045202017 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.045207977 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.122432947 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.122497082 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.122556925 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.122828960 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.122854948 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.122869015 CET	49825	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.122875929 CET	443	49825	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.132334948 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.132363081 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.132435083 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.132591963 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.132601976 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.181335926 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.181894064 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.181950092 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.181988955 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.182018995 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.182039022 CET	49824	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.182046890 CET	443	49824	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.185722113 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.185797930 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.185875893 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.186120033 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.186136007 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.286509991 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.287008047 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.287031889 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.287496090 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.287503958 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.294930935 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.295425892 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.295464993 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.295864105 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.295872927 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.415566921 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.415636063 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.415838957 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.415934086 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.415934086 CET	49823	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.415981054 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.416013002 CET	443	49823	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.419989109 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.420017004 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.420088053 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.420702934 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.420710087 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.424393892 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.425087929 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.425147057 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.425198078 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.425220013 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.425232887 CET	49826	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.425240040 CET	443	49826	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.426919937 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.427011013 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.427088022 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427208900 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427208900 CET	49827	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427222967 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.427232027 CET	443	49827	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.427732944 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427772999 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.427824974 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427959919 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.427975893 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.429703951 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.429737091 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.429802895 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.429935932 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.429949045 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.707473993 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:07.707763910 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:07.707793951 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:07.708143950 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:07.708498955 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:07.708564043 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:07.753948927 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:07.867228985 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.867732048 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.867760897 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.868580103 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.868585110 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.950730085 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.951189995 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.951210976 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.951661110 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.951666117 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.996417046 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.996486902 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.996551991 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.996952057 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.996970892 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.996982098 CET	49829	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.996987104 CET	443	49829	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.999775887 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:07.999824047 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:07.999928951 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.000094891 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.000111103 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.090620995 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.090759039 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.090816975 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.091012955 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.091032028 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.091043949 CET	49830	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.091052055 CET	443	49830	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.094192982 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.094239950 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.094446898 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.094615936 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.094630003 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.148108006 CET	49724	80	192.168.2.4	199.232.210.172
Oct 31, 2024 14:51:08.153907061 CET	80	49724	199.232.210.172	192.168.2.4
Oct 31, 2024 14:51:08.154294968 CET	49724	80	192.168.2.4	199.232.210.172
Oct 31, 2024 14:51:08.188591003 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.189172029 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.189187050 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.189735889 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.189740896 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.198407888 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.198769093 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.198805094 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.199174881 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.199182034 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.321239948 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.321312904 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.321365118 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.321584940 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.321599007 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.321643114 CET	49831	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.321647882 CET	443	49831	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.324259996 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.324337959 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.324444056 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.324776888 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.324807882 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.334469080 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.335000038 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.335078955 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.335203886 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.335221052 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.335232973 CET	49833	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.335237980 CET	443	49833	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.338329077 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.338417053 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.338540077 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.338727951 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.338756084 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.383387089 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.383887053 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.383919954 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.384474993 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.384481907 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.512552977 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.514436007 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.518070936 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.523551941 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.523571014 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.523602962 CET	49832	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.523607969 CET	443	49832	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.569519043 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.569571972 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.569681883 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.570024967 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.570041895 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.733427048 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.733942986 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.733979940 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.734420061 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.734426022 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.825598001 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.826822042 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.826848984 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.827614069 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.827619076 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.863821983 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.863979101 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.864063978 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.864104033 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.864125013 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.864135981 CET	49834	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.864141941 CET	443	49834	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.866688013 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.866769075 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.866866112 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.867022038 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.867054939 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.956414938 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.956734896 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.956856012 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.956974983 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.956989050 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.956999063 CET	49835	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.957004070 CET	443	49835	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.960359097 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.960376978 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:08.960629940 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.960772991 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:08.960783005 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.054147005 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.054646969 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.054686069 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.055084944 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.055092096 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.074937105 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.075434923 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.075496912 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.075962067 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.075975895 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.181973934 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.183088064 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.186197042 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.187455893 CET	49836	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.187493086 CET	443	49836	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.191854954 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.191905975 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.191975117 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.192265987 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.192282915 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.204824924 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.204889059 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.205019951 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.205076933 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.205076933 CET	49837	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.205110073 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.205132961 CET	443	49837	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.207334042 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.207359076 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.207423925 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.207582951 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.207593918 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.308056116 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.309402943 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.309478045 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.309977055 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.309993029 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.453367949 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.453443050 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.453541040 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.453758955 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.453759909 CET	49838	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.453794003 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.453809977 CET	443	49838	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.456720114 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.456773996 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.456836939 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.456984043 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.457000017 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.629302979 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.629827976 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.629890919 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.630949974 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.630964041 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.704497099 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.705003023 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.705034018 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.705629110 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.705636978 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.763617992 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.763700962 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.763773918 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.763909101 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.763952971 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.763982058 CET	49839	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.763998985 CET	443	49839	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.766786098 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.766834974 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.766916990 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.767075062 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.767103910 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.833456039 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.833609104 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.833676100 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.833705902 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.833722115 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.833729982 CET	49840	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.833734989 CET	443	49840	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.836234093 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.836313963 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.836497068 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.836636066 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.836671114 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.936964989 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.938157082 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.938195944 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.939424992 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.939431906 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.974334002 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.974904060 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.974925041 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:09.975989103 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:09.975992918 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.068161011 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.069631100 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.069701910 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.069864035 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.069885015 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.069890976 CET	49841	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.069895983 CET	443	49841	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.073928118 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.074009895 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.074090958 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.074626923 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.074656010 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.109595060 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.109658957 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.109749079 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.110265017 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.110276937 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.110308886 CET	49842	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.110313892 CET	443	49842	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.116101027 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.116178989 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.116301060 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.116503000 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.116538048 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.198842049 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.200591087 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.200623035 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.201318979 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.201324940 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.329996109 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.330068111 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.330116987 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.330351114 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.330367088 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.330378056 CET	49843	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.330383062 CET	443	49843	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.333333969 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.333372116 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.333477020 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.333621979 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.333635092 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.501027107 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.501538038 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.501601934 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.501995087 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.502006054 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.597875118 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.598411083 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.598507881 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.598922014 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.598937988 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.633768082 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.633879900 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.633956909 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.634079933 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.634079933 CET	49844	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.634128094 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.634141922 CET	443	49844	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.637077093 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.637119055 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.637202978 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.637408018 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.637423038 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.728368998 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.728457928 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.728535891 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.728646994 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.728708982 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.728739023 CET	49845	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.728754997 CET	443	49845	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.731534958 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.731573105 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.731762886 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.732052088 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.732067108 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.821495056 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.821985960 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.822041035 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.822438955 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.822453976 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.850678921 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.851088047 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.851146936 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.851507902 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.851521015 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.949366093 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.949676037 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.949755907 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.949954987 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.949990034 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.950017929 CET	49846	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.950033903 CET	443	49846	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.953272104 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.953315973 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.953372002 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.953543901 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.953558922 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.984458923 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.984797001 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.984889984 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.984946012 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.984946012 CET	49847	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.984977961 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.985018969 CET	443	49847	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.987397909 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.987432957 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:10.987487078 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.987685919 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:10.987698078 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.068509102 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.069041967 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.069067001 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.069503069 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.069508076 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.198312998 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.198373079 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.198543072 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.198596001 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.198618889 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.198630095 CET	49848	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.198635101 CET	443	49848	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.202034950 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.202070951 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.202191114 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.202363968 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.202378035 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.354099989 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.354602098 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.354623079 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.355092049 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.355098009 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.460395098 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.460897923 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.460937977 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.461340904 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.461345911 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.481435061 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.481844902 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.481964111 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.481997967 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.482022047 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.482032061 CET	49849	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.482038021 CET	443	49849	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.484747887 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.484797001 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.484860897 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.485007048 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.485018969 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.591994047 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.592905998 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.592983961 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.593030930 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.593044996 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.593060970 CET	49850	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.593065977 CET	443	49850	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.595556974 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.595592976 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.595827103 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.596070051 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.596088886 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.709002972 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.709475040 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.709498882 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.709954023 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.709959030 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.717050076 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.717483044 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.717508078 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.717904091 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.717909098 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.840493917 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.840740919 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.840801954 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.841203928 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.841227055 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.841239929 CET	49851	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.841245890 CET	443	49851	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.843827009 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.843861103 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.844029903 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.844250917 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.844266891 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.852056026 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.852137089 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.852204084 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.852256060 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.852256060 CET	49852	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.852267027 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.852274895 CET	443	49852	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.854206085 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.854224920 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.854290962 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.854489088 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.854500055 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.941967964 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.942440033 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.942466021 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:11.943003893 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:11.943011045 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.071234941 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.071320057 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.071373940 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.071624994 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.071645021 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.071651936 CET	49853	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.071657896 CET	443	49853	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.074527025 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.074548960 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.074728012 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.074996948 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.075011969 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.218820095 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.219379902 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.219410896 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.220129967 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.220134974 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347177029 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347265959 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347346067 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.347361088 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347451925 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347506046 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.347531080 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347542048 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.347542048 CET	49854	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.347549915 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.347552061 CET	443	49854	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.350121021 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.350141048 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.350223064 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.350393057 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.350402117 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.374281883 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.374667883 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.374686003 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.375077009 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.375081062 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.505017042 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.505081892 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.505351067 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.505351067 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.505450010 CET	49855	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.505465984 CET	443	49855	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.508246899 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.508295059 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.508550882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.508550882 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.508605003 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.584220886 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.585172892 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.585172892 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.585201025 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.585215092 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.656943083 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.657922029 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.657922029 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.657952070 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.657960892 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.724881887 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.724950075 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.725107908 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.725233078 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.725233078 CET	49856	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.725256920 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.725266933 CET	443	49856	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.727942944 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.727982044 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.728188992 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.728277922 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.728282928 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.837945938 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.838886023 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.838886023 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.838913918 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.838927984 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.936892033 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.936917067 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.936979055 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.937007904 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.937098026 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.937338114 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.937357903 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.937391043 CET	49857	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.937396049 CET	443	49857	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.939872980 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.939924002 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.940399885 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.942747116 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.942773104 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.973541021 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.973562956 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.973611116 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.973683119 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.973683119 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.974107027 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.974107027 CET	49858	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.974128962 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.974138975 CET	443	49858	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.976938009 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.976973057 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:12.977111101 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.977281094 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:12.977292061 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.095002890 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.095447063 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.095467091 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.095989943 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.095993996 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.228235960 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.228291035 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.228415966 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.228517056 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.228517056 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.228606939 CET	49859	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.228620052 CET	443	49859	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.236006975 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.236099958 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.240072012 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.240309954 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.240345955 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.243418932 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.243992090 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.244010925 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.244254112 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.244268894 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.373868942 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.373933077 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.374125957 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.374656916 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.374685049 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.374722004 CET	49860	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.374728918 CET	443	49860	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.380000114 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.380114079 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.382373095 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.382643938 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.382698059 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.460043907 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.467442036 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.467482090 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.469724894 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.469732046 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.600860119 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.600928068 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.601147890 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.601516008 CET	49861	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.601531982 CET	443	49861	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.609453917 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.609553099 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.609639883 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.610435963 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.610475063 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.703387022 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.703891039 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.703912020 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.704435110 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.704442024 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.709357977 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.709764004 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.709789991 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.710205078 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.710211992 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.834393978 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.834498882 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.834553957 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.834755898 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.834774971 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.834785938 CET	49862	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.834791899 CET	443	49862	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.837593079 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.837693930 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.837809086 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.838036060 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.838054895 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.839440107 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.839570999 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.839627028 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.839684010 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.839703083 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.839715958 CET	49863	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.839723110 CET	443	49863	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.843570948 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.843621016 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:13.843683958 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.843807936 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:13.843825102 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:14.979248047 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:14.980032921 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:14.980070114 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:14.980753899 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:14.980772018 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.107928038 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.113667011 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.114726067 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.115061998 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.116880894 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.116950035 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.117047071 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.150180101 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.165821075 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.165832043 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.165832043 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.332783937 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.332817078 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.333214045 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.333220959 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.333419085 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.333442926 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.333751917 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.333759069 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.333893061 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.333916903 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.333931923 CET	49864	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.333939075 CET	443	49864	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.335375071 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.335390091 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.335860014 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.335865974 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.336107969 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.336139917 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.336517096 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.336522102 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.343027115 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.343122959 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.343204021 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.343353033 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.343386889 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.459474087 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.459537983 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.459655046 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.459899902 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.459899902 CET	49866	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.459945917 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.459956884 CET	443	49866	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.461796045 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.461872101 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.462011099 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.462255001 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.462255001 CET	49867	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.462294102 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.462318897 CET	443	49867	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.462878942 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.462946892 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.462984085 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.463030100 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.463042021 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.463099957 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.463372946 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.463386059 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.463449001 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.463457108 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.463478088 CET	49868	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.463481903 CET	443	49868	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.464587927 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.464667082 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.464730978 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.464873075 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.464873075 CET	49865	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.464889050 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.464898109 CET	443	49865	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.465622902 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.465663910 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.465740919 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.465958118 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.465985060 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.468200922 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468249083 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.468404055 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468482971 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468528986 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.468597889 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468626022 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:15.468698978 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468749046 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:15.468761921 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.090316057 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.092417002 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.092442989 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.092897892 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.092904091 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.184148073 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.185081959 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.185120106 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.185518026 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.185523987 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.195363045 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.195480108 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.195873022 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.195931911 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.196098089 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.196115971 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.196511030 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.196525097 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.196711063 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.196715117 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.221282959 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.221431017 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.221549988 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.221607924 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.221625090 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.221635103 CET	49869	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.221638918 CET	443	49869	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.224580050 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.224630117 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.224888086 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.224888086 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.224922895 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.229568958 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.229917049 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.229954958 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.230761051 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.230768919 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.313127041 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.313162088 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.313209057 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.313261986 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.313446999 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.313466072 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.313478947 CET	49870	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.313484907 CET	443	49870	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.316438913 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.316534996 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.316621065 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.316859007 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.316893101 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.325262070 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.325563908 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.325699091 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.325731993 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.325748920 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.325759888 CET	49871	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.325763941 CET	443	49871	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.328093052 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.328108072 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.328162909 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.328290939 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.328300953 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.332170963 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.332298994 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.332341909 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.332353115 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.332386971 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.332427025 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.332451105 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.332464933 CET	49872	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.332472086 CET	443	49872	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.334498882 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.334534883 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.334592104 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.334724903 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.334736109 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.367038965 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.367108107 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.367172003 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.367398977 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.367430925 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.367479086 CET	49873	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.367495060 CET	443	49873	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.370349884 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.370362043 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.370445967 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.370568991 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.370579958 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.974664927 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.976854086 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.976854086 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:16.976937056 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:16.976968050 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.065757036 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.066816092 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.066817045 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.066867113 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.066946983 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.074991941 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.075509071 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.075546026 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.075985909 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.075992107 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.078917980 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.079832077 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.079832077 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.079854012 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.079864979 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.101294041 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.102200031 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.102231026 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.102756977 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.102763891 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.104248047 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.104449034 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.106216908 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.106216908 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.106477976 CET	49874	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.106498957 CET	443	49874	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.114950895 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.114994049 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.116765976 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.116998911 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.117017031 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.199038982 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.199121952 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.201128006 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.201189041 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.201189041 CET	49875	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.201235056 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.201265097 CET	443	49875	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.204231024 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.204261065 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.204432964 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.204544067 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.204551935 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.209584951 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.214629889 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.214778900 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.214778900 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.214935064 CET	49877	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.214953899 CET	443	49877	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.215188026 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.215214014 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.215253115 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.215282917 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.215356112 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.215943098 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.215956926 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.215985060 CET	49876	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.215991974 CET	443	49876	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.218281031 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218317032 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.218347073 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218364954 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.218449116 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218472958 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218602896 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218616962 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.218669891 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.218681097 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.230784893 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.230846882 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.231033087 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.231060028 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.231060028 CET	49878	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.231067896 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.231079102 CET	443	49878	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.234076977 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.234092951 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.234635115 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.234635115 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.234663010 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.709641933 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:17.709719896 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:17.709825039 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:17.879367113 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.880017996 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.880045891 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.880469084 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.880475044 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.943598032 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.944086075 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.944101095 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.944542885 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.944549084 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.948760986 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.949095964 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.949110031 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.949568033 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.949573040 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.960730076 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.961097002 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.961126089 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.961486101 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.961493015 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.962785006 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.963181019 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.963202953 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:17.963687897 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:17.963692904 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.013647079 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.013808012 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.013964891 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.014117002 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.014137983 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.014147997 CET	49879	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.014158964 CET	443	49879	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.016851902 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.016889095 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.017149925 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.017337084 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.017348051 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073493958 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073556900 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073597908 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.073605061 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073628902 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073702097 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.073813915 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.073827028 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.073858976 CET	49880	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.073863983 CET	443	49880	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.077497005 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.077533960 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.077596903 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.077753067 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.077769041 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.078578949 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.078639030 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.078675032 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.078696012 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.078723907 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.078897953 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.078897953 CET	49882	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.078906059 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.078913927 CET	443	49882	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.080957890 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.080972910 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.081034899 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.081190109 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.081198931 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.088946104 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.089453936 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.089520931 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.089551926 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.089564085 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.089575052 CET	49883	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.089580059 CET	443	49883	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.092483044 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.092499971 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.092592955 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.092741013 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.092751980 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.095005989 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.095072031 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.095124006 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.095232964 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.095232964 CET	49881	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.095238924 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.095247030 CET	443	49881	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.097243071 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.097321033 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.097403049 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.097567081 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.097601891 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.686988115 CET	49828	443	192.168.2.4	172.217.18.100
Oct 31, 2024 14:51:18.687012911 CET	443	49828	172.217.18.100	192.168.2.4
Oct 31, 2024 14:51:18.762274027 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.763334990 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.763348103 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.763952971 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.763957977 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.825215101 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.825853109 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.825885057 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.826400995 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.826406956 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.831619978 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.832001925 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.832014084 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.832372904 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.832376957 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.835536957 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.836041927 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.836056948 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.836209059 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.836220980 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.837546110 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.837872982 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.837932110 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.838320971 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.838340044 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.894604921 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.894763947 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.894946098 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.894946098 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.895001888 CET	49884	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.895016909 CET	443	49884	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.897810936 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.897887945 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.898077011 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.898144960 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.898159981 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.958066940 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.958122969 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.958442926 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.958472013 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.958472013 CET	49885	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.958491087 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.958502054 CET	443	49885	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.961282015 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.961345911 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.961468935 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.961591005 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.961610079 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.965694904 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.965980053 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.966130018 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.966130018 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.966181040 CET	49887	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.966187000 CET	443	49887	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.967154980 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.967524052 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.967566967 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.967696905 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.967696905 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.967725039 CET	49886	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.967731953 CET	443	49886	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.968993902 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969052076 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.969259024 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969568014 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969578981 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969604969 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.969652891 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.969729900 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969906092 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.969943047 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.971610069 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.971903086 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.972014904 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.972068071 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.972068071 CET	49888	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.972096920 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.972122908 CET	443	49888	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.973947048 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.973982096 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:18.974190950 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.974190950 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:18.974220037 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.635200977 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.635756969 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.635792017 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.636210918 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.636219025 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.711464882 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.711882114 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.711911917 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.712295055 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.712301970 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.714540958 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.714886904 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.714941025 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.715342045 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.715356112 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.715461016 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.715795994 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.715842962 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.716258049 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.716279030 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.740664005 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.741107941 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.741154909 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.741406918 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.741415977 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.764266014 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.764452934 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.764559031 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.764647961 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.764691114 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.764718056 CET	49889	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.764734030 CET	443	49889	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.767417908 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.767513990 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.767611980 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.767770052 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.767793894 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.843782902 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.843851089 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.843911886 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.844094992 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.844110012 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.844141006 CET	49893	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.844146967 CET	443	49893	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.845846891 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.846151114 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.846213102 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.846424103 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.846446037 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.846460104 CET	49891	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.846467018 CET	443	49891	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.847217083 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.847242117 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.847387075 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.847692013 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.847707033 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.847942114 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848001957 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848051071 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848054886 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848301888 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848421097 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848421097 CET	49890	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848450899 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848478079 CET	443	49890	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848480940 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848515034 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.848721027 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848809958 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.848818064 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.850529909 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.850559950 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.850658894 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.850835085 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.850851059 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.876266003 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.876502037 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.876580000 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.876667976 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.876667976 CET	49892	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.876712084 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.876741886 CET	443	49892	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.878659964 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.878688097 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:19.878976107 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.879146099 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:19.879162073 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.504213095 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.505165100 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.505165100 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.505194902 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.505206108 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.591200113 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.591698885 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.591720104 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.592206955 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.592212915 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.592220068 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.592498064 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.592534065 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.592847109 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.592854023 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.594006062 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.594301939 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.594322920 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.594762087 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.594769001 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.639811039 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.639966011 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.640023947 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.640044928 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.640125036 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.640356064 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.640356064 CET	49894	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.640372992 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.640383959 CET	443	49894	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.647514105 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.647552967 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.647562027 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.647716999 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.647840023 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.647855043 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.648251057 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.648276091 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.648854017 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.648861885 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.720858097 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.721649885 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.721740961 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.721740961 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.721844912 CET	49897	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.721854925 CET	443	49897	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.724865913 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.724872112 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.724905014 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.724950075 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.724981070 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725075960 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725167990 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725200891 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725200891 CET	49896	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725218058 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725229979 CET	443	49896	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725308895 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725339890 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725353003 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725382090 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725774050 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725774050 CET	49895	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.725790024 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.725797892 CET	443	49895	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.727679014 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.727710962 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.727783918 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.727991104 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.728005886 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.728739977 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.728749037 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.728863001 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.728924990 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.728929996 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.785670042 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.786017895 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.786073923 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.786109924 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.786147118 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.786200047 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.786216021 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.786231995 CET	49898	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.786240101 CET	443	49898	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.789242029 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.789275885 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:20.789462090 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.789577007 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:20.789589882 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.379215002 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.380655050 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.380655050 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.380681038 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.380686045 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.459511042 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.460119009 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.460141897 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.460890055 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.460896015 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.462526083 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.462867975 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.462893963 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.463331938 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.463337898 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.474512100 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.474844933 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.474863052 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.475302935 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.475308895 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.508838892 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.508990049 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.509247065 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.509247065 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.509275913 CET	49899	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.509293079 CET	443	49899	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.512342930 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.512377024 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.512512922 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.512798071 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.512810946 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.517123938 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.517446995 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.517465115 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.517966986 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.517971992 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.591846943 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.592609882 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.592691898 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.593055964 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.593055964 CET	49901	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.593079090 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.593087912 CET	443	49901	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.595379114 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.595406055 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.595453024 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.595463991 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.595582962 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.596544027 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.596581936 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.596652985 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.596882105 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.596882105 CET	49902	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.596896887 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.596905947 CET	443	49902	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.598177910 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.598190069 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.599324942 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.599349022 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.599421024 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.599728107 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.599735975 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.617780924 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.617940903 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.617989063 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.617995977 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.618051052 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.618257999 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.618263960 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.618303061 CET	49900	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.618308067 CET	443	49900	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.620425940 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.620467901 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.620573044 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.620740891 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.620757103 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.645559072 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.645627975 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.645693064 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.646004915 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.646018982 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.646037102 CET	49903	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.646054983 CET	443	49903	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.649019003 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.649045944 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:21.649144888 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.649271011 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:21.649283886 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.267601967 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.268115997 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.268141985 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.268733978 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.268739939 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.316205025 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.316766977 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.316786051 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.317545891 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.317553997 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.330987930 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.331454039 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.331475973 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.332062960 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.332068920 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.350745916 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.351150990 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.351172924 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.351634026 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.351640940 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.375942945 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.376471996 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.376504898 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.377019882 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.377026081 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403526068 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403611898 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403667927 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.403681993 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403748035 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403798103 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.403945923 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.403964043 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.403975964 CET	49904	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.403981924 CET	443	49904	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.407362938 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.407401085 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.407464027 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.407604933 CET	49909	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.407617092 CET	443	49909	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.463857889 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.463977098 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.464148998 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.464373112 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.464373112 CET	49905	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.464397907 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.464409113 CET	443	49905	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467320919 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.467372894 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467569113 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467700005 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.467817068 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467823982 CET	49910	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.467834949 CET	443	49910	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467879057 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.467902899 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.468040943 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.468040943 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.468105078 CET	49906	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.468122959 CET	443	49906	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.470271111 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.470293999 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.470977068 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.471084118 CET	49911	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.471096039 CET	443	49911	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.480298042 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.480489016 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.480619907 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.480619907 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.480663061 CET	49907	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.480675936 CET	443	49907	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.483198881 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.483268023 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.483371019 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.483527899 CET	49912	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.483570099 CET	443	49912	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.504347086 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.504412889 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.504544973 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.504703999 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.504703999 CET	49908	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.504723072 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.504733086 CET	443	49908	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.507411003 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.507464886 CET	443	49913	13.107.246.45	192.168.2.4
Oct 31, 2024 14:51:22.507759094 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.507916927 CET	49913	443	192.168.2.4	13.107.246.45
Oct 31, 2024 14:51:22.507936001 CET	443	49913	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 31, 2024 14:50:02.193562984 CET	53	65017	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:02.198205948 CET	53	63102	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:03.551295996 CET	53	57296	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:04.221272945 CET	63462	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:04.221523046 CET	62129	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:04.228656054 CET	53	62129	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:04.228842974 CET	53	63462	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:06.811582088 CET	58111	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:06.812128067 CET	58452	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:06.820539951 CET	53	58452	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:06.820557117 CET	53	58111	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:08.012423038 CET	63216	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:08.015952110 CET	49660	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:08.019633055 CET	53	63216	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:08.025470018 CET	53	49660	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:10.033868074 CET	53	64267	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:10.214708090 CET	64502	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:10.214988947 CET	62571	53	192.168.2.4	1.1.1.1
Oct 31, 2024 14:50:10.222269058 CET	53	64502	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:10.222286940 CET	53	62571	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:10.226843119 CET	53	64205	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:19.746393919 CET	138	138	192.168.2.4	192.168.2.255
Oct 31, 2024 14:50:21.057202101 CET	53	58788	1.1.1.1	192.168.2.4
Oct 31, 2024 14:50:39.974399090 CET	53	58443	1.1.1.1	192.168.2.4
Oct 31, 2024 14:51:02.074944973 CET	53	60741	1.1.1.1	192.168.2.4
Oct 31, 2024 14:51:02.560173988 CET	53	61886	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 31, 2024 14:50:04.221272945 CET	192.168.2.4	1.1.1.1	0xb949	Standard query (0)	hidrive.ionos.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:04.221523046 CET	192.168.2.4	1.1.1.1	0xd5dc	Standard query (0)	hidrive.ionos.com	65	IN (0x0001)	false
Oct 31, 2024 14:50:06.811582088 CET	192.168.2.4	1.1.1.1	0x382e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:06.812128067 CET	192.168.2.4	1.1.1.1	0x8040	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 31, 2024 14:50:08.012423038 CET	192.168.2.4	1.1.1.1	0xf521	Standard query (0)	hidrive.ionos.com	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:08.015952110 CET	192.168.2.4	1.1.1.1	0x815	Standard query (0)	hidrive.ionos.com	65	IN (0x0001)	false
Oct 31, 2024 14:50:10.214708090 CET	192.168.2.4	1.1.1.1	0x359	Standard query (0)	ce1.uicdn.net	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:10.214988947 CET	192.168.2.4	1.1.1.1	0xb28c	Standard query (0)	ce1.uicdn.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 31, 2024 14:50:04.228842974 CET	1.1.1.1	192.168.2.4	0xb949	No error (0)	hidrive.ionos.com		85.214.3.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:06.820539951 CET	1.1.1.1	192.168.2.4	0x8040	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 31, 2024 14:50:06.820557117 CET	1.1.1.1	192.168.2.4	0x382e	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:08.019633055 CET	1.1.1.1	192.168.2.4	0xf521	No error (0)	hidrive.ionos.com		85.214.3.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:10.222269058 CET	1.1.1.1	192.168.2.4	0x359	No error (0)	ce1.uicdn.net		213.165.66.58	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:15.551801920 CET	1.1.1.1	192.168.2.4	0xf5ef	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:15.551801920 CET	1.1.1.1	192.168.2.4	0xf5ef	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:16.244085073 CET	1.1.1.1	192.168.2.4	0x7564	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 14:50:16.244085073 CET	1.1.1.1	192.168.2.4	0x7564	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:29.851531029 CET	1.1.1.1	192.168.2.4	0x6ddb	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 14:50:29.851531029 CET	1.1.1.1	192.168.2.4	0x6ddb	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:55.066876888 CET	1.1.1.1	192.168.2.4	0x27e1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 14:50:55.066876888 CET	1.1.1.1	192.168.2.4	0x27e1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:50:55.931368113 CET	1.1.1.1	192.168.2.4	0x5ea	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 14:50:55.931368113 CET	1.1.1.1	192.168.2.4	0x5ea	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 31, 2024 14:51:15.537213087 CET	1.1.1.1	192.168.2.4	0x1ed6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 31, 2024 14:51:15.537213087 CET	1.1.1.1	192.168.2.4	0x1ed6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

hidrive.ionos.com

https:

ce1.uicdn.net

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:05 UTC	673	OUT	GET /lnk/FamigcCEF HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:05 UTC	628	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:05 GMT Server: Apache X-Frame-Options: DENY Last-Modified: Mon, 28 Oct 2024 09:44:18 GMT ETag: "37cc-62586500138c0" Accept-Ranges: bytes Content-Length: 14284 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Cache-Control: must-revalidate Expires: 0 Content-Security-Policy: frame-ancestors 'none' Referrer-Policy: strict-origin-when-cross-origin Permissions-Policy: fullscreen=* X-Content-Type-Options: nosniff Connection: close Content-Type: text/html X-STG-FE: 10.4.1.68:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:05 UTC	3807	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 74 69 74 6c 65 3e 48 69 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: <!doctype html><html lang="de"><head><meta charset="utf-8"><title>HiDrive</title><meta name="description" content=""><meta name="viewport" content="width=device-width,minimum-scale=1,maximum-scale=2,initial-scale=1"><meta name="format-detection" content="
2024-10-31 13:50:05 UTC	5792	IN	Data Raw: 2e 32 37 34 2d 2e 32 30 34 2d 2e 32 37 31 2d 2e 30 36 32 2d 2e 31 31 61 31 2e 39 30 38 20 31 2e 39 20 30 20 30 20 30 2d 31 2e 36 36 2d 2e 39 36 39 20 31 2e 38 36 38 20 31 2e 38 36 20 30 20 30 20 30 2d 2e 39 36 35 2e 32 36 36 20 31 2e 39 34 35 20 31 2e 39 33 37 20 30 20 30 20 30 2d 2e 37 30 31 20 32 2e 35 35 33 6c 2e 30 32 35 2e 30 34 35 61 36 2e 35 35 34 20 36 2e 35 32 36 20 30 20 30 20 30 20 34 2e 33 31 38 20 33 2e 30 38 20 36 2e 31 33 20 36 2e 31 30 35 20 30 20 30 20 30 20 31 2e 32 36 32 2e 31 32 37 20 36 2e 34 39 20 36 2e 34 36 32 20 30 20 30 20 30 20 34 2e 36 38 32 2d 31 30 2e 39 34 36 4c 37 38 2e 33 32 20 38 2e 30 32 61 32 2e 35 31 37 20 32 2e 35 30 37 20 30 20 30 20 31 2d 2e 36 37 38 2d 31 2e 39 32 38 20 32 2e 34 37 20 32 2e 34 36 20 30 20 30 20 31 Data Ascii: .274-.204-.271-.062-.11a1.908 1.9 0 0 0-1.66-.969 1.868 1.86 0 0 0-.965.266 1.945 1.937 0 0 0-.701 2.553l.025.045a6.554 6.526 0 0 0 4.318 3.08 6.13 6.105 0 0 0 1.262.127 6.49 6.462 0 0 0 4.682-10.946L78.32 8.02a2.517 2.507 0 0 1-.678-1.928 2.47 2.46 0 0 1
2024-10-31 13:50:05 UTC	4344	IN	Data Raw: 2e 36 35 37 20 34 2e 31 39 20 30 20 32 2e 38 35 2d 31 2e 33 31 33 20 34 2e 32 37 37 2d 33 2e 39 33 38 20 34 2e 32 37 37 68 2d 31 2e 31 37 7a 6d 31 33 2e 33 32 36 20 30 68 2e 38 32 37 63 2e 38 38 20 30 20 31 2e 35 32 35 2e 31 33 33 20 31 2e 39 34 31 2e 33 39 33 2e 34 32 32 2e 32 36 2e 36 33 33 2e 36 39 37 2e 36 33 33 20 31 2e 33 31 34 20 30 20 2e 36 32 32 2d 2e 32 30 34 20 31 2e 30 38 31 2d 2e 36 31 35 20 31 2e 33 37 31 2d 2e 34 31 2e 32 39 31 2d 31 2e 30 34 36 2e 34 33 36 2d 31 2e 39 30 37 2e 34 33 36 68 2d 2e 38 37 39 7a 22 2f 3e 3c 2f 73 76 67 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 62 72 6f 77 73 65 72 2d 64 65 70 72 65 63 61 74 65 64 2d 69 6d 61 67 65 22 3e 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 30 30 20 33 Data Ascii: .657 4.19 0 2.85-1.313 4.277-3.938 4.277h-1.17zm13.326 0h.827c.88 0 1.525.133 1.941.393.422.26.633.697.633 1.314 0 .622-.204 1.081-.615 1.371-.41.291-1.046.436-1.907.436h-.879z"/></svg></div></div><div id="browser-deprecated-image"><svg viewBox="0 0 300 3
2024-10-31 13:50:05 UTC	341	IN	Data Raw: 2f 77 6c 2e 68 69 64 72 69 76 65 2e 63 6f 6d 2f 69 6f 6e 6f 73 2f 30 30 30 37 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 6e 61 76 65 67 61 64 6f 72 20 63 6f 6d 70 61 74 69 62 6c 65 3c 2f 61 3e 2e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 72 6f 77 73 65 72 2d 64 65 70 72 65 63 61 74 65 2d 6d 65 73 73 61 67 65 22 3e 4c 65 20 6e 61 76 69 67 61 74 65 75 72 20 71 75 65 20 76 6f 75 73 20 75 74 69 6c 69 73 65 7a 20 6e 27 65 73 74 20 70 6c 75 73 20 70 72 69 73 20 65 6e 20 63 68 61 72 67 65 2e 20 56 65 75 69 6c 6c 65 7a 20 75 74 69 6c 69 73 65 72 20 75 6e 20 6e 61 76 69 67 61 74 65 75 72 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 6c 2e 68 69 64 72 69 76 65 2e 63 6f 6d 2f 69 6f 6e Data Ascii: /wl.hidrive.com/ionos/0007" rel="noopener" target="_blank">navegador compatible</a>.</div><div class="browser-deprecate-message">Le navigateur que vous utilisez n'est plus pris en charge. Veuillez utiliser un navigateur <a href="https://wl.hidrive.com/ion

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:06 UTC	577	OUT	GET /lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:06 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:06 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:04 GMT ETag: "39f07-625864f347664" Accept-Ranges: bytes Content-Length: 237319 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.54:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:06 UTC	4032	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 68 64 73 68 61 72 65 2d 76 65 6e 64 6f 72 2e 65 38 37 63 37 65 66 30 37 35 63 36 66 63 36 38 61 37 32 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 36 5d 2c 7b 33 34 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 2e 64 28 65 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 31 38 3d 3d 6e 2e 6a 29 76 61 72 20 72 3d Data Ascii: /! For license information please see hdshare-vendor.e87c7ef075c6fc68a726.js.LICENSE.txt /(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[906],{3476:function(t,e,n){"use strict";if(n.d(e,{D:function(){return i}}),18==n.j)var r=
2024-10-31 13:50:06 UTC	5792	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 54 28 65 2e 74 61 72 67 65 74 29 2c 69 3d 28 30 2c 45 2e 44 29 28 65 2e 74 61 72 67 65 74 29 3b 72 2e 70 75 73 68 28 6e 29 2c 65 2e 6c 61 73 74 52 65 70 6f 72 74 65 64 53 69 7a 65 3d 77 28 65 2e 74 61 72 67 65 74 2c 65 2e 6f 62 73 65 72 76 65 64 42 6f 78 29 2c 69 3c 74 26 26 28 74 3d 69 29 7d 29 29 2c 65 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 6e 2e 6f 62 73 65 72 76 65 72 2c 72 2c 6e 2e 6f 62 73 65 72 76 65 72 29 7d 29 29 2c 6e 2e 61 63 74 69 76 65 54 61 72 67 65 74 73 2e 73 70 6c 69 63 65 28 30 2c 6e 2e 61 63 74 69 76 65 54 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 29 7d 7d 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 3b 6e 3c 72 2e 6c 65 6e Data Ascii: n(e){var n=new T(e.target),i=(0,E.D)(e.target);r.push(n),e.lastReportedSize=w(e.target,e.observedBox),i<t&&(t=i)})),e.push((function(){n.callback.call(n.observer,r,n.observer)})),n.activeTargets.splice(0,n.activeTargets.length)}}));for(var n=0,r=e;n<r.len
2024-10-31 13:50:06 UTC	7240	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 5b 73 5d 5b 74 5d 3d 21 30 7d 7d 2c 31 35 33 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 37 31 30 29 2e 63 68 61 72 41 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2b 28 6e 3f 72 28 74 2c 65 29 2e 6c 65 6e 67 74 68 3a 31 29 7d 7d 2c 35 37 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 39 37 36 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 72 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 69 28 22 49 6e 63 6f 72 72 65 63 74 20 Data Ascii: .exports=function(t){u[s][t]=!0}},1530:function(t,e,n){"use strict";var r=n(8710).charAt;t.exports=function(t,e,n){return e+(n?r(t,e).length:1)}},5787:function(t,e,n){var r=n(7976),i=TypeError;t.exports=function(t,e){if(r(e,t))return t;throw i("Incorrect
2024-10-31 13:50:06 UTC	8688	IN	Data Raw: 65 65 74 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 3a 30 2c 54 6f 75 63 68 4c 69 73 74 3a 30 7d 7d 2c 38 35 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 31 37 29 28 22 73 70 61 6e 22 29 2e 63 6c 61 73 73 4c 69 73 74 2c 69 3d 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 69 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3f 76 6f 69 64 20 30 3a 69 7d 2c 38 38 38 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5c 64 2b 29 2f 69 29 Data Ascii: eetList:0,TextTrackCueList:0,TextTrackList:0,TouchList:0}},8509:function(t,e,n){var r=n(317)("span").classList,i=r&&r.constructor&&r.constructor.prototype;t.exports=i===Object.prototype?void 0:i},8886:function(t,e,n){var r=n(8113).match(/firefox\/(\d+)/i)
2024-10-31 13:50:06 UTC	10136	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 72 28 74 29 7d 7d 2c 36 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 31 35 34 29 2c 69 3d 72 2e 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 72 2e 49 53 5f 48 54 4d 4c 44 44 41 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 74 3d 3d 3d 69 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 7d 2c 34 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 37 32 39 33 29 2c 6f 3d 6e 28 36 31 34 29 2c 73 3d 6e 28 36 34 38 29 2c 75 3d 6e 28 35 30 30 Data Ascii: nction(t){return"Array"==r(t)}},614:function(t,e,n){var r=n(4154),i=r.all;t.exports=r.IS_HTMLDDA?function(t){return"function"==typeof t\|\|t===i}:function(t){return"function"==typeof t}},4411:function(t,e,n){var r=n(1702),i=n(7293),o=n(614),s=n(648),u=n(500
2024-10-31 13:50:06 UTC	7240	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 6e 2e 70 72 6f 74 6f 74 79 70 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 66 3a 6e 75 6c 6c 7d 7d 2c 37 39 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 36 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 32 35 39 37 29 2c 6f 3d 6e 28 35 36 35 36 29 2c 73 3d 6e 28 31 33 31 38 29 2e 69 6e 64 65 78 4f 66 2c 75 3d 6e 28 33 35 30 31 29 2c 61 3d 72 28 5b 5d 2e 70 75 73 68 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 6f 28 74 29 2c 63 3d 30 2c 66 3d Data Ascii: instanceof n?n.prototype:e instanceof c?f:null}},7976:function(t,e,n){var r=n(1702);t.exports=r({}.isPrototypeOf)},6324:function(t,e,n){var r=n(1702),i=n(2597),o=n(5656),s=n(1318).indexOf,u=n(3501),a=r([].push);t.exports=function(t,e){var n,r=o(t),c=0,f=
2024-10-31 13:50:06 UTC	4344	IN	Data Raw: 65 72 20 69 6e 74 65 67 65 72 73 20 74 6f 20 70 72 6f 63 65 73 73 22 2c 61 3d 52 61 6e 67 65 45 72 72 6f 72 2c 63 3d 72 28 73 2e 65 78 65 63 29 2c 66 3d 4d 61 74 68 2e 66 6c 6f 6f 72 2c 6c 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 68 3d 72 28 22 22 2e 63 68 61 72 43 6f 64 65 41 74 29 2c 70 3d 72 28 5b 5d 2e 6a 6f 69 6e 29 2c 64 3d 72 28 5b 5d 2e 70 75 73 68 29 2c 76 3d 72 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 67 3d 72 28 22 22 2e 73 70 6c 69 74 29 2c 79 3d 72 28 22 22 2e 74 6f 4c 6f 77 65 72 43 61 73 65 29 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2b 32 32 2b 37 35 2a 28 74 3c 32 36 29 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 30 3b 66 6f 72 28 74 3d 6e 3f 66 28 74 2f 37 Data Ascii: er integers to process",a=RangeError,c=r(s.exec),f=Math.floor,l=String.fromCharCode,h=r("".charCodeAt),p=r([].join),d=r([].push),v=r("".replace),g=r("".split),y=r("".toLowerCase),m=function(t){return t+22+75*(t<26)},b=function(t,e,n){var r=0;for(t=n?f(t/7
2024-10-31 13:50:06 UTC	8688	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 79 6d 62 6f 6c 28 22 2b 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 74 29 2b 22 29 5f 22 2b 73 28 2b 2b 69 2b 6f 2c 33 36 29 7d 7d 2c 35 31 34 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 35 31 31 32 29 2c 6f 3d 6e 28 39 37 38 31 29 2c 73 3d 6e 28 31 39 31 33 29 2c 75 3d 69 28 22 69 74 65 72 61 74 6f 72 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 22 62 3f 61 3d 31 26 62 3d 32 26 63 3d 33 22 2c 22 68 74 74 70 3a 2f 2f 61 22 29 2c 65 3d 74 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2c 6e 3d 22 22 3b 72 65 74 75 72 6e 20 74 2e 70 61 Data Ascii: .exports=function(t){return"Symbol("+(void 0===t?"":t)+")_"+s(++i+o,36)}},5143:function(t,e,n){var r=n(7293),i=n(5112),o=n(9781),s=n(1913),u=i("iterator");t.exports=!r((function(){var t=new URL("b?a=1&b=2&c=3","http://a"),e=t.searchParams,n="";return t.pa
2024-10-31 13:50:06 UTC	15928	IN	Data Raw: 3b 29 72 2b 3d 74 5b 6e 5d 2c 74 5b 6e 5d 3d 6c 28 72 2f 65 29 2c 72 3d 72 25 65 2a 31 65 37 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 36 2c 6e 3d 22 22 3b 2d 2d 65 3e 3d 30 3b 29 69 66 28 22 22 21 3d 3d 6e 7c 7c 30 3d 3d 3d 65 7c 7c 30 21 3d 3d 74 5b 65 5d 29 7b 76 61 72 20 72 3d 66 28 74 5b 65 5d 29 3b 6e 3d 22 22 3d 3d 3d 6e 3f 72 3a 6e 2b 68 28 22 30 22 2c 37 2d 72 2e 6c 65 6e 67 74 68 29 2b 72 7d 72 65 74 75 72 6e 20 6e 7d 3b 72 28 7b 74 61 72 67 65 74 3a 22 4e 75 6d 62 65 72 22 2c 70 72 6f 74 6f 3a 21 30 2c 66 6f 72 63 65 64 3a 61 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 30 2e 30 30 30 22 21 3d 3d 64 28 38 65 2d 35 2c 33 29 7c 7c 22 31 22 21 3d 3d 64 28 2e 39 2c 30 29 7c 7c 22 31 2e 32 35 22 21 Data Ascii: ;)r+=t[n],t[n]=l(r/e),r=r%e*1e7},m=function(t){for(var e=6,n="";--e>=0;)if(""!==n\|\|0===e\|\|0!==t[e]){var r=f(t[e]);n=""===n?r:n+h("0",7-r.length)+r}return n};r({target:"Number",proto:!0,forced:a((function(){return"0.000"!==d(8e-5,3)\|\|"1"!==d(.9,0)\|\|"1.25"!
2024-10-31 13:50:07 UTC	11584	IN	Data Raw: 2c 50 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 29 72 65 74 75 72 6e 20 69 5b 74 5d 3b 76 61 72 20 65 3d 50 28 69 2c 74 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 76 61 6c 75 65 7d 2c 4d 3d 44 28 22 66 65 74 63 68 22 29 2c 48 3d 44 28 22 52 65 71 75 65 73 74 22 29 2c 46 3d 44 28 22 48 65 61 64 65 72 73 22 29 2c 71 3d 48 26 26 48 2e 70 72 6f 74 6f 74 79 70 65 2c 42 3d 46 26 26 46 2e 70 72 6f 74 6f 74 79 70 65 2c 55 3d 69 2e 52 65 67 45 78 70 2c 7a 3d 69 2e 54 79 70 65 45 72 72 6f 72 2c 57 3d 69 2e 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 56 3d 69 2e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 58 3d 73 28 22 22 2e 63 Data Ascii: ,P=Object.getOwnPropertyDescriptor,D=function(t){if(!u)return i[t];var e=P(i,t);return e&&e.value},M=D("fetch"),H=D("Request"),F=D("Headers"),q=H&&H.prototype,B=F&&F.prototype,U=i.RegExp,z=i.TypeError,W=i.decodeURIComponent,V=i.encodeURIComponent,X=s("".c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:07 UTC	582	OUT	GET /css/hdshare.98ea110adcfb01d9ea58.css HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:07 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:07 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "458e6-625864f364fa5" Accept-Ranges: bytes Content-Length: 284902 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/css X-STG-FE: 10.4.1.47:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:07 UTC	4039	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 67 61 70 2d 78 73 3a 38 70 78 3b 2d 2d 67 61 70 2d 73 3a 31 32 70 78 3b 2d 2d 67 61 70 2d 6d 3a 31 36 70 78 3b 2d 2d 67 61 70 2d 6c 3a 32 34 70 78 3b 2d 2d 67 61 70 2d 78 6c 3a 33 32 70 78 3b 2d 2d 67 61 70 2d 78 78 6c 3a 34 38 70 78 7d 40 6b 65 79 66 72 61 6d 65 73 20 68 64 66 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 62 6f 64 79 7b 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 Data Ascii: :root{--gap-xs:8px;--gap-s:12px;--gap-m:16px;--gap-l:24px;--gap-xl:32px;--gap-xxl:48px}@keyframes hdf-spin{0%{transform:rotate(0deg)}to{transform:rotate(359deg)}}body{tap-highlight-color:transparent;-webkit-tap-highlight-color:rgba(0,0,0,0);-webkit-text-s
2024-10-31 13:50:07 UTC	1448	IN	Data Raw: 61 6c 74 65 72 6e 61 74 69 76 65 2d 61 63 74 69 76 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 62 75 74 74 6f 6e 2d 61 6c 74 65 72 6e 61 74 69 76 65 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 75 74 74 6f 6e 2d 61 6c 74 65 72 6e 61 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 62 75 74 74 6f 6e 2d 61 6c 74 65 72 6e 61 74 69 76 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 75 74 74 6f 6e 2d 61 6c 74 65 72 6e 61 74 69 76 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 62 75 74 74 6f 6e 2d 61 6c 74 65 72 6e 61 74 69 76 65 2d 64 69 73 61 62 6c 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e Data Ascii: alternative-active-border-color:transparent;--button-alternative-active-color:#fff;--button-alternative-background-color:transparent;--button-alternative-border-color:#fff;--button-alternative-color:#fff;--button-alternative-disabled-background-color:tran
2024-10-31 13:50:07 UTC	4344	IN	Data Raw: 74 3b 2d 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 64 69 73 61 62 6c 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 62 33 62 36 62 38 3b 2d 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 3a 23 62 33 62 36 62 38 3b 2d 2d 62 75 74 74 6f 6e 2d 70 72 69 6d 61 72 79 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 3a 31 3b 2d 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 36 37 34 62 32 3b 2d 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 36 37 34 62 32 3b 2d 2d 62 75 74 74 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 Data Ascii: t;--button-secondary-disabled-border-color:#b3b6b8;--button-secondary-disabled-color:#b3b6b8;--button-primary-disabled-opacity:1;--button-secondary-hover-background-color:#0674b2;--button-secondary-hover-border-color:#0674b2;--button-secondary-hover-color
2024-10-31 13:50:07 UTC	2896	IN	Data Raw: 74 2d 69 6e 64 69 63 61 74 6f 72 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 35 29 3b 2d 2d 66 6d 2d 73 6f 72 74 2d 66 6c 79 6f 75 74 2d 73 6f 72 74 2d 69 6e 64 69 63 61 74 6f 72 2d 6e 65 78 74 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 66 6d 2d 73 6f 72 74 2d 66 6c 79 6f 75 74 2d 73 6f 72 74 2d 69 6e 64 69 63 61 74 6f 72 2d 73 65 6c 65 63 74 65 64 2d 63 75 72 72 65 6e 74 2d 63 6f 6c 6f 72 3a 23 31 31 63 37 65 36 3b 2d 2d 66 6d 2d 73 6f 72 74 2d 66 6c 79 6f 75 74 2d 73 6f 72 74 2d 69 6e 64 69 63 61 74 6f 72 2d 73 65 6c 65 63 74 65 64 2d 6e 65 78 74 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 2d 2d 66 6d 2d 74 6f 6f 6c 62 61 72 2d 69 74 65 6d 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c Data Ascii: t-indicator-hover-color:hsla(0,0%,100%,.5);--fm-sort-flyout-sort-indicator-next-hover-color:#fff;--fm-sort-flyout-sort-indicator-selected-current-color:#11c7e6;--fm-sort-flyout-sort-indicator-selected-next-color:#999;--fm-toolbar-item-active-color:var(--l
2024-10-31 13:50:07 UTC	5792	IN	Data Raw: 68 61 72 65 2d 6c 6f 61 64 69 6e 67 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6c 6f 61 64 69 6e 67 2d 69 63 6f 6e 2d 63 6f 6c 6f 72 29 3b 2d 2d 69 63 6f 6e 2d 63 68 65 63 6b 65 64 2d 63 6f 6c 6f 72 3a 23 32 32 63 36 34 36 3b 2d 2d 69 63 6f 6e 2d 64 65 66 61 75 6c 74 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 2d 2d 69 63 6f 6e 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 31 31 63 37 65 36 3b 2d 2d 69 63 6f 6e 2d 6d 75 74 65 64 2d 63 6f 6c 6f 72 3a 23 64 36 64 36 64 36 3b 2d 2d 69 63 6f 6e 2d 72 61 64 69 6f 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 2d 2d 69 63 6f 6e 2d 72 61 64 69 6f 2d 73 65 6c 65 63 74 65 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 64 38 66 3b 2d 2d 69 63 6f 6e 2d 73 65 61 72 63 68 2d 63 6c 65 61 72 2d 69 6e 70 75 74 2d 63 6f 6c 6f 72 3a Data Ascii: hare-loading-icon-color:var(--loading-icon-color);--icon-checked-color:#22c646;--icon-default-color:#999;--icon-highlight-color:#11c7e6;--icon-muted-color:#d6d6d6;--icon-radio-color:#999;--icon-radio-selected-color:#003d8f;--icon-search-clear-input-color:
2024-10-31 13:50:07 UTC	4344	IN	Data Raw: 6f 77 6e 2d 63 6f 6c 6f 72 3a 23 35 35 35 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 61 72 65 74 2d 64 6f 77 6e 2d 73 65 6c 65 63 74 65 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 68 65 63 6b 62 6f 78 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 68 65 63 6b 62 6f 78 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 31 63 37 65 36 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 2d 2d 73 65 61 72 63 68 2d 6d 65 6e 75 2d 63 68 65 63 6b 62 6f 78 2d 68 6f 76 65 72 2d 63 Data Ascii: own-color:#555;--search-menu-caret-down-selected-color:#fff;--search-menu-checkbox-active-color:#fff;--search-menu-checkbox-background-color:#11c7e6;--search-menu-checkbox-checked-color:#fff;--search-menu-checkbox-color:#ddd;--search-menu-checkbox-hover-c
2024-10-31 13:50:07 UTC	11584	IN	Data Raw: 67 2d 65 64 69 74 6f 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 6f 64 79 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 2d 2d 74 61 67 2d 66 6f 63 75 73 73 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 36 63 36 63 36 3b 2d 2d 74 61 67 2d 66 6f 63 75 73 73 65 64 2d 72 65 6d 6f 76 65 2d 63 6f 6c 6f 72 3a 23 39 39 39 3b 2d 2d 74 61 67 2d 66 6f 63 75 73 73 65 64 2d 72 65 6d 6f 76 65 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 32 38 63 63 65 38 3b 2d 2d 74 61 67 2d 68 6f 76 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 3b 2d 2d 74 61 67 2d 68 6f 76 65 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 61 67 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 2d 2d 74 61 67 2d 72 65 6d 6f 76 65 2d 63 6f 6c 6f 72 3a 23 39 39 39 Data Ascii: g-editor-color:var(--body-text-color);--tag-focussed-background-color:#c6c6c6;--tag-focussed-remove-color:#999;--tag-focussed-remove-hover-color:#28cce8;--tag-hover-background-color:#ddd;--tag-hover-text-color:var(--tag-text-color);--tag-remove-color:#999
2024-10-31 13:50:07 UTC	1448	IN	Data Raw: 65 2c 2e 69 63 6f 6e 2d 75 73 65 72 2d 73 65 63 72 65 74 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 75 73 65 72 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 75 73 65 72 73 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 62 75 73 79 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 2d 62 69 67 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 69 65 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 69 65 77 2d 6c 69 73 74 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 69 65 77 2d 74 69 6c 65 73 3a 62 65 66 6f 72 65 2c 2e 69 63 6f 6e 2d 76 69 65 77 3a 62 65 66 6f 72 65 2c 2e Data Ascii: e,.icon-user-secret:before,.icon-user:before,.icon-users-warning:before,.icon-validation-busy:before,.icon-validation-error-big:before,.icon-validation-error:before,.icon-view-fluid:before,.icon-view-list:before,.icon-view-tiles:before,.icon-view:before,.
2024-10-31 13:50:07 UTC	11584	IN	Data Raw: 69 67 6e 3a 2e 30 35 33 35 37 31 34 32 39 35 65 6d 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 30 37 35 65 6d 7d 2e 66 61 2d 78 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 34 31 36 36 36 36 36 38 32 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 32 35 65 6d 7d 2e 66 61 2d 32 78 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 30 33 31 32 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 2e 31 38 37 35 65 6d 7d 2e 66 61 2d 66 77 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 31 2e Data Ascii: ign:.0535714295em}.fa-lg{font-size:1.25em;line-height:.05em;vertical-align:-.075em}.fa-xl{font-size:1.5em;line-height:.0416666682em;vertical-align:-.125em}.fa-2xl{font-size:2em;line-height:.03125em;vertical-align:-.1875em}.fa-fw{text-align:center;width:1.
2024-10-31 13:50:07 UTC	4344	IN	Data Raw: 74 3a 22 ef a2 86 22 7d 2e 66 61 2d 66 61 63 65 2d 67 72 69 6e 2d 74 6f 6e 67 75 65 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 72 69 6e 2d 74 6f 6e 67 75 65 2d 73 71 75 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 96 8a 22 7d 2e 66 61 2d 73 70 72 61 79 2d 63 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 96 bd 22 7d 2e 66 61 2d 74 72 75 63 6b 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 98 bb 22 7d 2e 66 61 2d 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 57 22 7d 2e 66 61 2d 65 61 72 74 68 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 67 6c 6f 62 65 2d 61 66 72 69 63 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 ef 95 bc 22 7d 2e 66 61 2d 72 61 69 Data Ascii: t:""}.fa-face-grin-tongue-squint:before,.fa-grin-tongue-squint:before{content:""}.fa-spray-can:before{content:""}.fa-truck-monster:before{content:""}.fa-w:before{content:"W"}.fa-earth-africa:before,.fa-globe-africa:before{content:""}.fa-rai

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:07 UTC	572	OUT	GET /lnk/js/bootstrap.556f531165a982e55ac1.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:07 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:07 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:04 GMT ETag: "b6a-625864f3406d3" Accept-Ranges: bytes Content-Length: 2922 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.52:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:07 UTC	2922	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 3d 7b 38 38 39 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 28 37 36 30 31 29 2c 6f 28 34 39 31 36 29 3b 77 69 6e 64 6f 77 2e 42 6f 6f 74 73 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 3b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 77 69 6e 64 6f 77 73 22 29 2c 6f 3d 28 29 3d 3e 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 22 29 3b 74 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 3d 7b 69 73 53 61 66 61 72 69 3a 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 73 61 66 61 72 69 Data Ascii: !function(){"use strict";var t,e={8892:function(t,e,o){o(7601),o(4916);window.Bootstrap=function(t){t="string"==typeof t?t.toLowerCase():"";const e=()=>-1!==t.indexOf("windows"),o=()=>-1!==t.indexOf("chrom");this.navigator={isSafari:-1!==t.indexOf("safari

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49740	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:07 UTC	577	OUT	GET /lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:07 UTC	401	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:07 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "ac1d-625864f3ae14a" Accept-Ranges: bytes Content-Length: 44061 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.50:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:07 UTC	4034	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 39 36 34 3a 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 30 20 34 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 34 30 20 34 38 30 63 31 33 32 2e 35 34 38 20 30 20 32 34 30 2d 31 30 37 2e 34 35 32 20 32 34 30 2d 32 34 30 53 33 37 32 2e 35 34 38 20 30 20 32 34 30 20 30 20 Data Ascii: "use strict";(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[5],{964:function(l){l.exports='<svg viewBox="0 0 480 480" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M240 480c132.548 0 240-107.452 240-240S372.548 0 240 0
2024-10-31 13:50:07 UTC	5792	IN	Data Raw: 37 2e 36 37 39 20 31 38 2e 34 30 31 63 30 20 34 2e 37 33 33 2d 31 2e 32 30 37 20 39 2e 30 37 39 2d 33 2e 36 32 32 20 31 33 2e 30 33 39 2d 32 2e 33 31 38 20 33 2e 39 36 31 2d 35 2e 34 35 38 20 37 2e 31 34 38 2d 39 2e 34 31 38 20 39 2e 35 36 33 2d 33 2e 38 36 33 20 32 2e 33 31 38 2d 38 2e 32 31 20 33 2e 34 37 37 2d 31 33 2e 30 34 20 33 2e 34 37 37 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e 5c 6e 27 7d 2c 38 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 34 Data Ascii: 7.679 18.401c0 4.733-1.207 9.079-3.622 13.039-2.318 3.961-5.458 7.148-9.418 9.563-3.863 2.318-8.21 3.477-13.04 3.477Z" fill="#fff"/></svg>\n'},8646:function(l){l.exports='<svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="m34
2024-10-31 13:50:07 UTC	7240	IN	Data Raw: 2e 35 37 37 2e 31 39 2e 35 37 37 2e 34 33 35 76 34 2e 31 39 63 30 20 2e 32 36 35 2d 2e 30 31 32 2e 32 36 36 2d 2e 35 38 37 2e 33 33 36 2d 2e 31 31 2e 30 31 33 2d 2e 32 34 2e 30 32 39 2d 2e 33 39 35 2e 30 35 5a 6d 2e 35 37 32 2d 38 2e 37 32 33 63 30 20 2e 38 31 33 2e 34 38 34 20 31 2e 32 38 34 20 31 2e 33 32 20 31 2e 32 38 34 2e 38 35 20 30 20 31 2e 33 33 33 2d 2e 34 37 32 20 31 2e 33 33 33 2d 31 2e 32 38 34 20 30 2d 2e 38 31 31 2d 2e 34 38 34 2d 31 2e 32 35 33 2d 31 2e 33 33 34 2d 31 2e 32 35 33 2d 2e 38 33 35 20 30 2d 31 2e 33 32 2e 34 34 2d 31 2e 33 32 20 31 2e 32 35 34 5a 6d 37 2e 30 31 33 20 39 2e 38 36 36 63 2e 38 33 36 20 30 20 31 2e 37 36 2d 2e 32 37 20 32 2e 33 39 2d 2e 35 37 6c 2d 2e 33 39 36 2d 31 2e 32 35 34 63 2d 32 2e 32 33 37 2e 38 31 36 2d Data Ascii: .577.19.577.435v4.19c0 .265-.012.266-.587.336-.11.013-.24.029-.395.05Zm.572-8.723c0 .813.484 1.284 1.32 1.284.85 0 1.333-.472 1.333-1.284 0-.811-.484-1.253-1.334-1.253-.835 0-1.32.44-1.32 1.254Zm7.013 9.866c.836 0 1.76-.27 2.39-.57l-.396-1.254c-2.237.816-
2024-10-31 13:50:07 UTC	8688	IN	Data Raw: 33 34 5a 6d 2d 36 2e 32 39 20 31 2e 31 33 32 68 2d 38 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 2d 31 2e 32 33 20 32 2e 39 33 6c 32 2e 33 31 34 20 32 2e 33 35 2d 31 33 2e 39 37 20 31 33 2e 39 30 38 61 2e 38 35 2e 38 35 20 30 20 30 20 30 20 30 20 31 2e 32 33 4c 31 31 2e 30 34 20 33 31 2e 32 61 2e 38 35 2e 38 35 20 30 20 30 20 30 20 31 2e 32 33 20 30 6c 31 33 2e 39 34 35 2d 31 33 2e 39 39 34 20 32 2e 32 39 20 32 2e 32 39 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 20 32 2e 39 32 39 2d 31 2e 32 33 31 76 2d 38 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 2d 31 2e 37 32 33 2d 31 2e 36 39 39 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2f 3e 3c 2f 73 76 67 3e 27 7d 2c 36 37 30 31 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 34Zm-6.29 1.132h-8a1.723 1.723 0 0 0-1.23 2.93l2.314 2.35-13.97 13.908a.85.85 0 0 0 0 1.23L11.04 31.2a.85.85 0 0 0 1.23 0l13.945-13.994 2.29 2.29a1.723 1.723 0 0 0 2.929-1.231v-8a1.723 1.723 0 0 0-1.723-1.699Z" fill="currentColor"/></svg>'},6701:function(
2024-10-31 13:50:07 UTC	1448	IN	Data Raw: 32 32 2e 38 33 39 6c 2d 2e 30 33 32 2d 2e 30 38 34 2d 2e 30 38 38 2d 2e 30 32 35 63 2d 35 2e 31 30 33 2d 31 2e 34 34 36 2d 39 2e 35 33 20 32 2e 38 39 32 2d 39 2e 35 37 34 20 32 2e 39 33 35 6c 2d 2e 30 36 31 2e 30 36 35 20 31 2e 34 34 36 20 31 31 2e 39 39 2d 36 2e 32 32 34 20 34 33 2e 36 30 35 20 31 38 2e 38 37 20 37 2e 32 37 39 5a 22 20 66 69 6c 6c 3d 22 23 36 42 38 38 44 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 35 38 38 20 31 38 31 2e 38 37 63 2d 34 2e 36 30 36 20 30 2d 38 2e 33 33 39 2d 34 2e 30 38 39 2d 38 2e 33 33 39 2d 39 2e 31 33 33 20 30 2d 35 2e 30 34 34 20 33 2e 37 33 33 2d 39 2e 31 33 33 20 38 2e 33 34 2d 39 2e 31 33 33 20 34 2e 36 30 35 20 30 20 38 2e 33 33 38 20 34 2e 30 38 39 20 38 2e 33 33 38 20 39 2e 31 33 33 20 30 20 35 2e 30 34 Data Ascii: 22.839l-.032-.084-.088-.025c-5.103-1.446-9.53 2.892-9.574 2.935l-.061.065 1.446 11.99-6.224 43.605 18.87 7.279Z" fill="#6B88D5"/><path d="M53.588 181.87c-4.606 0-8.339-4.089-8.339-9.133 0-5.044 3.733-9.133 8.34-9.133 4.605 0 8.338 4.089 8.338 9.133 0 5.04
2024-10-31 13:50:07 UTC	2896	IN	Data Raw: 38 2e 39 37 35 20 33 34 2e 34 38 32 20 33 34 2e 34 38 32 20 30 20 30 20 31 2d 31 2e 38 34 2d 32 2e 33 37 31 20 33 36 2e 35 36 20 33 36 2e 35 36 20 30 20 30 20 30 20 34 39 2e 34 39 33 20 32 2e 31 35 34 5a 22 20 66 69 6c 6c 3d 22 23 30 30 30 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 34 39 2e 34 32 20 32 32 30 2e 39 39 32 61 33 2e 36 33 39 20 33 2e 36 33 39 20 30 20 30 20 31 2d 34 2e 34 38 38 2d 33 2e 33 30 34 6c 2d 31 32 2e 34 34 39 2d 33 2e 34 35 32 20 35 2e 30 36 2d 34 2e 34 31 34 20 31 31 2e 30 34 33 20 33 2e 39 35 39 61 33 2e 36 35 32 20 33 2e 36 35 32 20 30 20 30 20 31 20 33 2e 30 34 36 20 35 2e 37 38 38 20 33 2e 36 35 33 20 33 2e 36 35 33 20 30 20 30 20 31 2d 32 2e 32 31 32 20 31 2e 34 34 31 76 2d 2e 30 31 38 5a 22 20 66 69 6c 6c 3d 22 23 46 37 43 34 41 Data Ascii: 8.975 34.482 34.482 0 0 1-1.84-2.371 36.56 36.56 0 0 0 49.493 2.154Z" fill="#000"/><path d="M49.42 220.992a3.639 3.639 0 0 1-4.488-3.304l-12.449-3.452 5.06-4.414 11.043 3.959a3.652 3.652 0 0 1 3.046 5.788 3.653 3.653 0 0 1-2.212 1.441v-.018Z" fill="#F7C4A
2024-10-31 13:50:08 UTC	8688	IN	Data Raw: 2e 33 39 2e 36 39 38 20 31 2e 38 39 32 20 31 2e 32 38 37 73 2e 38 33 35 20 31 2e 33 30 31 2e 39 36 34 20 32 2e 30 36 31 63 2e 31 32 38 2e 37 36 2e 30 34 38 20 31 2e 35 34 31 2d 2e 32 33 34 20 32 2e 32 36 61 34 2e 33 20 34 2e 33 20 30 20 30 20 31 2d 31 2e 33 36 36 20 31 2e 38 32 36 20 34 2e 33 37 36 20 34 2e 33 37 36 20 30 20 30 20 31 2d 35 2e 30 33 31 2e 32 33 34 6c 2d 35 2e 35 39 35 2d 33 2e 35 36 32 2d 31 39 2e 31 30 34 2d 31 39 2e 32 31 34 2d 32 2e 39 36 2d 32 32 2e 35 38 34 61 31 37 2e 30 32 39 20 31 37 2e 30 32 39 20 30 20 30 20 31 20 31 2e 30 35 38 2d 38 2e 35 20 31 37 2e 32 30 35 20 31 37 2e 32 30 35 20 30 20 30 20 31 20 35 2e 30 37 32 2d 36 2e 39 34 31 6c 36 2e 32 33 20 33 34 2e 34 30 32 20 31 32 2e 39 33 35 20 31 36 2e 36 32 5a 4d 34 37 2e 33 34 Data Ascii: .39.698 1.892 1.287s.835 1.301.964 2.061c.128.76.048 1.541-.234 2.26a4.3 4.3 0 0 1-1.366 1.826 4.376 4.376 0 0 1-5.031.234l-5.595-3.562-19.104-19.214-2.96-22.584a17.029 17.029 0 0 1 1.058-8.5 17.205 17.205 0 0 1 5.072-6.941l6.23 34.402 12.935 16.62ZM47.34
2024-10-31 13:50:08 UTC	1448	IN	Data Raw: 36 2d 2e 37 32 35 2d 31 2e 35 30 35 2d 2e 37 32 35 2d 32 2e 35 34 20 30 2d 31 2e 30 33 35 2e 32 37 35 2d 31 2e 39 34 2e 38 33 2d 32 2e 36 32 2e 35 35 2d 2e 36 38 20 31 2e 32 39 2d 31 2e 30 32 20 32 2e 32 31 2d 31 2e 30 32 2e 34 36 35 20 30 20 2e 38 38 2e 30 38 20 31 2e 32 34 35 2e 32 34 2e 35 37 2e 32 36 20 31 2e 30 31 2e 36 39 20 31 2e 33 31 20 31 2e 32 39 35 2e 32 36 2e 35 32 2e 34 20 31 2e 33 32 35 2e 34 32 35 20 32 2e 34 31 35 7a 6d 2d 31 2e 32 31 2d 2e 39 63 2d 2e 30 33 35 2d 2e 34 39 35 2d 2e 31 33 2d 2e 39 2d 2e 32 39 35 2d 31 2e 32 32 35 2d 2e 33 2d 2e 36 32 2d 2e 37 38 35 2d 2e 39 33 2d 31 2e 34 35 35 2d 2e 39 33 2d 2e 32 39 20 30 2d 2e 35 34 35 2e 30 36 2d 2e 37 37 2e 31 37 35 2d 2e 35 39 2e 33 31 2d 2e 39 34 35 2e 39 37 2d 31 2e 30 37 20 31 2e Data Ascii: 6-.725-1.505-.725-2.54 0-1.035.275-1.94.83-2.62.55-.68 1.29-1.02 2.21-1.02.465 0 .88.08 1.245.24.57.26 1.01.69 1.31 1.295.26.52.4 1.325.425 2.415zm-1.21-.9c-.035-.495-.13-.9-.295-1.225-.3-.62-.785-.93-1.455-.93-.29 0-.545.06-.77.175-.59.31-.945.97-1.07 1.
2024-10-31 13:50:08 UTC	2896	IN	Data Raw: 37 35 20 31 2e 31 38 35 2d 31 2e 30 31 20 32 2e 30 36 2d 31 2e 30 31 73 31 2e 35 37 2e 33 32 35 20 32 2e 31 31 35 2e 39 37 35 63 2e 35 34 35 2e 36 34 35 2e 38 32 20 31 2e 35 33 2e 38 32 20 32 2e 36 35 20 30 20 31 2e 31 32 2d 2e 32 38 35 20 32 2e 30 37 35 2d 2e 38 35 35 20 32 2e 37 35 35 2d 2e 35 33 35 2e 36 33 2d 31 2e 32 33 35 2e 39 34 35 2d 32 2e 31 31 2e 39 34 35 2d 2e 33 35 20 30 2d 2e 36 37 2d 2e 30 35 35 2d 2e 39 37 35 2d 2e 31 37 2d 2e 34 32 35 2d 2e 31 34 35 2d 2e 37 38 2d 2e 34 34 2d 31 2e 30 37 2d 2e 38 38 76 2e 38 33 35 7a 6d 33 2e 30 37 2d 36 2e 32 31 63 2d 2e 32 36 35 20 30 2d 2e 35 31 2e 30 35 35 2d 2e 37 34 2e 31 37 2d 2e 38 31 2e 33 38 35 2d 31 2e 32 31 35 20 31 2e 32 33 35 2d 31 2e 32 31 35 20 32 2e 35 35 20 30 20 2e 34 33 2e 30 34 2e 38 Data Ascii: 75 1.185-1.01 2.06-1.01s1.57.325 2.115.975c.545.645.82 1.53.82 2.65 0 1.12-.285 2.075-.855 2.755-.535.63-1.235.945-2.11.945-.35 0-.67-.055-.975-.17-.425-.145-.78-.44-1.07-.88v.835zm3.07-6.21c-.265 0-.51.055-.74.17-.81.385-1.215 1.235-1.215 2.55 0 .43.04.8
2024-10-31 13:50:08 UTC	931	IN	Data Raw: 37 76 31 38 2e 31 35 61 31 2e 39 30 31 20 31 2e 38 39 33 20 30 20 30 20 30 20 33 2e 38 30 33 20 30 56 31 32 2e 38 32 32 5a 4d 31 30 31 20 37 76 31 33 68 32 2e 37 32 35 76 2d 35 2e 36 31 68 35 2e 30 39 56 32 30 68 32 2e 37 31 35 56 37 68 2d 32 2e 37 31 35 76 35 2e 30 39 36 68 2d 35 2e 30 39 56 37 5a 6d 31 33 2e 37 37 34 20 30 76 31 33 68 32 2e 37 32 34 56 37 5a 6d 35 2e 39 35 39 20 30 76 31 33 68 33 2e 36 33 38 63 32 2e 32 37 34 20 30 20 34 2e 30 31 32 2d 2e 35 36 39 20 35 2e 32 31 33 2d 31 2e 37 30 37 20 31 2e 32 30 37 2d 31 2e 31 33 38 20 31 2e 38 31 2d 32 2e 37 37 38 20 31 2e 38 31 2d 34 2e 39 31 38 20 30 2d 32 2e 30 31 2d 2e 35 38 2d 33 2e 35 37 35 2d 31 2e 37 34 2d 34 2e 36 39 35 2d 31 2e 31 36 2d 31 2e 31 32 2d 32 2e 37 39 2d 31 2e 36 38 2d 34 2e 38 Data Ascii: 7v18.15a1.901 1.893 0 0 0 3.803 0V12.822ZM101 7v13h2.725v-5.61h5.09V20h2.715V7h-2.715v5.096h-5.09V7Zm13.774 0v13h2.724V7Zm5.959 0v13h3.638c2.274 0 4.012-.569 5.213-1.707 1.207-1.138 1.81-2.778 1.81-4.918 0-2.01-.58-3.575-1.74-4.695-1.16-1.12-2.79-1.68-4.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:07 UTC	570	OUT	GET /lnk/js/hdshare.d10440b3317db342388a.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:07 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:07 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "6bec9-625864f3b69ea" Accept-Ranges: bytes Content-Length: 442057 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.71:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:07 UTC	4032	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 33 39 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 36 33 33 37 29 3b 76 61 72 20 72 3d 69 28 34 34 35 39 29 3b 77 69 6e 64 6f 77 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 3d 72 2e 64 6f 29 2c 76 6f 69 64 20 30 3d 3d 3d 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 26 26 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 74 68 69 73 2e 6c 61 73 74 43 68 69 6c 64 3b 29 74 68 69 73 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 Data Ascii: !function(){var e,t={3998:function(e,t,i){"use strict";i(6337);var r=i(4459);window.ResizeObserver\|\|(window.ResizeObserver=r.do),void 0===Node.prototype.replaceChildren&&(Node.prototype.replaceChildren=function(e){for(;this.lastChild;)this.removeChild(thi
2024-10-31 13:50:07 UTC	5792	IN	Data Raw: 2e 65 78 74 65 6e 64 3b 76 61 72 20 66 3d 6d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 76 61 72 20 79 3d 66 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d Data Ascii: .extend;var f=m;function b(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}var y=f.extend({initialize(){this.config=function(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?argum
2024-10-31 13:50:07 UTC	4344	IN	Data Raw: 66 28 72 3d 7b 74 79 70 65 3a 52 5b 65 5d 2c 64 61 74 61 54 79 70 65 3a 22 6a 73 6f 6e 22 7d 2c 21 69 2e 75 72 6c 26 26 28 72 2e 75 72 6c 3d 63 28 29 2e 72 65 73 75 6c 74 28 74 68 69 73 2c 22 75 72 6c 22 29 2c 21 72 2e 75 72 6c 29 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4e 6f 20 27 75 72 6c 27 20 61 74 74 72 69 62 75 74 65 20 6f 72 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 63 28 29 2e 63 6f 6e 74 61 69 6e 73 28 5b 22 63 72 65 61 74 65 22 2c 22 75 70 64 61 74 65 22 2c 22 70 61 74 63 68 22 5d 2c 65 29 26 26 28 72 2e 63 6f 6e 74 65 6e 74 54 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 72 2e 64 61 74 61 3d 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 2e 61 74 74 72 73 7c Data Ascii: f(r={type:R[e],dataType:"json"},!i.url&&(r.url=c().result(this,"url"),!r.url))throw new Error("No 'url' attribute or function defined");return t&&c().contains(["create","update","patch"],e)&&(r.contentType="application/json",r.data=JSON.stringify(i.attrs\|
2024-10-31 13:50:07 UTC	2896	IN	Data Raw: 2f 22 2c 22 66 69 6c 65 2e 73 69 7a 65 22 3a 22 47 72 c3 b6 c3 9f 65 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 42 79 74 65 73 22 3a 22 42 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 47 42 22 3a 22 47 42 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 4b 42 22 3a 22 4b 42 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 4d 42 22 3a 22 4d 42 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 50 42 22 3a 22 50 42 22 2c 22 66 69 6c 65 2e 73 69 7a 65 2e 75 6e 69 74 2e 54 42 22 3a 22 54 42 22 2c 22 66 69 6c 65 2e 74 79 70 65 22 3a 22 54 79 70 22 2c 22 66 69 6c 65 2e 74 79 70 65 2e 64 69 72 22 3a 22 4f 72 64 6e 65 72 22 2c 22 66 69 6c 65 2e 74 79 70 65 2e 66 69 6c 65 69 74 65 6d 22 3a 22 44 61 74 65 69 22 2c 22 66 69 6c 65 2e Data Ascii: /","file.size":"Gre","file.size.unit.Bytes":"B","file.size.unit.GB":"GB","file.size.unit.KB":"KB","file.size.unit.MB":"MB","file.size.unit.PB":"PB","file.size.unit.TB":"TB","file.type":"Typ","file.type.dir":"Ordner","file.type.fileitem":"Datei","file.
2024-10-31 13:50:07 UTC	10136	IN	Data Raw: 22 3a 22 2e 22 2c 22 68 65 61 64 65 72 2e 6c 6f 67 6f 75 74 22 3a 22 41 62 6d 65 6c 64 65 6e 22 2c 22 69 6d 70 72 69 6e 74 2e 74 69 74 6c 65 22 3a 22 49 6d 70 72 65 73 73 75 6d 22 2c 22 69 6d 70 72 69 6e 74 2e 75 72 6c 22 3a 22 22 2c 22 6a 73 2e 61 63 74 69 76 61 74 65 22 3a 22 41 6b 74 69 76 69 65 72 65 6e 20 53 69 65 20 62 69 74 74 65 20 4a 61 76 61 53 63 72 69 70 74 2c 20 75 6d 20 48 69 44 72 69 76 65 20 69 6d 20 57 65 62 62 72 6f 77 73 65 72 20 62 65 6e 75 74 7a 65 6e 20 7a 75 20 6b c3 b6 6e 6e 65 6e 2e 22 2c 22 6a 73 2e 64 65 70 72 65 63 61 74 65 2e 6d 65 73 73 61 67 65 22 3a 22 49 68 72 20 76 65 72 77 65 6e 64 65 74 65 72 20 42 72 6f 77 73 65 72 20 77 69 72 64 20 6e 69 63 68 74 20 6d 65 68 72 20 75 6e 74 65 72 73 74 c3 bc 74 7a 74 2e 20 42 69 74 74 Data Ascii: ":".","header.logout":"Abmelden","imprint.title":"Impressum","imprint.url":"","js.activate":"Aktivieren Sie bitte JavaScript, um HiDrive im Webbrowser benutzen zu knnen.","js.deprecate.message":"Ihr verwendeter Browser wird nicht mehr untersttzt. Bitt
2024-10-31 13:50:07 UTC	11584	IN	Data Raw: 72 22 3a 22 4f 74 72 6f 73 22 2c 22 66 69 6c 65 2e 63 61 74 65 67 6f 72 79 2e 73 6f 66 74 77 61 72 65 22 3a 22 53 6f 66 74 77 61 72 65 22 2c 22 66 69 6c 65 2e 63 61 74 65 67 6f 72 79 2e 76 69 64 65 6f 22 3a 22 56 69 64 65 6f 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 64 61 74 65 74 61 6b 65 6e 22 3a 22 46 65 63 68 61 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 22 44 69 6d 65 6e 73 69 6f 6e 65 73 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 65 78 70 6f 73 75 72 65 74 69 6d 65 22 3a 22 54 69 65 6d 70 6f 20 64 65 20 65 78 70 6f 73 69 63 69 c3 b3 6e 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 66 6e 75 6d 62 65 72 22 3a 22 44 69 61 66 72 61 67 6d 61 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 66 6f 63 61 Data Ascii: r":"Otros","file.category.software":"Software","file.category.video":"Video","file.details.datetaken":"Fecha","file.details.dimensions":"Dimensiones","file.details.exposuretime":"Tiempo de exposicin","file.details.fnumber":"Diafragma","file.details.foca
2024-10-31 13:50:07 UTC	13032	IN	Data Raw: 30 7d 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 74 74 6c 22 3a 22 76 61 6c 69 64 65 20 6a 75 73 71 75 5c 27 61 75 20 7b 30 7d 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 74 74 6c 2e 74 69 6d 65 46 6f 72 6d 61 74 22 3a 22 64 2f 6d 2f 79 20 48 3a 69 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 64 61 74 65 22 3a 22 44 61 74 65 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 6e 61 6d 65 22 3a 22 4e 6f 6d 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 73 69 7a 65 22 3a 22 54 61 69 6c 6c 65 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 73 6f 72 74 65 64 42 79 22 3a 22 50 72 c3 a9 73 65 6e 74 61 74 69 6f 6e 20 70 61 72 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 74 69 74 6c 65 22 3a 22 54 72 69 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 74 79 70 65 22 3a 22 54 79 70 65 22 2c 22 74 6f 6f 6c Data Ascii: 0}","sharelink.ttl":"valide jusqu\'au {0}","sharelink.ttl.timeFormat":"d/m/y H:i","sortFlyout.date":"Date","sortFlyout.name":"Nom","sortFlyout.size":"Taille","sortFlyout.sortedBy":"Prsentation par","sortFlyout.title":"Tri","sortFlyout.type":"Type","tool
2024-10-31 13:50:08 UTC	11584	IN	Data Raw: 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 63 28 29 2e 68 61 73 28 74 68 69 73 2e 5f 63 61 63 68 65 2c 65 29 3f 74 68 69 73 2e 5f 63 61 63 68 65 5b 65 5d 3a 6e 75 6c 6c 7d 2c 72 65 6d 6f 76 65 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 50 72 6f 76 69 64 65 64 20 6b 65 79 20 6d 75 73 74 20 62 65 20 61 20 73 74 72 69 6e 67 22 29 3b 63 28 29 2e 68 61 73 28 74 68 69 73 2e 5f 63 61 63 68 65 2c 65 29 26 26 64 65 6c 65 74 65 20 74 68 69 73 2e 5f 63 61 63 68 65 5b 65 5d 7d 7d 29 2c 68 65 3d 64 65 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 69 61 6c 69 7a 65 28 65 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 53 74 Data Ascii: must be a string");return c().has(this._cache,e)?this._cache[e]:null},remove(e){if("string"!=typeof e)throw new Error("Provided key must be a string");c().has(this._cache,e)&&delete this._cache[e]}}),he=de.extend({initialize(e){if(!(e instanceof window.St
2024-10-31 13:50:08 UTC	2896	IN	Data Raw: 2e 4e 38 2c 7b 67 65 74 45 6c 65 6d 65 6e 74 3a 32 2c 73 65 74 43 6f 75 6e 74 3a 33 7d 29 7d 67 65 74 20 67 65 74 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 24 2e 63 74 78 5b 32 5d 7d 67 65 74 20 73 65 74 43 6f 75 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 24 24 2e 63 74 78 5b 33 5d 7d 7d 76 61 72 20 74 74 3d 65 74 3b 63 6f 6e 73 74 7b 6c 6f 61 64 53 74 61 74 65 3a 69 74 7d 3d 4d 3b 76 61 72 20 72 74 3d 28 65 2c 74 29 3d 3e 7b 69 66 28 65 2e 67 65 74 28 22 6c 6f 61 64 53 74 61 74 65 22 29 21 3d 3d 69 74 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 7b 69 66 28 74 2e 67 65 74 28 22 74 79 70 65 22 29 21 3d 3d 24 65 2e 64 69 72 65 63 74 6f 72 79 26 26 65 2e 67 65 74 28 22 77 72 69 Data Ascii: .N8,{getElement:2,setCount:3})}get getElement(){return this.$$.ctx[2]}get setCount(){return this.$$.ctx[3]}}var tt=et;const{loadState:it}=M;var rt=(e,t)=>{if(e.get("loadState")!==it.done)return null;if(null!==t){if(t.get("type")!==$e.directory&&e.get("wri
2024-10-31 13:50:08 UTC	13032	IN	Data Raw: 5b 30 5d 29 2c 28 30 2c 45 65 2e 6f 4c 74 29 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 64 72 61 67 6c 65 61 76 65 22 2c 65 5b 31 5d 29 2c 28 30 2c 45 65 2e 6f 4c 74 29 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 64 72 61 67 6f 76 65 72 22 2c 65 5b 33 5d 2c 21 30 29 2c 28 30 2c 45 65 2e 6f 4c 74 29 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 22 64 72 6f 70 22 2c 65 5b 32 5d 29 5d 2c 74 3d 21 30 29 7d 2c 70 3a 45 65 2e 5a 54 64 2c 69 3a 45 65 2e 5a 54 64 2c 6f 3a 45 65 2e 5a 54 64 2c 64 28 65 29 7b 74 3d 21 31 2c 28 30 2c 45 65 2e 6a 37 71 29 28 69 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 69 29 7b 6c 65 74 7b 67 65 74 42 6f 75 6e 64 69 6e 67 42 6f 78 3a 72 7d 3d 74 3b 63 6f 6e 73 74 20 6e 3d 6c 74 28 7b 72 61 74 65 3a 37 35 2c Data Ascii: [0]),(0,Ee.oLt)(document.body,"dragleave",e[1]),(0,Ee.oLt)(document.body,"dragover",e[3],!0),(0,Ee.oLt)(document.body,"drop",e[2])],t=!0)},p:Ee.ZTd,i:Ee.ZTd,o:Ee.ZTd,d(e){t=!1,(0,Ee.j7q)(i)}}}function dt(e,t,i){let{getBoundingBox:r}=t;const n=lt({rate:75,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49744	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:08 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 13:50:08 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=183334 Date: Thu, 31 Oct 2024 13:50:08 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:09 UTC	381	OUT	GET /lnk/js/bootstrap.556f531165a982e55ac1.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:09 UTC	399	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:09 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "b6a-625864f3931cb" Accept-Ranges: bytes Content-Length: 2922 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.66:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:09 UTC	2922	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 65 3d 7b 38 38 39 32 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 6f 28 37 36 30 31 29 2c 6f 28 34 39 31 36 29 3b 77 69 6e 64 6f 77 2e 42 6f 6f 74 73 74 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 22 22 3b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 77 69 6e 64 6f 77 73 22 29 2c 6f 3d 28 29 3d 3e 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 63 68 72 6f 6d 22 29 3b 74 68 69 73 2e 6e 61 76 69 67 61 74 6f 72 3d 7b 69 73 53 61 66 61 72 69 3a 2d 31 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 73 61 66 61 72 69 Data Ascii: !function(){"use strict";var t,e={8892:function(t,e,o){o(7601),o(4916);window.Bootstrap=function(t){t="string"==typeof t?t.toLowerCase():"";const e=()=>-1!==t.indexOf("windows"),o=()=>-1!==t.indexOf("chrom");this.navigator={isSafari:-1!==t.indexOf("safari

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:09 UTC	386	OUT	GET /lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:09 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:09 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "39f07-625864f381702" Accept-Ranges: bytes Content-Length: 237319 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.59:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:09 UTC	4032	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 68 64 73 68 61 72 65 2d 76 65 6e 64 6f 72 2e 65 38 37 63 37 65 66 30 37 35 63 36 66 63 36 38 61 37 32 36 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 36 5d 2c 7b 33 34 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 66 28 6e 2e 64 28 65 2c 7b 44 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 7d 29 2c 31 38 3d 3d 6e 2e 6a 29 76 61 72 20 72 3d Data Ascii: /! For license information please see hdshare-vendor.e87c7ef075c6fc68a726.js.LICENSE.txt /(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[906],{3476:function(t,e,n){"use strict";if(n.d(e,{D:function(){return i}}),18==n.j)var r=
2024-10-31 13:50:09 UTC	5792	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 54 28 65 2e 74 61 72 67 65 74 29 2c 69 3d 28 30 2c 45 2e 44 29 28 65 2e 74 61 72 67 65 74 29 3b 72 2e 70 75 73 68 28 6e 29 2c 65 2e 6c 61 73 74 52 65 70 6f 72 74 65 64 53 69 7a 65 3d 77 28 65 2e 74 61 72 67 65 74 2c 65 2e 6f 62 73 65 72 76 65 64 42 6f 78 29 2c 69 3c 74 26 26 28 74 3d 69 29 7d 29 29 2c 65 2e 70 75 73 68 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 6e 2e 6f 62 73 65 72 76 65 72 2c 72 2c 6e 2e 6f 62 73 65 72 76 65 72 29 7d 29 29 2c 6e 2e 61 63 74 69 76 65 54 61 72 67 65 74 73 2e 73 70 6c 69 63 65 28 30 2c 6e 2e 61 63 74 69 76 65 54 61 72 67 65 74 73 2e 6c 65 6e 67 74 68 29 7d 7d 29 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 3b 6e 3c 72 2e 6c 65 6e Data Ascii: n(e){var n=new T(e.target),i=(0,E.D)(e.target);r.push(n),e.lastReportedSize=w(e.target,e.observedBox),i<t&&(t=i)})),e.push((function(){n.callback.call(n.observer,r,n.observer)})),n.activeTargets.splice(0,n.activeTargets.length)}}));for(var n=0,r=e;n<r.len
2024-10-31 13:50:09 UTC	7240	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 75 5b 73 5d 5b 74 5d 3d 21 30 7d 7d 2c 31 35 33 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 38 37 31 30 29 2e 63 68 61 72 41 74 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 2b 28 6e 3f 72 28 74 2c 65 29 2e 6c 65 6e 67 74 68 3a 31 29 7d 7d 2c 35 37 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 39 37 36 29 2c 69 3d 54 79 70 65 45 72 72 6f 72 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 72 28 65 2c 74 29 29 72 65 74 75 72 6e 20 74 3b 74 68 72 6f 77 20 69 28 22 49 6e 63 6f 72 72 65 63 74 20 Data Ascii: .exports=function(t){u[s][t]=!0}},1530:function(t,e,n){"use strict";var r=n(8710).charAt;t.exports=function(t,e,n){return e+(n?r(t,e).length:1)}},5787:function(t,e,n){var r=n(7976),i=TypeError;t.exports=function(t,e){if(r(e,t))return t;throw i("Incorrect
2024-10-31 13:50:09 UTC	8688	IN	Data Raw: 65 65 74 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 43 75 65 4c 69 73 74 3a 30 2c 54 65 78 74 54 72 61 63 6b 4c 69 73 74 3a 30 2c 54 6f 75 63 68 4c 69 73 74 3a 30 7d 7d 2c 38 35 30 39 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 33 31 37 29 28 22 73 70 61 6e 22 29 2e 63 6c 61 73 73 4c 69 73 74 2c 69 3d 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 74 2e 65 78 70 6f 72 74 73 3d 69 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 3f 76 6f 69 64 20 30 3a 69 7d 2c 38 38 38 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 38 31 31 33 29 2e 6d 61 74 63 68 28 2f 66 69 72 65 66 6f 78 5c 2f 28 5c 64 2b 29 2f 69 29 Data Ascii: eetList:0,TextTrackCueList:0,TextTrackList:0,TouchList:0}},8509:function(t,e,n){var r=n(317)("span").classList,i=r&&r.constructor&&r.constructor.prototype;t.exports=i===Object.prototype?void 0:i},8886:function(t,e,n){var r=n(8113).match(/firefox\/(\d+)/i)
2024-10-31 13:50:09 UTC	10136	IN	Data Raw: 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 72 28 74 29 7d 7d 2c 36 31 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 34 31 35 34 29 2c 69 3d 72 2e 61 6c 6c 3b 74 2e 65 78 70 6f 72 74 73 3d 72 2e 49 53 5f 48 54 4d 4c 44 44 41 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 74 3d 3d 3d 69 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7d 7d 2c 34 34 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 37 32 39 33 29 2c 6f 3d 6e 28 36 31 34 29 2c 73 3d 6e 28 36 34 38 29 2c 75 3d 6e 28 35 30 30 Data Ascii: nction(t){return"Array"==r(t)}},614:function(t,e,n){var r=n(4154),i=r.all;t.exports=r.IS_HTMLDDA?function(t){return"function"==typeof t\|\|t===i}:function(t){return"function"==typeof t}},4411:function(t,e,n){var r=n(1702),i=n(7293),o=n(614),s=n(648),u=n(500
2024-10-31 13:50:09 UTC	11584	IN	Data Raw: 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 3f 6e 2e 70 72 6f 74 6f 74 79 70 65 3a 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 3f 66 3a 6e 75 6c 6c 7d 7d 2c 37 39 37 36 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 3b 74 2e 65 78 70 6f 72 74 73 3d 72 28 7b 7d 2e 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 29 7d 2c 36 33 32 34 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 31 37 30 32 29 2c 69 3d 6e 28 32 35 39 37 29 2c 6f 3d 6e 28 35 36 35 36 29 2c 73 3d 6e 28 31 33 31 38 29 2e 69 6e 64 65 78 4f 66 2c 75 3d 6e 28 33 35 30 31 29 2c 61 3d 72 28 5b 5d 2e 70 75 73 68 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 72 3d 6f 28 74 29 2c 63 3d 30 2c 66 3d Data Ascii: instanceof n?n.prototype:e instanceof c?f:null}},7976:function(t,e,n){var r=n(1702);t.exports=r({}.isPrototypeOf)},6324:function(t,e,n){var r=n(1702),i=n(2597),o=n(5656),s=n(1318).indexOf,u=n(3501),a=r([].push);t.exports=function(t,e){var n,r=o(t),c=0,f=
2024-10-31 13:50:09 UTC	13032	IN	Data Raw: 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 53 79 6d 62 6f 6c 28 22 2b 28 76 6f 69 64 20 30 3d 3d 3d 74 3f 22 22 3a 74 29 2b 22 29 5f 22 2b 73 28 2b 2b 69 2b 6f 2c 33 36 29 7d 7d 2c 35 31 34 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 37 32 39 33 29 2c 69 3d 6e 28 35 31 31 32 29 2c 6f 3d 6e 28 39 37 38 31 29 2c 73 3d 6e 28 31 39 31 33 29 2c 75 3d 69 28 22 69 74 65 72 61 74 6f 72 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 21 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 28 22 62 3f 61 3d 31 26 62 3d 32 26 63 3d 33 22 2c 22 68 74 74 70 3a 2f 2f 61 22 29 2c 65 3d 74 2e 73 65 61 72 63 68 50 61 72 61 6d 73 2c 6e 3d 22 22 3b 72 65 74 75 72 6e 20 74 2e 70 61 Data Ascii: .exports=function(t){return"Symbol("+(void 0===t?"":t)+")_"+s(++i+o,36)}},5143:function(t,e,n){var r=n(7293),i=n(5112),o=n(9781),s=n(1913),u=i("iterator");t.exports=!r((function(){var t=new URL("b?a=1&b=2&c=3","http://a"),e=t.searchParams,n="";return t.pa
2024-10-31 13:50:09 UTC	11584	IN	Data Raw: 72 6f 74 6f 74 79 70 65 3d 6c 28 44 2c 22 74 68 65 6e 22 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 4e 28 74 68 69 73 29 2c 72 3d 71 28 62 28 74 68 69 73 2c 50 29 29 3b 72 65 74 75 72 6e 20 6e 2e 70 61 72 65 6e 74 3d 21 30 2c 72 2e 6f 6b 3d 21 67 28 74 29 7c 7c 74 2c 72 2e 66 61 69 6c 3d 67 28 65 29 26 26 65 2c 72 2e 64 6f 6d 61 69 6e 3d 61 3f 46 2e 64 6f 6d 61 69 6e 3a 76 6f 69 64 20 30 2c 30 3d 3d 6e 2e 73 74 61 74 65 3f 6e 2e 72 65 61 63 74 69 6f 6e 73 2e 61 64 64 28 72 29 3a 77 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 72 2c 6e 29 7d 29 29 2c 72 2e 70 72 6f 6d 69 73 65 7d 29 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 72 2c 65 3d 4e 28 74 29 3b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 74 2c 74 68 Data Ascii: rototype=l(D,"then",(function(t,e){var n=N(this),r=q(b(this,P));return n.parent=!0,r.ok=!g(t)\|\|t,r.fail=g(e)&&e,r.domain=a?F.domain:void 0,0==n.state?n.reactions.add(r):w((function(){V(r,n)})),r.promise})),i=function(){var t=new r,e=N(t);this.promise=t,th
2024-10-31 13:50:09 UTC	1448	IN	Data Raw: 2c 50 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 75 29 72 65 74 75 72 6e 20 69 5b 74 5d 3b 76 61 72 20 65 3d 50 28 69 2c 74 29 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 76 61 6c 75 65 7d 2c 4d 3d 44 28 22 66 65 74 63 68 22 29 2c 48 3d 44 28 22 52 65 71 75 65 73 74 22 29 2c 46 3d 44 28 22 48 65 61 64 65 72 73 22 29 2c 71 3d 48 26 26 48 2e 70 72 6f 74 6f 74 79 70 65 2c 42 3d 46 26 26 46 2e 70 72 6f 74 6f 74 79 70 65 2c 55 3d 69 2e 52 65 67 45 78 70 2c 7a 3d 69 2e 54 79 70 65 45 72 72 6f 72 2c 57 3d 69 2e 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 56 3d 69 2e 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 58 3d 73 28 22 22 2e 63 Data Ascii: ,P=Object.getOwnPropertyDescriptor,D=function(t){if(!u)return i[t];var e=P(i,t);return e&&e.value},M=D("fetch"),H=D("Request"),F=D("Headers"),q=H&&H.prototype,B=F&&F.prototype,U=i.RegExp,z=i.TypeError,W=i.decodeURIComponent,V=i.encodeURIComponent,X=s("".c
2024-10-31 13:50:10 UTC	13032	IN	Data Raw: 61 6c 75 65 29 2c 76 61 6c 75 65 3a 54 28 61 2e 76 61 6c 75 65 29 7d 29 7d 65 6c 73 65 20 66 6f 72 28 76 61 72 20 66 20 69 6e 20 74 29 79 28 74 2c 66 29 26 26 4a 28 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 7b 6b 65 79 3a 66 2c 76 61 6c 75 65 3a 54 28 74 5b 66 5d 29 7d 29 7d 2c 70 61 72 73 65 51 75 65 72 79 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 65 2c 6e 2c 72 3d 51 28 74 2c 22 26 22 29 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 29 28 65 3d 72 5b 69 2b 2b 5d 29 2e 6c 65 6e 67 74 68 26 26 28 6e 3d 51 28 65 2c 22 3d 22 29 2c 4a 28 74 68 69 73 2e 65 6e 74 72 69 65 73 2c 7b 6b 65 79 3a 6f 74 28 4b 28 6e 29 29 2c 76 61 6c 75 65 3a 6f 74 28 47 28 6e 2c 22 3d 22 29 29 7d 29 29 7d 2c 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e Data Ascii: alue),value:T(a.value)})}else for(var f in t)y(t,f)&&J(this.entries,{key:f,value:T(t[f])})},parseQuery:function(t){if(t)for(var e,n,r=Q(t,"&"),i=0;i<r.length;)(e=r[i++]).length&&(n=Q(e,"="),J(this.entries,{key:ot(K(n)),value:ot(G(n,"="))}))},serialize:fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49745	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:09 UTC	386	OUT	GET /lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:09 UTC	401	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:09 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "ac1d-625864f3c0989" Accept-Ranges: bytes Content-Length: 44061 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.61:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:09 UTC	4034	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 68 69 64 72 69 76 65 74 6f 6f 6c 73 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 39 36 34 3a 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 30 20 34 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 32 34 30 20 34 38 30 63 31 33 32 2e 35 34 38 20 30 20 32 34 30 2d 31 30 37 2e 34 35 32 20 32 34 30 2d 32 34 30 53 33 37 32 2e 35 34 38 20 30 20 32 34 30 20 30 20 Data Ascii: "use strict";(self.webpackChunkhidrivetools=self.webpackChunkhidrivetools\|\|[]).push([[5],{964:function(l){l.exports='<svg viewBox="0 0 480 480" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M240 480c132.548 0 240-107.452 240-240S372.548 0 240 0
2024-10-31 13:50:09 UTC	5792	IN	Data Raw: 37 2e 36 37 39 20 31 38 2e 34 30 31 63 30 20 34 2e 37 33 33 2d 31 2e 32 30 37 20 39 2e 30 37 39 2d 33 2e 36 32 32 20 31 33 2e 30 33 39 2d 32 2e 33 31 38 20 33 2e 39 36 31 2d 35 2e 34 35 38 20 37 2e 31 34 38 2d 39 2e 34 31 38 20 39 2e 35 36 33 2d 33 2e 38 36 33 20 32 2e 33 31 38 2d 38 2e 32 31 20 33 2e 34 37 37 2d 31 33 2e 30 34 20 33 2e 34 37 37 5a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 2f 73 76 67 3e 5c 6e 27 7d 2c 38 36 34 36 3a 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 33 34 Data Ascii: 7.679 18.401c0 4.733-1.207 9.079-3.622 13.039-2.318 3.961-5.458 7.148-9.418 9.563-3.863 2.318-8.21 3.477-13.04 3.477Z" fill="#fff"/></svg>\n'},8646:function(l){l.exports='<svg viewBox="0 0 40 40" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="m34
2024-10-31 13:50:09 UTC	7240	IN	Data Raw: 2e 35 37 37 2e 31 39 2e 35 37 37 2e 34 33 35 76 34 2e 31 39 63 30 20 2e 32 36 35 2d 2e 30 31 32 2e 32 36 36 2d 2e 35 38 37 2e 33 33 36 2d 2e 31 31 2e 30 31 33 2d 2e 32 34 2e 30 32 39 2d 2e 33 39 35 2e 30 35 5a 6d 2e 35 37 32 2d 38 2e 37 32 33 63 30 20 2e 38 31 33 2e 34 38 34 20 31 2e 32 38 34 20 31 2e 33 32 20 31 2e 32 38 34 2e 38 35 20 30 20 31 2e 33 33 33 2d 2e 34 37 32 20 31 2e 33 33 33 2d 31 2e 32 38 34 20 30 2d 2e 38 31 31 2d 2e 34 38 34 2d 31 2e 32 35 33 2d 31 2e 33 33 34 2d 31 2e 32 35 33 2d 2e 38 33 35 20 30 2d 31 2e 33 32 2e 34 34 2d 31 2e 33 32 20 31 2e 32 35 34 5a 6d 37 2e 30 31 33 20 39 2e 38 36 36 63 2e 38 33 36 20 30 20 31 2e 37 36 2d 2e 32 37 20 32 2e 33 39 2d 2e 35 37 6c 2d 2e 33 39 36 2d 31 2e 32 35 34 63 2d 32 2e 32 33 37 2e 38 31 36 2d Data Ascii: .577.19.577.435v4.19c0 .265-.012.266-.587.336-.11.013-.24.029-.395.05Zm.572-8.723c0 .813.484 1.284 1.32 1.284.85 0 1.333-.472 1.333-1.284 0-.811-.484-1.253-1.334-1.253-.835 0-1.32.44-1.32 1.254Zm7.013 9.866c.836 0 1.76-.27 2.39-.57l-.396-1.254c-2.237.816-
2024-10-31 13:50:09 UTC	8688	IN	Data Raw: 33 34 5a 6d 2d 36 2e 32 39 20 31 2e 31 33 32 68 2d 38 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 2d 31 2e 32 33 20 32 2e 39 33 6c 32 2e 33 31 34 20 32 2e 33 35 2d 31 33 2e 39 37 20 31 33 2e 39 30 38 61 2e 38 35 2e 38 35 20 30 20 30 20 30 20 30 20 31 2e 32 33 4c 31 31 2e 30 34 20 33 31 2e 32 61 2e 38 35 2e 38 35 20 30 20 30 20 30 20 31 2e 32 33 20 30 6c 31 33 2e 39 34 35 2d 31 33 2e 39 39 34 20 32 2e 32 39 20 32 2e 32 39 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 20 32 2e 39 32 39 2d 31 2e 32 33 31 76 2d 38 61 31 2e 37 32 33 20 31 2e 37 32 33 20 30 20 30 20 30 2d 31 2e 37 32 33 2d 31 2e 36 39 39 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2f 3e 3c 2f 73 76 67 3e 27 7d 2c 36 37 30 31 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 34Zm-6.29 1.132h-8a1.723 1.723 0 0 0-1.23 2.93l2.314 2.35-13.97 13.908a.85.85 0 0 0 0 1.23L11.04 31.2a.85.85 0 0 0 1.23 0l13.945-13.994 2.29 2.29a1.723 1.723 0 0 0 2.929-1.231v-8a1.723 1.723 0 0 0-1.723-1.699Z" fill="currentColor"/></svg>'},6701:function(
2024-10-31 13:50:09 UTC	7240	IN	Data Raw: 32 32 2e 38 33 39 6c 2d 2e 30 33 32 2d 2e 30 38 34 2d 2e 30 38 38 2d 2e 30 32 35 63 2d 35 2e 31 30 33 2d 31 2e 34 34 36 2d 39 2e 35 33 20 32 2e 38 39 32 2d 39 2e 35 37 34 20 32 2e 39 33 35 6c 2d 2e 30 36 31 2e 30 36 35 20 31 2e 34 34 36 20 31 31 2e 39 39 2d 36 2e 32 32 34 20 34 33 2e 36 30 35 20 31 38 2e 38 37 20 37 2e 32 37 39 5a 22 20 66 69 6c 6c 3d 22 23 36 42 38 38 44 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 33 2e 35 38 38 20 31 38 31 2e 38 37 63 2d 34 2e 36 30 36 20 30 2d 38 2e 33 33 39 2d 34 2e 30 38 39 2d 38 2e 33 33 39 2d 39 2e 31 33 33 20 30 2d 35 2e 30 34 34 20 33 2e 37 33 33 2d 39 2e 31 33 33 20 38 2e 33 34 2d 39 2e 31 33 33 20 34 2e 36 30 35 20 30 20 38 2e 33 33 38 20 34 2e 30 38 39 20 38 2e 33 33 38 20 39 2e 31 33 33 20 30 20 35 2e 30 34 Data Ascii: 22.839l-.032-.084-.088-.025c-5.103-1.446-9.53 2.892-9.574 2.935l-.061.065 1.446 11.99-6.224 43.605 18.87 7.279Z" fill="#6B88D5"/><path d="M53.588 181.87c-4.606 0-8.339-4.089-8.339-9.133 0-5.044 3.733-9.133 8.34-9.133 4.605 0 8.338 4.089 8.338 9.133 0 5.04
2024-10-31 13:50:09 UTC	2896	IN	Data Raw: 35 30 35 20 32 31 2e 33 34 34 73 32 2e 35 30 38 20 37 2e 34 34 36 20 31 2e 35 30 35 20 39 2e 39 32 38 63 2d 2e 33 30 31 2e 37 34 34 2d 2e 32 34 31 20 31 2e 38 34 36 2d 2e 30 30 39 20 33 2e 30 32 34 20 31 2e 34 31 34 20 37 2e 31 38 39 20 31 2e 37 37 39 20 31 34 2e 35 34 33 20 31 2e 35 37 39 20 32 31 2e 38 36 35 6c 2d 2e 30 36 35 20 32 2e 34 31 31 73 35 2e 37 32 34 20 31 38 2e 30 39 32 20 32 2e 37 31 34 20 31 38 2e 35 38 39 63 2d 33 2e 30 31 2e 34 39 36 2d 31 34 2e 35 37 38 20 34 2e 31 32 33 2d 31 34 2e 35 37 38 2d 31 2e 32 30 32 20 30 2d 36 2e 36 31 31 2d 32 2e 31 38 33 2d 31 35 2e 38 39 38 2d 31 2e 31 38 2d 31 36 2e 33 39 34 6c 2d 33 2e 30 31 2d 31 36 2e 33 38 31 73 2d 35 2e 30 31 36 2d 36 2e 39 34 39 2d 34 2e 35 31 35 2d 31 31 2e 34 31 36 63 30 20 30 2d Data Ascii: 505 21.344s2.508 7.446 1.505 9.928c-.301.744-.241 1.846-.009 3.024 1.414 7.189 1.779 14.543 1.579 21.865l-.065 2.411s5.724 18.092 2.714 18.589c-3.01.496-14.578 4.123-14.578-1.202 0-6.611-2.183-15.898-1.18-16.394l-3.01-16.381s-5.016-6.949-4.515-11.416c0 0-
2024-10-31 13:50:09 UTC	7240	IN	Data Raw: 2e 31 36 2e 37 38 2d 2e 36 39 35 2e 37 38 7a 6d 30 20 39 2e 35 68 2d 2e 36 35 63 2d 2e 36 32 20 30 2d 2e 39 32 2d 2e 30 38 35 2d 2e 39 32 2d 2e 37 38 76 2d 36 2e 37 34 63 30 2d 2e 35 35 35 2e 32 32 35 2d 2e 37 36 2e 37 36 2d 2e 37 36 68 2e 38 31 35 63 2e 34 35 20 30 20 2e 36 39 35 2e 33 33 2e 36 39 35 2e 37 36 76 36 2e 37 34 63 30 20 2e 34 39 2d 2e 31 36 2e 37 38 2d 2e 36 39 35 2e 37 38 7a 6d 36 2e 33 32 2d 2e 30 30 35 68 2d 33 2e 30 30 35 63 2d 2e 35 36 35 20 30 2d 2e 38 34 35 2d 2e 31 36 2d 2e 38 34 35 2d 2e 37 36 56 34 2e 35 35 35 63 30 2d 2e 35 39 2e 33 34 2d 2e 37 30 35 2e 38 34 35 2d 2e 37 30 35 68 33 2e 30 30 35 63 2e 38 37 35 20 30 20 31 2e 38 38 35 2e 30 33 20 32 2e 37 31 35 2e 33 36 35 20 32 2e 31 36 2e 38 34 35 20 32 2e 32 38 20 33 2e 35 36 20 Data Ascii: .16.78-.695.78zm0 9.5h-.65c-.62 0-.92-.085-.92-.78v-6.74c0-.555.225-.76.76-.76h.815c.45 0 .695.33.695.76v6.74c0 .49-.16.78-.695.78zm6.32-.005h-3.005c-.565 0-.845-.16-.845-.76V4.555c0-.59.34-.705.845-.705h3.005c.875 0 1.885.03 2.715.365 2.16.845 2.28 3.56
2024-10-31 13:50:09 UTC	931	IN	Data Raw: 37 76 31 38 2e 31 35 61 31 2e 39 30 31 20 31 2e 38 39 33 20 30 20 30 20 30 20 33 2e 38 30 33 20 30 56 31 32 2e 38 32 32 5a 4d 31 30 31 20 37 76 31 33 68 32 2e 37 32 35 76 2d 35 2e 36 31 68 35 2e 30 39 56 32 30 68 32 2e 37 31 35 56 37 68 2d 32 2e 37 31 35 76 35 2e 30 39 36 68 2d 35 2e 30 39 56 37 5a 6d 31 33 2e 37 37 34 20 30 76 31 33 68 32 2e 37 32 34 56 37 5a 6d 35 2e 39 35 39 20 30 76 31 33 68 33 2e 36 33 38 63 32 2e 32 37 34 20 30 20 34 2e 30 31 32 2d 2e 35 36 39 20 35 2e 32 31 33 2d 31 2e 37 30 37 20 31 2e 32 30 37 2d 31 2e 31 33 38 20 31 2e 38 31 2d 32 2e 37 37 38 20 31 2e 38 31 2d 34 2e 39 31 38 20 30 2d 32 2e 30 31 2d 2e 35 38 2d 33 2e 35 37 35 2d 31 2e 37 34 2d 34 2e 36 39 35 2d 31 2e 31 36 2d 31 2e 31 32 2d 32 2e 37 39 2d 31 2e 36 38 2d 34 2e 38 Data Ascii: 7v18.15a1.901 1.893 0 0 0 3.803 0V12.822ZM101 7v13h2.725v-5.61h5.09V20h2.715V7h-2.715v5.096h-5.09V7Zm13.774 0v13h2.724V7Zm5.959 0v13h3.638c2.274 0 4.012-.569 5.213-1.707 1.207-1.138 1.81-2.778 1.81-4.918 0-2.01-.58-3.575-1.74-4.695-1.16-1.12-2.79-1.68-4.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-31 13:50:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=183389 Date: Thu, 31 Oct 2024 13:50:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-31 13:50:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:10 UTC	379	OUT	GET /lnk/js/hdshare.d10440b3317db342388a.js HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	403	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "6bec9-625864f390359" Accept-Ranges: bytes Content-Length: 442057 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: text/javascript X-STG-FE: 10.4.1.68:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	1136	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 7b 33 39 39 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 28 36 33 33 37 29 3b 76 61 72 20 72 3d 69 28 34 34 35 39 29 3b 77 69 6e 64 6f 77 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 7c 7c 28 77 69 6e 64 6f 77 2e 52 65 73 69 7a 65 4f 62 73 65 72 76 65 72 3d 72 2e 64 6f 29 2c 76 6f 69 64 20 30 3d 3d 3d 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 26 26 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 72 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 74 68 69 73 2e 6c 61 73 74 43 68 69 6c 64 3b 29 74 68 69 73 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 Data Ascii: !function(){var e,t={3998:function(e,t,i){"use strict";i(6337);var r=i(4459);window.ResizeObserver\|\|(window.ResizeObserver=r.do),void 0===Node.prototype.replaceChildren&&(Node.prototype.replaceChildren=function(e){for(;this.lastChild;)this.removeChild(thi
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 6f 70 29 29 2c 63 28 29 2e 68 61 73 28 74 2c 22 65 76 65 6e 74 44 61 74 61 22 29 26 26 28 63 28 29 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 2e 65 76 65 6e 74 44 61 74 61 29 7c 7c 28 74 2e 65 76 65 6e 74 44 61 74 61 3d 63 28 29 2e 63 6f 6e 73 74 61 6e 74 28 74 2e 65 76 65 6e 74 44 61 74 61 29 29 29 2c 75 28 29 2c 65 2e 24 65 6c 2e 6f 6e 28 22 64 72 61 67 65 6e 74 65 72 22 2b 69 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 64 28 69 29 29 7b 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 26 26 65 2e 74 72 69 67 67 65 72 28 22 64 72 61 67 3a 65 6e 74 65 72 22 29 2c 63 28 29 2e 63 6f 6e 74 61 69 6e 73 28 72 2c 69 2e 74 61 72 67 65 74 29 7c 7c 72 2e 70 75 73 68 28 69 2e 74 61 72 67 65 74 29 3b 76 61 72 20 73 3d 69 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 64 61 74 Data Ascii: op)),c().has(t,"eventData")&&(c().isFunction(t.eventData)\|\|(t.eventData=c().constant(t.eventData))),u(),e.$el.on("dragenter"+i,(function(i){if(d(i)){0===r.length&&e.trigger("drag:enter"),c().contains(r,i.target)\|\|r.push(i.target);var s=i.originalEvent.dat
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 2e 65 78 74 65 6e 64 3b 76 61 72 20 66 3d 6d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 65 2c 74 2c 69 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 69 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 69 2c 65 7d 76 61 72 20 79 3d 66 2e 65 78 74 65 6e 64 28 7b 69 6e 69 74 69 61 6c 69 7a 65 28 29 7b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3f 61 72 67 75 6d Data Ascii: .extend;var f=m;function b(e,t,i){return t in e?Object.defineProperty(e,t,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[t]=i,e}var y=f.extend({initialize(){this.config=function(e){for(var t=1;t<arguments.length;t++){var i=null!=arguments[t]?argum
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 61 64 57 72 69 74 65 3a 22 72 65 61 64 2d 77 72 69 74 65 22 7d 29 2c 61 75 74 68 43 6f 6e 74 65 78 74 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 64 65 66 61 75 6c 74 3a 22 64 65 66 61 75 6c 74 22 2c 64 65 76 69 63 65 42 61 63 6b 75 70 73 3a 22 64 65 76 69 63 65 42 61 63 6b 75 70 73 22 7d 29 2c 64 6f 75 62 6c 65 4f 70 74 49 6e 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 63 6f 6e 66 69 72 6d 45 6d 61 69 6c 3a 22 79 22 2c 6e 6f 45 6d 61 69 6c 3a 22 6e 22 2c 75 6e 69 71 75 65 45 6d 61 69 6c 3a 22 75 22 7d 29 2c 64 65 76 69 63 65 42 61 63 6b 75 70 73 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 73 74 61 74 75 73 56 61 6c 69 64 3a 22 76 61 6c 69 64 22 2c 73 74 61 74 75 73 49 6e 76 61 6c 69 64 3a 22 69 6e 76 61 6c 69 64 22 2c 73 74 61 74 75 73 52 75 Data Ascii: adWrite:"read-write"}),authContext:Object.freeze({default:"default",deviceBackups:"deviceBackups"}),doubleOptIn:Object.freeze({confirmEmail:"y",noEmail:"n",uniqueEmail:"u"}),deviceBackups:Object.freeze({statusValid:"valid",statusInvalid:"invalid",statusRu
2024-10-31 13:50:11 UTC	7240	IN	Data Raw: 6f 72 79 22 2c 69 6d 61 67 65 3a 22 69 6d 61 67 65 22 2c 6f 66 66 69 63 65 3a 22 6f 66 66 69 63 65 22 2c 6f 74 68 65 72 3a 22 6f 74 68 65 72 22 2c 73 6f 66 74 77 61 72 65 3a 22 73 6f 66 74 77 61 72 65 22 2c 76 69 64 65 6f 3a 22 76 69 64 65 6f 22 7d 29 2c 73 65 61 72 63 68 54 69 6d 65 52 61 6e 67 65 73 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 74 6f 64 61 79 3a 22 74 6f 64 61 79 22 2c 6c 61 73 74 37 44 61 79 73 3a 22 6c 61 73 74 37 44 61 79 73 22 2c 6c 61 73 74 33 30 44 61 79 73 3a 22 6c 61 73 74 33 30 44 61 79 73 22 2c 6c 61 73 74 39 30 44 61 79 73 3a 22 6c 61 73 74 39 30 44 61 79 73 22 2c 74 68 69 73 59 65 61 72 3a 22 74 68 69 73 59 65 61 72 22 2c 6c 61 73 74 59 65 61 72 3a 22 6c 61 73 74 59 65 61 72 22 7d 29 2c 6c 6f 61 64 53 74 61 74 65 3a 4f 62 Data Ascii: ory",image:"image",office:"office",other:"other",software:"software",video:"video"}),searchTimeRanges:Object.freeze({today:"today",last7Days:"last7Days",last30Days:"last30Days",last90Days:"last90Days",thisYear:"thisYear",lastYear:"lastYear"}),loadState:Ob
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 7d 5c 5c 22 20 6b 6f 6e 6e 74 65 20 6e 69 63 68 74 20 68 65 72 75 6e 74 65 72 67 65 6c 61 64 65 6e 20 77 65 72 64 65 6e 22 2c 22 66 69 6c 65 6d 61 6e 61 67 65 72 2e 64 6f 77 6e 6c 6f 61 64 41 6c 6c 22 3a 22 41 6c 6c 65 73 20 68 65 72 75 6e 74 65 72 6c 61 64 65 6e 22 2c 22 66 69 6c 65 6d 61 6e 61 67 65 72 2e 64 6f 77 6e 6c 6f 61 64 53 65 6c 65 63 74 65 64 22 3a 22 41 75 73 77 61 68 6c 20 68 65 72 75 6e 74 65 72 6c 61 64 65 6e 22 2c 22 66 69 6c 65 6d 61 6e 61 67 65 72 2e 65 6e 63 72 79 70 74 65 64 2e 74 65 78 74 22 3a 22 44 69 65 73 65 72 20 4f 72 64 6e 65 72 20 77 75 72 64 65 20 76 65 72 73 63 68 6c c3 bc 73 73 65 6c 74 2e 20 53 69 65 20 6b c3 b6 6e 6e 65 6e 20 76 65 72 73 63 68 6c c3 bc 73 73 65 6c 74 65 20 44 61 74 65 6e 20 6e 75 72 20 69 6e 20 49 68 72 Data Ascii: }\\" konnte nicht heruntergeladen werden","filemanager.downloadAll":"Alles herunterladen","filemanager.downloadSelected":"Auswahl herunterladen","filemanager.encrypted.text":"Dieser Ordner wurde verschlsselt. Sie knnen verschlsselte Daten nur in Ihr
2024-10-31 13:50:11 UTC	8688	IN	Data Raw: 6c 69 65 c3 9f 65 6e 22 2c 22 75 70 6c 6f 61 64 2e 64 65 74 61 69 6c 2e 6d 6f 72 65 75 70 6c 6f 61 64 73 22 3a 22 57 65 69 74 65 72 65 20 44 61 74 65 69 65 6e 20 68 6f 63 68 6c 61 64 65 6e 22 2c 22 75 70 6c 6f 61 64 2e 64 65 74 61 69 6c 2e 72 65 74 72 79 46 61 69 6c 65 64 55 70 6c 6f 61 64 22 3a 22 45 72 6e 65 75 74 20 68 6f 63 68 6c 61 64 65 6e 22 2c 22 75 70 6c 6f 61 64 2e 64 65 74 61 69 6c 2e 72 65 74 72 79 46 61 69 6c 65 64 55 70 6c 6f 61 64 73 22 3a 22 46 65 68 6c 67 65 73 63 68 6c 61 67 65 6e 65 20 65 72 6e 65 75 74 20 68 6f 63 68 6c 61 64 65 6e 22 2c 22 75 70 6c 6f 61 64 2e 64 65 74 61 69 6c 2e 73 74 61 74 73 2e 65 72 72 6f 72 22 3a 22 7b 30 7d 20 46 65 68 6c 65 72 21 22 2c 22 75 70 6c 6f 61 64 2e 64 65 74 61 69 6c 2e 73 74 61 74 73 2e 74 72 61 6e Data Ascii: lieen","upload.detail.moreuploads":"Weitere Dateien hochladen","upload.detail.retryFailedUpload":"Erneut hochladen","upload.detail.retryFailedUploads":"Fehlgeschlagene erneut hochladen","upload.detail.stats.error":"{0} Fehler!","upload.detail.stats.tran
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: 72 22 3a 22 4f 74 72 6f 73 22 2c 22 66 69 6c 65 2e 63 61 74 65 67 6f 72 79 2e 73 6f 66 74 77 61 72 65 22 3a 22 53 6f 66 74 77 61 72 65 22 2c 22 66 69 6c 65 2e 63 61 74 65 67 6f 72 79 2e 76 69 64 65 6f 22 3a 22 56 69 64 65 6f 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 64 61 74 65 74 61 6b 65 6e 22 3a 22 46 65 63 68 61 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 22 44 69 6d 65 6e 73 69 6f 6e 65 73 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 65 78 70 6f 73 75 72 65 74 69 6d 65 22 3a 22 54 69 65 6d 70 6f 20 64 65 20 65 78 70 6f 73 69 63 69 c3 b3 6e 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 66 6e 75 6d 62 65 72 22 3a 22 44 69 61 66 72 61 67 6d 61 22 2c 22 66 69 6c 65 2e 64 65 74 61 69 6c 73 2e 66 6f 63 61 Data Ascii: r":"Otros","file.category.software":"Software","file.category.video":"Video","file.details.datetaken":"Fecha","file.details.dimensions":"Dimensiones","file.details.exposuretime":"Tiempo de exposicin","file.details.fnumber":"Diafragma","file.details.foca
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 6e 61 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 62 75 74 74 6f 6e 73 2e 64 6f 77 6e 6c 6f 61 64 22 3a 22 44 65 73 63 61 72 67 61 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 64 6f 77 6e 6c 6f 61 64 73 22 3a 22 44 65 73 63 61 72 67 61 73 20 72 65 73 74 61 6e 74 65 73 3a 20 7b 30 7d 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 74 74 6c 22 3a 22 76 c3 a1 6c 69 64 6f 20 68 61 73 74 61 20 65 6c 20 7b 30 7d 22 2c 22 73 68 61 72 65 6c 69 6e 6b 2e 74 74 6c 2e 74 69 6d 65 46 6f 72 6d 61 74 22 3a 22 64 2f 6d 2f 79 20 48 3a 69 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 64 61 74 65 22 3a 22 46 65 63 68 61 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 6e 61 6d 65 22 3a 22 4e 6f 6d 62 72 65 22 2c 22 73 6f 72 74 46 6c 79 6f 75 74 2e 73 69 7a 65 22 3a 22 54 61 6d 61 c3 b1 6f 22 2c 22 73 6f Data Ascii: na","sharelink.buttons.download":"Descarga","sharelink.downloads":"Descargas restantes: {0}","sharelink.ttl":"vlido hasta el {0}","sharelink.ttl.timeFormat":"d/m/y H:i","sortFlyout.date":"Fecha","sortFlyout.name":"Nombre","sortFlyout.size":"Tamao","so
2024-10-31 13:50:11 UTC	14480	IN	Data Raw: 74 65 22 3a 22 43 72 c3 a9 65 72 22 2c 22 63 6f 6d 6d 6f 6e 2e 64 6f 77 6e 6c 6f 61 64 22 3a 22 54 c3 a9 6c c3 a9 63 68 61 72 67 65 72 22 2c 22 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 2e 6e 61 6d 65 2e 6d 61 78 4c 65 6e 67 74 68 22 3a 22 4c 65 20 6e 6f 6d 20 65 73 74 20 74 72 6f 70 20 6c 6f 6e 67 2e 22 2c 22 63 6f 6d 6d 6f 6e 2e 65 72 72 6f 72 2e 6e 61 6d 65 2e 72 65 71 75 69 72 65 64 22 3a 22 56 65 75 69 6c 6c 65 7a 20 73 61 69 73 69 72 20 75 6e 20 6e 6f 6d 22 2c 22 63 6f 6d 6d 6f 6e 2e 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 50 6c 75 73 20 64 5c 27 69 6e 66 6f 72 6d 61 74 69 6f 6e 73 22 2c 22 63 6f 6d 6d 6f 6e 2e 72 65 6e 61 6d 65 22 3a 22 52 65 6e 6f 6d 6d 65 72 22 2c 22 63 6f 6d 6d 6f 6e 2e 73 61 76 65 22 3a 22 53 61 75 76 65 67 61 72 64 65 72 22 2c 22 Data Ascii: te":"Crer","common.download":"Tlcharger","common.error.name.maxLength":"Le nom est trop long.","common.error.name.required":"Veuillez saisir un nom","common.information":"Plus d\'informations","common.rename":"Renommer","common.save":"Sauvegarder","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49751	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	636	OUT	GET /OpenSans-SemiBold-webfont.773343aa665d7ab6ceb5.woff HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:04 GMT ETag: "3808-625864f30ab1b" Accept-Ranges: bytes Content-Length: 14344 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: font/woff X-STG-FE: 10.4.1.52:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	4040	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 38 08 00 0f 00 00 00 00 5f 04 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 00 16 00 00 00 16 00 10 00 dd 47 50 4f 53 00 00 01 70 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 7c 00 00 00 59 00 00 00 74 dd ce de 9b 4f 53 2f 32 00 00 01 d8 00 00 00 5e 00 00 00 60 a2 0e 97 bd 63 6d 61 70 00 00 02 38 00 00 00 98 00 00 00 cc af 0d b3 9d 67 61 73 70 00 00 02 d0 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 02 dc 00 00 24 95 00 00 34 72 45 02 52 34 68 65 61 64 00 00 27 74 00 00 00 36 00 00 00 36 ff f5 c9 47 68 68 65 61 00 00 27 ac 00 00 00 1e 00 00 00 24 0e b5 05 07 68 6d 74 78 00 00 27 cc 00 00 02 0e 00 00 03 6c cf c1 53 33 6b 65 72 6e 00 00 29 dc 00 00 0a Data Ascii: wOFF8_GDEFXGPOSpGSUB\|YtOS/2^`cmap8gaspglyf$4rER4head't66Ghhea'$hmtx'lS3kern)
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: 5d 7c c6 c6 79 5d 7b 77 d8 05 0f f3 76 f4 33 ba 6e de 5f bf e3 83 cb c3 d9 08 73 71 d2 a3 dc 9b 2c 8d 03 38 22 e3 cb 76 e4 03 68 ff cf bd c4 8f 70 3e ce 6d 63 e0 0e 1e 02 9d c0 44 3e 08 1b 50 04 c1 91 97 a8 c6 72 0d f5 b7 0c 15 e7 58 c5 5b 03 43 fb 11 2b 00 15 8a 86 28 e0 70 f7 a7 d8 19 38 d6 19 6d 33 a7 5b ce 22 37 36 8b b4 1f 41 da 47 8a c8 a9 d2 09 b1 a3 8a 8b 6c 7d 88 6e 59 b4 ec 63 cb 3b e8 55 31 37 b2 be a4 95 47 8f ad b8 0a 2d 10 56 0a 44 4c 46 0b 70 7f b8 46 e4 62 70 95 b4 a5 bc 65 c6 df 4e 49 0e 40 8e 6d a8 cf 4d cb af 82 56 c9 53 2d e1 62 23 70 71 22 1c 74 e4 d2 02 43 58 5c c5 03 0a 24 5b ca ff 94 32 d4 2a 90 13 e7 26 a9 16 e2 17 ba 5c d0 13 0e 26 c3 9d 3a bc 0b d7 23 27 76 af f9 23 54 69 09 22 18 6a c6 b5 6c 42 9b 91 8e 46 27 c0 26 98 b3 d9 24 Data Ascii: ]\|y]{wv3n_sq,8"vhp>mcD>PrX[C+(p8m3["76AGl}nYc;U17G-VDLFpFbpeNI@mMVS-b#pq"tCX\$[2*&\&:#'v#Ti"jlBF'&$
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 0b d5 f1 43 8a 46 d6 f8 27 27 c5 8d 0a 1c 33 6c e5 bc b4 95 4d 00 4f 6e 01 c7 dd 09 ca d4 fa 0f 79 a7 97 d6 75 98 ef e4 f9 81 7b f6 0f 3f ed e2 be c9 27 32 68 f4 d2 70 bf 99 3a c3 07 5a 63 d8 9c 99 ad 09 5c 5e 6d 7d 09 99 39 9f 41 97 aa c8 cc 47 f2 9e 3e 62 0b f3 06 6a 62 f0 9b a8 35 f7 3b a8 92 97 1d d4 ba df 5f 53 9b 3b a8 33 5f bc e6 b0 bd 83 5a 4b 5c 9e a5 54 e9 61 92 93 a1 5e 63 10 ce 11 24 a9 cb 47 17 34 94 d6 0b 49 64 7b fe 5d 02 fe 00 ca 7f 1b 84 58 95 28 12 68 56 d9 d3 35 ea 8f 3f ab ce ae 2d 0e 8a bc 34 fd df d3 17 ff eb 87 e7 96 f7 3b 81 fa f0 fe 88 7d 73 d7 34 8e 8c ae cd db 73 f4 79 f1 d2 f5 59 db d6 b3 bb e7 67 bc 05 8d 89 e0 b3 ff 2b 1b 69 70 9d a9 d8 cd 7d db 36 fc c7 ef 69 b8 3c 94 a4 9b e3 e7 a6 46 1f dc b6 2d 2f 8d e4 fc a7 22 79 4e ce Data Ascii: CF''3lMOnyu{?'2hp:Zc\^m}9AG>bjb5;_S;3_ZK\Ta^c$G4Id{]X(hV5?-4;}s4syYg+ip}6i<F-/"yN
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: 1a 72 9c d0 e8 0c e4 5b cf f0 99 40 b6 f7 da 03 bd e0 0c ee 8f 10 6c c6 c9 c3 e0 bd dc 8d 19 65 ff c6 57 06 6d 5e 85 d0 aa 8d ae e0 f1 ec cc ce f0 ad 1c 2e 29 dd 3a d0 a0 d9 82 cf f8 9e f7 01 9b 96 2d 2e 2e c3 b7 b6 42 af c8 a3 c1 42 5e 3e 99 cf 87 89 16 4d 76 22 ba ef 50 1c 54 f3 f5 d3 de 44 26 23 8f e7 63 d0 3d a6 9d be c4 8a 1e 42 e9 f4 fd 51 14 84 ae 4a aa 98 4e 7c ee 40 4d 92 c4 e2 bb d9 3a 4f 03 c9 e5 a0 ab a9 35 78 31 ac a9 4a c5 27 a4 9e fd 0a 51 4b 79 79 1a 1a 69 a9 af 98 1a 13 a7 6f 14 39 cb 16 74 70 d6 30 46 ca 99 8e 2c 69 60 da 9f 4f 7b c3 f3 90 d7 cf a5 fd ad 24 a3 cf c5 f7 d9 a0 5c d0 3e 91 47 5e fb 84 2a 9e c4 30 2d 84 fe 1b 1f a1 ff 53 8c 85 d6 f3 91 fb 01 32 9d 2d 56 f4 c4 b6 d1 94 de f6 2d a1 1f b2 a2 d7 e0 cb 7c 7b 20 f4 85 32 df 0e fa Data Ascii: r[@leWm^.):-..BB^>Mv"PTD&#c=BQJN\|@M:O5x1J'QKyyio9tp0F,i`O{$\>G^*0-S2-V-\|{ 2
2024-10-31 13:50:11 UTC	168	IN	Data Raw: 1e 79 e0 a1 fd fa f8 66 a9 a7 1e 7b a2 af 8f 3e 9b ab bf 7e 06 18 64 a0 c1 36 18 62 98 a1 86 1b 61 94 91 46 1b e3 83 b1 c6 1b 67 82 49 26 3a 61 a3 29 26 9b 6a 9a 4f be 38 e5 99 03 0e 7a ee 8d 17 0e 39 ec 98 e3 ae 38 e2 a8 ab 66 db ed 9c f3 ce 04 51 be 06 d1 41 4c 10 1b c4 05 f1 41 82 42 ee bb e3 ae 7b ff c6 92 57 9a 93 c3 5e 9a 97 69 60 e0 e8 c2 99 5f 96 5a 54 9c 9c 5f 94 ca e2 5a 5a 94 0f 12 76 73 32 30 84 d2 46 3c 69 f9 a5 45 c5 a5 05 a9 45 99 f9 45 50 41 63 28 6d c2 94 96 06 00 1d 0d 78 b0 00 00 Data Ascii: yf{>~d6baFgI&:a)&jO8z98fQALAB{W^i`_ZT_ZZvs20F<iEEEPAc(mx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	624	OUT	GET /fa-solid-900.b6879d41b0852f01ed5b.woff2 HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	398	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:04 GMT ETag: "24a04-625864f34c4c9" Accept-Ranges: bytes Content-Length: 150020 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: font/woff2 X-STG-FE: 10.4.1.22:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	4037	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 4a 04 00 0a 00 00 00 05 b8 30 00 02 49 b7 03 04 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 ab 3c 00 81 91 04 ca 94 fe 44 cb ab 40 05 87 70 07 20 a5 17 dc 92 92 01 44 70 1e 00 00 b6 7a e7 61 44 8a 66 0f 4f 11 3d 69 bd 78 00 54 55 55 55 d5 94 84 80 c7 6c db 01 a0 aa 82 1f fd e4 67 bf f8 d5 6f 7e f7 87 3f fd e5 6f ff f8 97 7f fb 8f ff fa 9f ff fb 4f 81 c1 b8 fb 07 c2 b4 6c c7 e5 f6 78 7d 7e c3 f7 df da e7 ad 9a f9 b8 d4 21 ee b0 b0 40 2f 2a ac 88 55 ec 0a 97 f3 02 3e c2 b2 f1 ad e4 0a 15 a4 f1 1f fb 7b 3b 6d 07 42 f2 d3 77 ee 40 5e 51 5e 89 5a 99 bb e6 66 20 a8 08 83 89 8a cb 06 dc 93 74 17 ff 11 ef b3 37 08 ed 04 e2 60 fc 0e 4c 72 0f 19 bf c6 cb 81 9f a9 50 92 42 f7 4a 78 13 b1 Data Ascii: wOF2J0I8$ `<D@p DpzaDfO=ixTUUUlgo~?oOlx}~!@/*U>{;mBw@^Q^Zf t7`LrPBJx
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: 78 18 cf e3 15 bc 85 8f f1 19 be c2 f7 e8 83 41 18 da ba 93 7b fd 3d f6 2a 54 93 ea 51 73 6a bd ae c1 34 82 c6 d2 24 9a 42 33 db 96 56 d0 6a 5a 4f 1b 69 3b 1d a3 13 74 a1 4d 3e eb e5 b1 30 89 d2 17 7c 23 b1 33 72 72 5e 2e c0 c5 96 ad c1 b5 b9 1e b7 fe 2a 03 79 18 8f e2 71 3c 93 67 f3 7c 5e c4 6b 78 03 6f e6 6d bc 87 0f b7 8f 7f 9e 2f f1 15 be c9 77 f9 29 bf e4 b7 fc 9e dd d9 93 fd 38 b0 2d 8c 61 47 47 6d f7 5b 67 d1 d9 67 0a ea 22 ba f8 6e 57 9f 59 ad 37 ea 2d 3d 5c ff ae c6 99 ea 4c 71 26 38 63 9c 51 c6 af 3f 31 15 6a 57 a8 5a a1 a2 85 56 b2 15 6a b9 5a ef ad 87 d6 7d eb 86 75 cd ba 6c 18 d6 76 6b a3 b5 ce 6a 64 d5 b6 6a 58 25 ad 9c 56 16 d3 69 2a f3 8b 99 66 c6 98 01 a6 a7 f9 d2 7c 64 de 37 af 9a 57 cc cb e6 3e 73 a7 b9 dd dc 60 2e 33 c7 9b 43 cd 6e e5 Data Ascii: xA{=TQsj4$B3VjZOi;tM>0\|#3rr^.yq<g\|^kxom/w)8-aGGm[gg"nWY7-=\Lq&8cQ?1jWZVjZ}ulvkjdjX%Vi*f\|d7W>s`.3Cn
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 77 25 77 27 4e 21 f7 94 47 9c 4e ee 43 ee 47 9c 41 1e a4 0e 03 0b 91 07 93 87 5c b7 38 40 1e 46 1e 4e 9c 4b 1e 49 1e 43 9c 4f 9e c0 06 c6 c5 e4 49 e4 c9 c4 25 e4 a9 e4 99 c4 65 e4 d9 e4 39 c4 d5 e4 c5 12 71 2d 79 99 6e 5f 74 13 22 ae 23 ef f0 8c eb c9 7b c9 fb 89 1b c8 87 c8 87 cf 14 f7 c9 47 c9 c7 89 5b c9 27 11 71 07 f9 b4 47 dc 49 be 44 be 4c dc 45 be a1 0d 8c 7b c8 b7 c9 0f 88 7b c9 8f c9 4f 88 87 c9 cf c9 2f 88 47 c9 af a5 f5 c3 ff 2f da 70 c4 e3 b4 b1 68 33 10 af d3 66 c4 c3 e8 b4 99 68 b3 12 df d1 66 93 87 31 68 b3 d3 e6 22 7e a2 cd 2d 0f a3 d1 e6 a1 2d 4a fc 46 5b 4c a7 2a 85 b6 38 ed 34 e2 6f da 19 b4 8b 28 2b d0 2e a1 5d 4e 59 9b 76 25 ed 1a ca fa b4 eb 69 b7 51 36 a6 dd 41 bb 93 b2 35 ed 6e da bd 94 6d 69 f7 d3 1e a2 ec 40 7b 84 f6 14 65 17 da Data Ascii: w%w'N!GNCGA\8@FNKICOI%e9q-yn_t"#{G['qGIDLE{{O/G/ph3fhf1h"~--JF[L*84o(+.]NYv%iQ6A5nmi@{e
2024-10-31 13:50:11 UTC	5792	IN	Data Raw: 74 e2 3f 41 71 36 b1 4a 28 ae 22 3a 11 c5 d5 c4 3f 87 e2 81 c4 3e 40 f1 30 62 05 8a c7 13 7f 19 8a a7 10 bf 18 c5 b3 48 d1 04 c5 f3 89 8e 47 f1 02 c3 5d 88 e1 2e c2 c2 dc e5 10 d7 0b c5 2b 89 7b 02 c5 6b 89 1e 46 f1 7a e2 47 a1 78 13 f1 d7 a3 78 1b 29 a6 a0 78 07 c1 a3 78 a7 de 2f 3f 89 0f 42 dc 24 14 1f 22 ae 3a 8a 8f 10 d7 00 c5 47 89 ff 08 c5 c7 cc ed 1e 87 e8 27 14 9f 20 fa 19 c5 a7 88 3b 0e c5 a7 89 5b 87 e2 33 86 7b 11 e2 a7 a2 f8 12 d1 3e 14 5f 26 be 26 8a af 10 57 1f c5 57 89 ff 0f c5 b7 88 ae 47 f1 1d e2 df 46 f1 23 62 df a3 f8 31 f1 93 51 fc 84 e8 5f 14 3f 25 c5 44 14 3f 23 ee 6a 14 3f 27 45 7b 14 bf 20 ce a3 f8 0d f1 c7 a1 f8 1b 71 cf a2 f8 3b f1 ab 50 cc 44 67 a3 b8 8f e8 77 14 ff 1e a5 d8 78 55 72 3b 25 40 5f a3 24 88 9f 8f 92 11 3f 14 a5 72 Data Ascii: t?Aq6J(":?>@0bHG].+{kFzGxx)xx/?B$":G' ;[3{>_&&WWGF#b1Q_?%D?#j?'E{ q;PDgwxUr;%@_$?r
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 64 30 1c f4 73 96 29 ec a4 9d 45 8f d8 c9 e2 6e a5 2a b2 34 4b 13 1a d1 62 8a bf 66 36 13 1d 63 e1 db 16 17 9e 6b 39 be b2 ac 7a 6c b9 4a 38 76 e4 bb d2 63 dc 33 88 6b 3b be 63 4a 0f 0d 44 b4 cc b8 a9 94 61 fb be 17 9b 86 f2 6d 0b c9 5c 58 22 7b af 51 49 a8 ef 58 ca 71 16 88 ed 2b 83 d8 76 4d 50 21 5c 97 79 a8 7c 83 fa 3e 8f 4c 43 fd 61 cf f1 84 ef 9b 92 1e 59 9b 7a 51 b7 cb 3e a3 8b 38 8a 50 9f da 8a b1 37 7f 45 20 c5 7d 87 ff ca f1 84 df 1b 4f e6 57 42 32 86 5f 34 94 42 c3 30 84 b2 1c df 73 b9 23 1c 57 b1 a0 e6 30 2e 3d 66 5a 81 6f 9a d2 77 4c 44 e9 1a 06 fe f1 cf 0a cb b4 6c 5f 19 66 ec f9 be 6d 28 e5 32 d7 15 82 86 f3 86 ad 7c c7 f0 6b 96 32 6c df 21 68 b9 d4 f3 b8 60 f1 bc 79 d3 29 b3 1f 21 5e 9c 89 ee 39 62 38 7b 67 97 72 52 3f ab eb fd 9b cb ac 29 Data Ascii: d0s)En*4Kbf6ck9zlJ8vc3k;cJDam\X"{QIXq+vMP!\y\|>LCaYzQ>8P7E }OWB2_4B0s#W0.=fZowLDl_fm(2\|k2l!h`y)!^9b8{grR?)
2024-10-31 13:50:11 UTC	7240	IN	Data Raw: a1 ae 24 2f e8 00 f5 3a 00 03 6e d7 dc 8a 6d c1 87 0c c7 22 ba 81 9f 7b b7 25 80 71 69 fb a7 af 30 40 b0 7e 79 83 80 8e f1 4b 5f 8a b1 92 76 d8 2c a0 e6 d5 29 4c 30 a6 bf 7a 05 9d 0d 93 34 f2 4d dc 99 99 1e b4 bb 30 03 cd f2 28 a1 03 12 e9 a2 c0 17 a8 d4 ca 53 cc 5e 14 d3 21 c7 1b 3f 5a c6 e3 43 54 6c a6 77 8d 37 0b 8d 43 d8 cf 0d a9 45 db c6 0e 76 ec ea 57 aa b6 83 1d 6c db c5 0f df 17 fa 18 fb e1 73 2c 97 5a 60 32 0a a5 26 95 39 6a 06 53 cf b7 d5 18 4c b3 74 50 75 5c 00 d7 a9 1e 94 4c 13 9e d8 15 07 71 f6 ef a7 60 c7 27 f1 85 5c 4c eb eb 58 e7 f4 bb 12 5a be 99 60 db d1 24 59 96 34 c7 7e 7b f0 6f 95 b9 61 f0 72 a9 5a e5 84 f0 6a b5 84 44 64 5c fd 2d b8 d2 af c6 9d e8 41 f4 b2 68 b9 6a a2 21 9e a7 fb c9 c7 5c 30 8c 57 e3 76 0f 68 ab 73 66 58 15 3a b3 74 Data Ascii: $/:nm"{%qi0@~yK_v,)L0z4M0(S^!?ZCTlw7CEvWls,Z`2&9jSLtPu\Lq`'\LXZ`$Y4~{oarZjDd\-Ahj!\0WvhsfX:t
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: e6 7a 04 01 e0 a6 04 72 d6 be 89 57 32 79 1e 70 77 b9 f9 f6 e2 6d be 24 9a ed 7b 03 ae 0b d5 ec d9 13 42 e1 a4 9e 67 e6 0b c5 4b 4b c7 2d 23 5b 58 4a f5 18 c1 be b3 8a 5c 56 2f cf 69 41 aa cb 18 ab aa a6 cb f5 b2 dd 55 03 df e9 82 65 06 ef e6 94 0a 82 a2 ea 4f d5 9a 29 68 90 4b f2 31 87 ee ec cb 19 27 f3 c8 16 a3 ae d3 d9 d4 a0 f2 19 a8 43 34 b9 07 90 28 69 e1 30 46 16 ac d4 cc 86 60 ae d2 54 d9 7b cd 71 45 c1 20 cb ba 5c ca 98 d5 08 a1 5c 9e 4f d6 37 01 e5 f2 bc 8f 8e b3 96 58 1e d7 66 08 82 96 0c 13 a2 d3 56 45 c1 20 95 eb 4d 0a b2 12 9f 8a 87 c3 1b 42 30 ba 48 a7 c8 de d3 3d ea ed 52 89 00 42 1a f2 23 29 05 8d b6 ff 06 3a 81 76 d1 ed e8 41 f4 72 f4 3a f4 76 f4 fe 3c 8f 49 f6 98 2c ed a5 54 19 de 0a e6 a8 64 00 ed e7 b6 b8 1d 67 a6 9c 20 b2 ea fc 9c 3d Data Ascii: zrW2ypwm${BgKK-#[XJ\V/iAUeO)hK1'C4(i0F`T{qE \\O7XfVE MB0H=RB#):vAr:v<I,Tdg =
2024-10-31 13:50:11 UTC	7240	IN	Data Raw: f2 ab 9e b6 03 9e 4b 11 14 61 5d 4e d3 4e d7 21 75 b2 cf b0 d7 00 fa 3b d1 17 ec ef af 6f 8a 0a ef 3d 7c ee b3 b1 20 4a 44 a2 53 94 27 3a 8f 30 c6 06 d3 7f b7 e7 da f4 88 33 51 f0 37 f1 1e ee 35 b6 78 04 96 96 d9 c9 b7 7a c9 23 ec a5 b0 23 fc ea 87 2f 6d f1 28 54 22 d2 ee f3 3f c6 66 a0 95 45 ec 40 01 09 2e 7c db e5 42 2b fd 9a 57 d1 b1 8d 53 89 48 0d 0a cb ec c4 ff e0 f0 21 ba 1e bd 04 3d 1d 95 93 35 f5 d0 fb e2 37 98 01 70 43 66 bb a0 29 e0 d2 a4 e3 50 86 81 07 7c c8 72 e1 a1 44 6a a7 03 0c 45 89 03 0a fc ba 62 4c 96 03 ae fa 2e f6 2b d3 21 63 fc fc 22 83 d3 09 12 0e bc 23 24 63 c2 73 74 6b c0 fc 32 4a e7 9d 4e 40 8f 10 c7 72 ad 10 b6 3f d6 ec 35 f9 97 6e cf 1f d2 18 67 2c 5b e8 fa 3d 90 67 6d ef 70 84 08 92 af 7e 0b 3f 01 2f 20 97 a5 df d4 cd e8 11 f4 Data Ascii: Ka]NN!u;o=\| JDS':03Q75xz##/m(T"?fE@.\|B+WSH!=57pCf)P\|rDjEbL.+!c"#$cstk2JN@r?5ng,[=gmp~?/
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 61 9b 29 e5 d9 6f 81 d7 9e 13 f8 1e 3c 80 e6 75 da 27 c8 46 11 1a a2 1d 3b 67 90 04 20 75 6d 48 25 6e 45 82 f8 a0 15 f3 8e 48 03 2b 4c da 3c ba 5b 07 20 de 03 07 bb fe bf b2 c4 86 4c 2c 4b 52 59 5c 29 fc f2 61 1f 82 df 90 e5 fe 3f 03 b3 6f 5d 55 b9 e9 f1 6d 84 0b fd 7b 17 5a 3f 1e 65 f6 5b a2 f8 5f 9e 20 95 e1 a6 27 c9 1d 3c 3d fb 2f 23 4c 63 e3 e7 d0 1d c8 1b f7 23 b1 12 c4 be cf 57 07 f7 aa 5e e5 70 84 0e 06 27 75 fd 4f 15 27 e8 c7 04 d8 6e 29 5c 82 00 e7 6e 74 62 69 11 e3 af 7a 43 ef 6a d6 d7 09 22 00 5c b7 08 1a 3c d2 b7 a0 7b be f4 16 b4 bf 89 96 76 3a 42 8a ae bf da 57 70 76 b2 96 f4 de 75 d2 e8 a6 b2 a5 e3 28 0f 77 cf 83 d4 48 d7 fa 2e 1f 49 d2 e9 d6 76 9e 36 a9 1b 5f 83 3e f3 57 d0 75 e8 11 84 5a 1e eb 05 e8 06 a6 9b 51 33 6a 1a bf f1 56 2d c7 ca Data Ascii: a)o<u'F;g umH%nEH+L<[ L,KRY\)a?o]Um{Z?e[_ '<=/#Lc#W^p'uO'n)\ntbizCj"\<{v:BWpvu(wH.Iv6_>WuZQ3jV-
2024-10-31 13:50:11 UTC	5792	IN	Data Raw: f2 08 e6 5a c3 b1 23 22 96 c5 76 44 b9 9f 7f 2e 18 bf b0 f0 c3 07 6c 98 6b 0d cb bb 39 02 85 48 27 c7 3f a8 c2 71 8d da e4 46 ce 7e 08 8d d1 33 e8 03 b2 1f c9 a3 1b 8a 14 46 c8 fe b0 7c a2 54 f3 3b 25 6a c7 51 2c 0b 51 24 d1 61 ce 30 a3 69 e2 5d b8 93 3d d8 c4 0f 37 3a b4 b0 c8 01 d4 75 26 02 a7 ae 57 e4 60 66 16 d5 b8 bd 1a 5e f0 a2 d5 76 ac ee 70 ff 22 b3 7a ea a2 cf 77 7e 46 2f 96 96 4a 80 a0 27 f9 57 0c 21 d4 f6 0e 20 04 c7 d1 2b bb 26 9a 11 df 1c da 93 18 7f bb 61 9a cf 5e f2 31 f6 17 8e 05 fd 92 60 cd a1 70 50 af 43 14 c5 9b ea f5 01 13 3e 37 52 6f f6 27 01 55 78 38 c0 89 91 83 3d c0 24 7a df 94 0b 9d d8 68 d7 50 50 2b 87 bb 45 98 ea 1a 21 a3 73 61 05 15 d0 3c 5a 45 db 58 63 03 a1 ca 5c 50 85 46 4a 87 59 43 83 99 12 9d a1 05 48 08 aa 9d f7 07 9e 7b Data Ascii: Z#"vD.lk9H'?qF~3F\|T;%jQ,Q$a0i]=7:u&W`f^vp"zw~F/J'W! +&a^1`pPC>7Ro'Ux8=$zhPP+E!sa<ZEXc\PFJYCH{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49754	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	635	OUT	GET /OpenSans-Regular-webfont.8e4fce4052b0df5529c7.woff HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "37b4-625864f35f96e" Accept-Ranges: bytes Content-Length: 14260 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: font/woff X-STG-FE: 10.4.1.74:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	4040	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 37 b4 00 0f 00 00 00 00 5e 4c 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 00 16 00 00 00 16 00 10 00 dd 47 50 4f 53 00 00 01 70 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 7c 00 00 00 59 00 00 00 74 dd ce de 9b 4f 53 2f 32 00 00 01 d8 00 00 00 5f 00 00 00 60 a1 3e 9e c9 63 6d 61 70 00 00 02 38 00 00 00 98 00 00 00 cc af 0d b3 9d 67 61 73 70 00 00 02 d0 00 00 00 10 00 00 00 10 00 15 00 23 67 6c 79 66 00 00 02 e0 00 00 24 59 00 00 33 ec 10 7e f2 9e 68 65 61 64 00 00 27 3c 00 00 00 36 00 00 00 36 ff e0 10 3d 68 68 65 61 00 00 27 74 00 00 00 1e 00 00 00 24 0e b7 04 fd 68 6d 74 78 00 00 27 94 00 00 02 08 00 00 03 6c b4 cb 59 88 6b 65 72 6e 00 00 29 9c 00 00 0a Data Ascii: wOFF7^LGDEFXGPOSpGSUB\|YtOS/2_`>cmap8gasp#glyf$Y3~head'<66=hhea't$hmtx'lYkern)
2024-10-31 13:50:11 UTC	5792	IN	Data Raw: a7 d6 7c c3 67 33 ba ec 90 ae 82 56 df 45 f4 88 98 f9 6e 41 1d 06 c9 79 d5 70 9f 0e 3c 06 b3 60 ce 41 3a 90 64 99 33 88 89 1c 35 1f 27 c3 cd a3 2d 3c a5 8b 71 96 c3 35 cc 00 40 4f 06 c3 b2 c3 b4 63 25 ed 74 94 dc 21 77 4c 4b cc f5 a4 1f 9f c3 ee 7f 38 db df 12 15 d5 06 29 23 54 0b fe 26 67 de ce ec c0 7f 6d 7a c9 77 cd 16 0a 8b b2 9b 13 19 5d 65 f4 18 99 2b e9 05 2c f1 96 cc a5 46 a8 a7 8d a0 a6 c7 e4 af 56 bf 52 b3 79 2c c1 bd 2b dd 7b 9c 91 fa a3 44 53 66 fe 3f 49 8e 38 aa a7 c7 c0 24 61 51 21 06 03 be f4 b8 bc 11 d1 18 6b 64 8d ab ff 92 33 1c 9e 44 27 68 64 75 52 7e c2 94 03 9e 50 35 0d ee 16 d2 55 b4 8a e8 f8 62 53 02 79 68 56 61 6c 34 d1 33 7c 71 4b 08 db 8d 31 80 23 71 fc 16 7a 26 8b 09 20 57 b8 cd 3b c9 d5 8c 3f d0 a0 b2 0c 7a 34 51 de 69 ce b0 aa Data Ascii: \|g3VEnAyp<`A:d35'-<q5@Oc%t!wLK8)#T&gmzw]e+,FVRy,+{DSf?I8$aQ!kd3D'hduR~P5UbSyhVal43\|qK1#qz& W;?z4Qi
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: f4 ec 1d b6 04 64 d0 63 ea ca 48 a9 56 be 9a d5 a5 ac b6 85 e7 04 3b 15 98 b4 b1 ba 2c fc 43 de 0d a9 0a 11 e5 34 8a d4 70 56 b8 bd 0d 7c 0c 83 a3 96 95 24 14 b5 7c 8c 6b 27 f6 79 34 58 ee b6 3c 01 6d f0 36 76 e0 15 0a 52 9d b1 96 ce 81 c2 95 19 f4 99 5c d6 b1 6b d7 37 cb 79 e5 85 0b d3 c9 70 f3 a5 53 cb 46 d9 eb fa f4 71 fc 53 c2 2f bf 8a f8 75 5c 08 c1 98 d8 b6 bf 6c b6 75 7f f9 a9 d7 8c 8f 69 1b 97 9d b6 8c 33 ca e4 e2 38 30 9b 81 64 49 0b 48 95 63 7d 05 53 00 ce 97 21 7c 8d 98 4b df b2 e4 2b 1f 8b 39 36 cb 4b 06 d9 c0 53 5b 7a 32 78 cb 39 84 27 da c0 6b e9 57 0c ce f0 10 5f 85 b6 15 9e 48 bf 85 f0 ff 07 ff ef b9 db 00 00 00 00 01 00 00 00 01 19 9a ca 23 b7 12 5f 0f 3c f5 00 0b 08 00 00 00 00 00 c9 35 31 8b 00 00 00 00 d1 64 7a 97 fe 79 fe 10 07 ae 07 Data Ascii: dcHV;,C4pV\|$\|k'y4X<m6vR\k7ypSFqS/u\lui380dIHc}S!\|K+96KS[z2x9'kW_H#_<51dzy
2024-10-31 13:50:11 UTC	84	IN	Data Raw: 06 d1 41 4c 10 1b c4 05 f1 41 82 42 ee bb e3 ae 7b ff c6 92 57 9a 93 c3 5e 9a 97 69 60 e0 e8 c2 99 5f 96 5a 54 9c 9c 5f 94 ca e2 5a 5a 94 0f 12 76 73 32 30 84 d2 46 3c 69 f9 a5 45 c5 a5 05 a9 45 99 f9 45 50 41 63 28 6d c2 94 96 06 00 1d 0d 78 b0 00 00 Data Ascii: ALAB{W^i`_ZT_ZZvs20F<iEEEPAc(mx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	626	OUT	GET /fa-regular-400.b041b1fa4fe241b23445.woff2 HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	396	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "5fa8-625864f35c1c2" Accept-Ranges: bytes Content-Length: 24488 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: font/woff2 X-STG-FE: 10.4.1.72:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	4039	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 5f a8 00 0a 00 00 00 00 ec e8 00 00 5f 5d 03 04 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 86 50 00 af 00 ca 83 96 68 cb 83 2c 05 88 08 07 20 85 73 76 55 21 3d 6f a5 3d 44 54 d4 7a 38 23 39 69 f5 00 a8 6a 95 10 77 87 bd 2a 7e fd f1 d7 3f ff fd 33 70 5c 8f 75 de 3c 3c ff 7f 7e b5 4e 0a d2 e3 bd 05 20 65 be 02 d1 ed b4 cc af 9e 99 8c e4 9d 16 21 e2 69 fb cd 47 fb 80 87 1d 89 18 9d c9 2e 77 46 41 10 3f 0e fa d9 53 07 43 17 13 88 48 34 38 59 fa 8e 60 3a bc 3d fd ff a8 9a fd bd 0f c4 7b 20 09 bc 87 fa 40 91 1d 20 01 4a 94 44 90 14 01 4a 1a 59 9c 89 3d cd 29 9a 49 73 ba b6 3b bb 3e 63 ed 54 67 db 28 dd d9 aa b4 6a a5 f9 78 bb d3 3a b7 75 6f f9 a5 3b ad fb 37 65 e7 17 f8 27 5c eb ab Data Ascii: wOF2__]8$ `Ph, svU!=o=DTz8#9ijw*~?3p\u<<~N e!iG.wFA?SCH48Y`:={ @ JDJY=)Is;>cTg(jx:uo;7e'\
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 4b df a3 8c b2 28 8e e2 69 46 d9 88 32 4f fa d2 4f b3 34 9b 46 71 14 03 59 5b 3b 7d 7a 6d 8d 84 2f 7d 9c b4 da 88 ed 56 92 46 20 69 38 7c f4 39 c0 76 2b 39 a4 66 34 00 5f 3d c0 2b 63 0b db 88 23 81 d4 97 bb 68 8d d0 d9 46 ec 23 eb 1d ba a1 9f b7 8a dc 39 bd 27 09 91 e7 cf 4b 42 e4 1e 5e e6 8c b2 b9 e1 5a a5 e5 fc 63 44 41 ac 81 97 ea 4e ce e5 e5 51 81 c2 71 d2 6c f9 24 a9 06 70 3b 51 06 af 94 9a de b2 d2 e8 5a 16 e7 dd c1 29 76 47 3f 26 b8 7a f5 9f b5 cb 16 df 32 a9 5a fe e7 3a 62 b5 16 33 3c c0 7a 97 73 cb 0a 07 48 e2 fe 1d 3b 2b ef 69 f8 28 b8 28 ff 79 bd 1f d7 aa d8 be 4e 38 db d8 91 3a 27 54 fa 94 51 16 06 71 34 c4 69 d2 25 fd 49 9a f5 21 19 a9 9f 3d 08 44 22 98 94 96 df da 9f f5 22 c4 a8 37 7b 51 b3 b2 c4 51 b3 bd 32 b1 3a 2f ea fa 15 c4 8a df fd 49 Data Ascii: K(iF2OO4FqY[;}zm/}VF i8\|9v+9f4_=+c#hF#9'KB^ZcDANQql$p;QZ)vG?&z2Z:b3<zsH;+i((yN8:'TQq4i%I!=D""7{QQ2:/I
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 19 4b 77 59 6c bd b3 bc 53 37 f9 fa 15 9c 4e 92 d2 5b 25 21 f2 8a 55 d6 b1 78 ea d4 0b 59 5c e5 dc 8e 30 4c 3b 39 83 07 d7 8f 82 83 95 bb 88 94 44 d7 ed 17 6c 6e 11 4e 8f 48 32 d3 16 c6 2a ce b9 96 25 80 de 27 63 ce 0e da 53 ba 63 56 69 eb d3 b3 6c 07 f7 94 77 3a bf 19 3b 0b db 8b bf d4 df fa 34 4a bf c3 9a d2 b9 b2 2f f9 4b 9e 1e b3 d4 24 fd 89 89 cc 1b 86 13 5a 82 cb 1b 60 45 12 22 0f 76 88 35 d0 8c 7b 97 2f a3 d5 9f c9 8f 1b 1c 6e 9f c8 aa ad 0e 80 9f e3 b3 e9 df 91 66 d2 37 8e fa 59 69 86 7d b9 69 4a 97 65 3f 95 4f 62 d2 f9 bf 7a 30 aa 42 13 6d 1b 5a 86 da bc d9 7d e0 d1 10 4f 75 8a cc 97 59 3a c4 2c 8d 23 81 53 9b 56 79 ef 2d c2 31 4b ef 7a 3b e7 96 f5 4d 17 bf b6 5b 87 92 10 f9 f8 de bf 58 65 e1 fc c7 b7 5b 16 e7 df fc b7 5c ff b8 b6 e6 cc c0 58 84 Data Ascii: KwYlS7N[%!UxY\0L;9DlnNH2*%'cScVilw:;4J/K$Z`E"v5{/nf7Yi}iJe?Obz0BmZ}OuY:,#SVy-1Kz;M[Xe[\X
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: 41 d6 c1 2e b5 18 ad 1f e6 1a b5 28 e0 c3 ff 0d d9 0d 93 64 e7 de 74 e5 5f b0 db 4b 5d 7b d6 b3 66 f8 39 dd 74 44 9e e8 a6 23 1e 6c b5 5b 4b 03 d9 db b4 6a e7 1e 5f 26 f3 e0 f1 6a b5 ea 4a 2d 1c 96 8b cd ee fb e7 86 98 bd 25 c2 78 b5 39 39 c3 1a dd c6 7a b7 9e 6d 21 cd ce 95 b4 d7 45 ba 5a ec ac 16 0a 00 50 e2 23 1f 5e 04 03 48 60 0a 5b b0 0b 77 c3 59 78 30 9b 88 28 6e b2 2b 89 71 2e 1a f9 1f 7f ca 26 5e 38 f5 26 5e 38 dd c6 95 d6 59 38 9d 34 08 65 e1 74 12 7a af fc 28 9e 4e b2 70 3a f1 f4 ff 32 7d eb ea a0 6d d7 b2 05 66 71 74 7e 6f 6f 6f ef 70 7f ff 68 6f 6f 6f 6f 0f c5 7c 43 cf b9 c0 bd a3 fd 7d 4e b3 02 da 76 cd 4c 6e 43 3d 26 24 9c 0d 15 65 4f ff da 6c 76 7e fe cf d4 c9 6c 76 dc 17 38 9b cd 66 28 fa c7 b3 99 7e 06 9c 63 c5 0a 3c 0b 20 4b 7d 19 65 71 Data Ascii: A.(dt_K]{f9tD#l[Kj_&jJ-%x99zm!EZP#^H`[wYx0(n+q.&^8&^8Y84etz(Np:2}mfqt~ooophoooo\|C}NvLnC=&$eOlv~lv8f(~c< K}eq
2024-10-31 13:50:11 UTC	7240	IN	Data Raw: 44 d1 ef ef a1 40 db ae d5 6c 1b 35 ad 6f 97 f4 96 63 58 96 f7 d9 0d 93 7b 92 7b 92 21 c9 af a3 10 88 42 e0 75 4d db b2 98 67 06 2a f3 56 ce 84 36 70 80 51 9c 66 fa 1a 40 fd 34 c4 93 9d 4e 23 f9 59 4f f1 09 5e ca a2 78 07 b3 32 cf 50 16 ea 41 4b 27 d4 93 fe 2d a2 71 09 06 38 2f 54 a2 38 cd b6 d1 1c 98 8a 5d 7f 77 d6 c4 1b 49 49 ce 1f 18 f3 22 6f 07 ca 99 50 7c 67 bd 74 1b 0b f4 a4 fc 80 8d a8 97 8c 92 91 87 8d 5a 96 86 51 4c c3 20 a6 a5 83 be 43 c6 ea 38 41 eb 83 e7 a2 2b 9d 48 ff 96 b6 f6 2b 87 1d bd 28 f6 09 a7 e3 b1 7f ed c4 a4 b9 40 ce e2 a9 78 0f 1b ee fd 4d e0 e1 c5 0d 56 e6 9e 6c 2a b7 b1 61 a0 60 99 d1 19 50 ac 1a 6e 75 d9 28 a4 2c 0a 03 16 f5 0a 58 31 69 9f 22 f9 5f 2d 39 11 a2 50 67 20 8a 10 f4 4c 5c 6d 16 00 84 49 b1 71 b6 3b 6b 3a 71 d9 92 9c Data Ascii: D@l5ocX{{!BuMgV6pQf@4N#YO^x2PAK'-q8/T8]wII"oP\|gtZQL C8A+H+(@xMVla`Pnu(,X1i"_-9Pg L\mIq;k:q
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: ee b8 d1 f1 8f 4d c4 18 c7 f7 49 f7 e3 fb 38 5e 03 7c 0b f4 e7 47 06 c4 70 36 9d 65 51 ae 22 c7 41 db 89 ea d9 54 44 33 56 41 33 4d b4 b2 44 ea 14 51 1a 40 a1 da 43 6f a8 c9 88 74 93 43 26 40 a0 27 91 95 c8 5b 8c 5b 0d 30 d6 34 d5 9c 6e b4 06 95 30 ac 5b 2d e9 f9 49 03 9a 4b d5 20 d2 a8 e2 c1 74 a3 35 a8 aa a8 45 4d 43 f7 3a 96 a9 6b d0 92 d2 9f 6e 40 73 a9 5f d3 75 4d f3 7c 2d 1e 18 c6 da 9a e3 55 4c 28 00 80 09 e0 70 6c 18 ec ef 35 5b 37 0e 9c 15 aa 22 4d 07 07 5c 8d 10 1b 6b 80 89 07 9d ae ad 6b 00 e9 0a c1 06 00 a0 7a 50 9f 27 9a e0 7d d8 47 af 44 1f 44 cf a2 af 41 08 a9 bc 1c 99 83 48 b5 f1 80 9c d1 6a 83 75 0b 26 3a 9d 65 b1 08 85 0d 91 30 4d d5 8e 75 88 18 08 00 c1 70 92 1d a3 a4 24 ed 2d 6a bd b4 26 b8 45 79 0a 2f 51 29 38 4b b1 31 24 6a 65 49 38 Data Ascii: MI8^\|Gp6eQ"ATD3VA3MDQ@CotC&@'[[04n0[-IK t5EMC:kn@s_uM\|-UL(pl5[7"M\kkzP'}GDDAHju&:e0Mup$-j&Ey/Q)8K1$jeI8
2024-10-31 13:50:11 UTC	2896	IN	Data Raw: 46 a1 01 4a fe 87 04 19 e4 c2 b5 27 bf ea b2 10 d8 97 db 15 40 99 3f 59 07 f6 f6 74 9c 9a fc c9 87 5b 5e e3 6e 80 da 96 77 1b 5e eb e1 27 b9 99 62 7d 6f 3a 80 93 82 c1 26 fb 15 24 bb 0b 22 9b f4 10 5e 05 03 cb d1 17 a4 8e 3c 84 c0 9b f2 a6 66 92 c8 8b f2 a9 7c e8 0d 93 29 38 9a ec c2 e1 64 37 cb e0 30 cb 26 bb 70 30 d9 dd 83 a3 8a 38 4b 56 05 31 ef 76 bf 07 a1 b2 17 4b 8d 90 d8 51 93 9d d5 4d 95 ea 30 32 99 b1 02 a0 81 eb 42 47 36 28 22 ad d1 e1 87 0e 5f eb 26 b4 5c eb 8c c6 80 aa cd 2e cb c7 eb a1 19 e7 b9 4a e8 d6 99 06 ee 74 58 c1 0b 04 56 56 9e ce fa cf 60 0d 00 83 41 a8 66 58 ba ae eb 94 60 a8 c7 49 90 ad 6c ad ad b6 32 29 de 60 76 d1 f0 de 38 51 c4 e9 62 ec c0 95 3c b6 7d 76 bc 4d 93 5b ae aa 87 b2 3f 08 41 78 f9 6d 64 8b 9a 48 75 1d 63 0c 94 52 cb Data Ascii: FJ'@?Yt[^nw^'b}o:&$"^<f\|)8d70&p08KV1vKQM02BG6("_&\.JtXVV`AfX`Il2)`v8Qb<}vM[?AxmdHucR
2024-10-31 13:50:11 UTC	1448	IN	Data Raw: db aa 06 de bd 01 0f 95 b8 08 7c 35 c0 85 64 24 12 99 4c 22 a1 eb a3 c0 8c 13 01 a1 28 22 30 d4 d9 45 48 57 e7 d0 7d ba ef 22 c6 45 65 be ed 21 3e 5e 72 fb b9 d0 ff 16 c9 ec c5 de 97 aa 0a 62 d5 9d 99 4e ab cb 6a d5 5c c2 9c 15 7b 5b 9c 8a e6 22 b5 fc b7 41 52 32 ab 72 b8 ec 3b e7 6b 41 55 cc ea 7a bf 87 9c 47 e3 b6 c8 80 7b 45 32 f2 b7 42 47 ec a9 7e fa 3b 0b 85 98 af e0 c1 61 cb 5c 64 61 23 3f fa 9c ea 4a 8b ab 64 83 a2 39 fe 1a 9e 44 60 1a b1 5c 1e 28 e4 de 7b 17 dd 33 b8 8c 06 4b 5e e8 3a 6c 91 76 3c b7 b9 48 ab 68 7a 55 aa 91 68 2e 1f 51 20 5b 2a e7 f2 13 23 05 ac 4b 4b 5e ca 97 90 74 da e2 3c a0 2b 15 a3 0a d9 3a 5e 32 72 a7 fb 26 f0 7d d8 4d 12 aa 77 96 78 14 aa 8b af 91 b4 5b 94 66 b7 45 29 eb 7b cc 81 8e f5 d5 49 a7 90 01 98 13 c9 a8 c7 65 34 81 Data Ascii: \|5d$L"("0EHW}"Ee!>^rbNj\{["AR2r;kAUzG{E2BG~;a\da#?Jd9D`\({3K^:lv<HhzUh.Q [*#KK^t<+:^2r&}Mwx[fE){Ie4
2024-10-31 13:50:11 UTC	177	IN	Data Raw: 6c e0 06 5a 70 d0 c0 0a 9a d8 82 83 36 bc 54 a7 e7 06 b6 b0 0a 07 3e 9a 68 62 03 eb 68 c0 47 06 67 e1 bd 4b 93 7a e3 3e a7 af 8a 2a 0a c8 20 87 3c c6 51 46 11 79 14 50 86 83 01 d4 d2 b9 3e 1c cc bf 16 b7 8d 26 36 5f 59 7c e7 91 f2 27 e0 a0 82 0c 4a c1 05 8d c1 fb 2a be cc 5c 41 0d 2d 78 f0 30 8a 93 f0 70 f3 1a 02 3e 57 47 05 ce 07 c5 17 b6 f8 ce 76 ba f7 46 0b 8d 77 f3 8f f9 af da 5e c1 e0 bd 02 bc f6 10 9e ab 9c f3 0a a3 a3 d7 37 f5 1a 7c f8 d8 46 1b 13 c8 22 8b bb 1e 35 7e e3 b5 b3 4c 89 ac 8a cd e7 84 b6 1d fc 1f 03 03 00 Data Ascii: lZp6T>hbhGgKz>* <QFyP>&6_Y\|'J*\A-x0p>WGvFw^7\|F"5~L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	213.165.66.58	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	579	OUT	GET /exos/icons/exos-icon-font.woff?v=15 HTTP/1.1 Host: ce1.uicdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	474	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Content-Type: application/font-woff Content-Length: 43452 Connection: close Set-Cookie: DPX=v1:2W3RVElw+W:2t0sA5A8:67239928:de; Path=/; Expires=Thu, 31-Oct-24 14:50:11 GMT; HttpOnly; Secure; SameSite=Lax Server: Apache Last-Modified: Tue, 13 Aug 2024 10:59:35 GMT Cache-Control: max-age=31536000 Expires: Fri, 31 Oct 2025 11:46:09 GMT Access-Control-Allow-Origin: * X-Cache-Status: HIT Accept-Ranges: bytes
2024-10-31 13:50:11 UTC	15910	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 a9 bc 00 0b 00 00 00 01 20 3c 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 53 55 42 00 00 01 08 00 00 00 3b 00 00 00 54 20 8b 25 7a 4f 53 2f 32 00 00 01 44 00 00 00 42 00 00 00 56 3c 33 50 3e 63 6d 61 70 00 00 01 88 00 00 07 6c 00 00 11 a4 3d f5 51 5c 67 6c 79 66 00 00 08 f4 00 00 93 19 00 00 f1 ec 24 5c 0d 8c 68 65 61 64 00 00 9c 10 00 00 00 33 00 00 00 36 33 a3 1e e0 68 68 65 61 00 00 9c 44 00 00 00 20 00 00 00 24 12 ac 10 64 68 6d 74 78 00 00 9c 64 00 00 00 54 00 00 04 80 88 df ff df 6c 6f 63 61 00 00 9c b8 00 00 02 42 00 00 02 42 19 c8 d9 0c 6d 61 78 70 00 00 9e fc 00 00 00 1f 00 00 00 20 02 3d 02 2f 6e 61 6d 65 00 00 9f 1c 00 00 01 34 00 00 02 5e cb 36 cf 4f 70 6f 73 74 00 00 a0 50 00 00 09 Data Ascii: wOFF <GSUB;T %zOS/2DBV<3P>cmapl=Q\glyf$\head363hheaD $dhmtxdTlocaBBmaxp =/name4^6OpostP
2024-10-31 13:50:11 UTC	16384	IN	Data Raw: e0 a8 07 21 20 72 15 1d 68 c8 39 4b 3a 83 fa ad a7 a7 4f 9f be b9 db 3a f0 68 f7 f3 08 0d d4 66 aa 33 b5 bb ba 67 7f fd 58 cf 0b 88 d0 1e df 22 d9 5a b4 35 3a 11 57 a2 1e 7f 62 b9 6b 9b eb 10 f0 c8 6f 71 bd c3 e1 1f 72 f5 dd 74 e4 4b c1 37 d9 30 82 92 1b 73 11 3a 2b 8d bd 7c da 62 71 cc 0e 7a 47 2d 76 f7 21 e2 f8 6b 5e 67 16 56 81 4f 26 12 d3 89 44 2d 1e af 26 12 d5 78 dc fa 3d c0 7d 36 12 f9 9b 44 e2 19 27 f5 07 fb 11 da 41 ac c9 d6 4b 0d bb 32 f2 90 d4 b3 20 a0 4b 92 aa 4a e8 1c 39 36 4f 5b 43 73 45 a2 63 53 b0 a0 e0 cf fa cf 29 72 2b 1b 99 9a 3a 13 05 24 91 89 ee 85 bb 33 ef 5a 5c bc 5d e5 79 52 ce 94 a8 69 22 0a 91 e3 94 5d 6e 70 ee ee 5c 41 0d 5e ea 0c b5 c9 e1 a5 04 54 10 70 01 e1 1d d6 8f 0e a2 4e eb 1a d4 79 d0 fa 11 b5 c9 3a 8d 96 59 a7 c9 71 21 Data Ascii: ! rh9K:O:hf3gX"Z5:WbkoqrtK70s:+\|bqzG-v!k^gVO&D-&x=}6D'AK2 KJ96O[CsEcS)r+:$3Z\]yRi"]np\A^TpNy:Yq!
2024-10-31 13:50:11 UTC	11158	IN	Data Raw: 8d b7 1f b9 72 6a 45 73 13 cc e4 80 e7 8a ea b7 2f b9 e4 ce 4b 2e a1 2f a7 bd cf d9 ff b6 83 e6 2e 53 bc fa 50 0c a1 00 84 2d 87 3c 12 11 82 e1 a0 81 4c 34 75 63 86 00 a8 7d f2 d4 b5 e8 ce fb 77 f3 26 bf 27 ee 3f cd bc dd 7f 3a 87 56 32 4b 9a 17 a0 9d 4b b3 3c 8f 4e f8 7b d8 3d 02 7f 49 ca 7f 18 6d 2f f9 1f c0 f7 93 5b 18 ad 9c e2 db 41 ce 21 bb f5 8b 43 33 a1 73 43 97 86 8e 84 de 12 7a 47 e8 a1 d0 c7 43 5f 00 bd fb e7 41 a4 e1 42 82 44 e2 05 48 12 5f d7 e1 73 24 48 a3 1f b5 05 1a 17 d4 ea f6 67 1a 9b ea 2d 3c 5f 87 cf ff 6d 55 a7 c1 08 78 0e 05 81 08 3e d7 5f e3 f3 ff a8 2a 22 00 91 a2 e5 42 fb 73 50 75 b9 c0 b7 6e 45 98 f4 f7 88 be 01 eb ee 29 78 3d f5 35 cd 95 39 2b e6 e9 51 ac 06 e2 05 91 34 f6 2d 90 4b f6 ce cb 25 e3 7f b6 e4 9c 8c b2 4f fb cb 0a ce Data Ascii: rjEs/K./.SP-<L4uc}w&'?:V2KK<N{=Im/[A!C3sCzGC_ABDH_s$Hg-<_mUx>_*"BsPunE)x=59+Q4-K%O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49752	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	632	OUT	GET /OpenSans-Bold-webfont.b57886ecb84a5d8aa715.woff HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hidrive.ionos.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:11 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "3770-625864f358b59" Accept-Ranges: bytes Content-Length: 14192 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: font/woff X-STG-FE: 10.4.1.72:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	4040	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 37 70 00 0f 00 00 00 00 5f 40 00 01 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 47 44 45 46 00 00 01 58 00 00 00 16 00 00 00 16 00 10 00 dd 47 50 4f 53 00 00 01 70 00 00 00 0c 00 00 00 0c 00 15 00 0a 47 53 55 42 00 00 01 7c 00 00 00 59 00 00 00 74 dd ce de 9b 4f 53 2f 32 00 00 01 d8 00 00 00 60 00 00 00 60 a2 75 a1 18 63 6d 61 70 00 00 02 38 00 00 00 98 00 00 00 cc af 0d b3 9d 67 61 73 70 00 00 02 d0 00 00 00 0c 00 00 00 0c 00 08 00 1b 67 6c 79 66 00 00 02 dc 00 00 24 13 00 00 34 ba 37 d5 d2 d4 68 65 61 64 00 00 26 f0 00 00 00 36 00 00 00 36 00 4b f6 6d 68 68 65 61 00 00 27 28 00 00 00 1e 00 00 00 24 0f 15 05 9b 68 6d 74 78 00 00 27 48 00 00 02 02 00 00 03 6c eb 94 4d a5 6b 65 72 6e 00 00 29 4c 00 00 0a Data Ascii: wOFF7p_@GDEFXGPOSpGSUB\|YtOS/2``ucmap8gaspglyf$47head&66Kmhhea'($hmtx'HlMkern)L
2024-10-31 13:50:11 UTC	5792	IN	Data Raw: 14 79 8f 82 ca 02 2d c9 01 1f 1c dc 99 fe 40 3b 43 18 1f 4b 62 1a f3 ac 27 89 37 bf 98 51 f4 91 f3 6a 39 92 1a e5 cc 51 2b a4 35 1c 23 87 ad 51 c2 eb d6 20 52 5d c5 3f 02 ee 54 a3 0b 8e 2e a0 65 24 5d 9e 37 69 28 06 79 92 4e df 80 9b d7 ae d1 32 b1 fe 42 fd 4e 7c c0 a2 94 ad f2 c1 c9 02 10 2d 7d 60 bd 2a ab 17 9f 1b 10 8b 46 c6 a2 31 38 eb 8c 88 c9 70 f5 2a dc a4 6f a4 29 22 2f bc 10 19 0e 07 e2 20 0c 52 1c 91 b3 17 03 e8 00 1c 60 ff 4a 78 fc 18 57 91 bb c4 81 df df 68 26 79 d6 6c 8c a8 8d b4 8c b7 34 85 70 bc bc 67 e4 2d 8d bb 78 dc 03 2f 63 c4 47 09 97 f9 e5 a2 56 d2 07 1a b5 51 eb a6 51 93 e3 43 9e 05 41 d4 90 9d c2 e5 3e 95 81 ea a4 53 9d 99 8f 45 a1 2f 0c 10 32 a4 0a 04 a7 d5 37 27 9f 98 60 18 fd ec 89 90 33 b0 44 48 4a 4c f8 c9 03 1c 42 b7 e5 7d 71 Data Ascii: y-@;CKb'7Qj9Q+5#Q R]?T.e$]7i(yN2BN\|-}`F18po)"/ R`JxWh&yl4pg-x/cGVQQCA>SE/27'`3DHJLB}q
2024-10-31 13:50:11 UTC	4344	IN	Data Raw: 46 30 48 a7 bd 4d ec e8 3a 79 9e 5d 4b 73 21 f7 61 36 5d 27 b6 31 76 cc 21 d7 37 6c d8 44 86 59 cf 6e 8f 4a 78 7d 9a e6 a8 8c db c1 d1 8e 5b cf 85 30 dc 8c b6 e8 dd 4c db 81 7b c5 73 4b cb 73 71 45 2b de e4 e7 c0 b2 75 a8 95 67 c0 20 9f a6 63 da 67 59 0f 6b 8b 2b a5 fc fe 67 5b f6 34 4f ca fb bf 44 f8 dd 56 f0 8c a6 09 0c de c4 fa 90 8a 56 f0 63 f4 b6 04 b7 e2 f8 af 95 51 76 78 0a 83 ff 3f 08 67 df 39 00 00 01 00 00 00 01 19 9a f0 80 19 da 5f 0f 3c f5 00 0b 08 00 00 00 00 00 c9 42 17 a0 00 00 00 00 d1 64 7a ae fe 77 fe 14 08 0e 07 73 00 01 00 09 00 02 00 00 00 00 00 00 78 01 63 60 64 60 e0 e8 fd bb 02 48 2e f8 57 fe af 92 83 0f 28 82 0a 6e 02 00 98 4e 06 c0 00 00 78 01 6d 91 03 ac 18 41 10 86 ff db 9d dd bb da b6 6d 1b 41 6d db b6 6d 5b 51 bd 75 83 22 6a Data Ascii: F0HM:y]Ks!a6]'1v!7lDYnJx}[0L{sKsqE+ug cgYk+g[4ODVVcQvx?g9_<Bdzwsxc`d`H.W(nNxmAmAmm[Qu"j
2024-10-31 13:50:11 UTC	16	IN	Data Raw: 50 41 63 28 6d c2 94 96 06 00 1d 0d 78 b0 00 00 Data Ascii: PAc(mx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49755	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:11 UTC	593	OUT	GET /api/sharelink/info?id=FamigcCEF HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:11 UTC	340	IN	HTTP/1.1 200 OK Server: stgproxy Date: Thu, 31 Oct 2024 13:50:11 GMT Content-Type: application/json Content-Length: 39 Connection: close Cache-Control: max-age=0, no-store, public X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.59:50580 X-STG-FE: 10.4.1.58:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:11 UTC	39	IN	Data Raw: 7b 22 69 64 22 3a 22 46 61 6d 69 67 63 43 45 46 22 2c 22 68 61 73 5f 70 61 73 73 77 6f 72 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"id":"FamigcCEF","has_password":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49761	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:12 UTC	622	OUT	GET /v146/images/static/favicon.ico HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:12 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:12 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:04 GMT ETag: "1d726-625864f322137" Accept-Ranges: bytes Content-Length: 120614 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: image/x-icon X-STG-FE: 10.4.1.54:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:12 UTC	1139	IN	Data Raw: 00 00 01 00 08 00 10 10 00 00 01 00 08 00 68 05 00 00 86 00 00 00 18 18 00 00 01 00 08 00 c8 06 00 00 ee 05 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 b6 0c 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 5e 15 00 00 40 40 00 00 01 00 08 00 28 16 00 00 06 24 00 00 60 60 00 00 01 00 08 00 a8 2c 00 00 2e 3a 00 00 80 80 00 00 01 00 08 00 28 4c 00 00 d6 66 00 00 00 00 00 00 01 00 08 00 28 24 01 00 fe b2 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 f6 f2 f1 00 ed e6 e2 00 c6 b2 a5 00 bc a3 96 00 b3 96 86 00 aa 89 77 00 9f 7b 67 00 78 43 25 00 6d 34 13 00 63 25 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h 00^@@($``,.:(Lf($( @w{gxC%m4c%
2024-10-31 13:50:12 UTC	2896	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 06 02 08 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 00 00 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 03 00 01 09 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 00 00 05 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 05 00 01 09 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 09 01 00 05 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 05 00 01 09 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 09 01 00 04 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 05 00 00 08 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 09 01 00 03 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a Data Ascii:
2024-10-31 13:50:12 UTC	5792	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-31 13:50:12 UTC	1448	IN	Data Raw: 4d 33 00 7d 4d 32 00 7b 4b 31 00 7a 49 2e 00 79 48 2d 00 77 45 2d 00 73 40 25 00 72 3f 23 00 72 3e 25 00 71 3e 21 00 70 3c 21 00 6d 38 1b 00 6c 37 1a 00 6a 34 17 00 6a 33 16 00 6a 33 15 00 69 32 14 00 68 31 13 00 67 30 12 00 66 2d 0f 00 65 2d 0e 00 65 2c 11 00 65 2c 10 00 64 2c 0e 00 64 2c 0c 00 64 2b 0e 00 64 2b 0d 00 64 2b 0c 00 63 2b 0c 00 64 2b 0b 00 63 2b 0b 00 63 2a 0d 00 63 2a 0c 00 63 2a 0b 00 63 2a 0a 00 63 29 0a 00 62 29 0a 00 62 29 09 00 62 28 09 00 61 28 09 00 61 27 0c 00 62 28 08 00 61 28 08 00 61 27 0b 00 61 27 0a 00 61 27 08 00 61 27 07 00 60 27 07 00 60 26 08 00 60 26 07 00 60 26 06 00 5f 25 07 00 5f 25 06 00 5f 25 05 00 5f 24 05 00 5f 24 04 00 5e 24 04 00 5e 23 07 00 5e 24 03 00 5e 23 06 00 5e 23 05 00 5e 23 04 00 5e 23 03 00 5d 22 06 00 Data Ascii: M3}M2{K1zI.yH-wE-s@%r?#r>%q>!p<!m8l7j4j3j3i2h1g0f-e-e,e,d,d,d+d+d+c+d+c+ccccc)b)b)b(a(a'b(a(a'a'a'a'`'`&`&`&_%_%_%_$_$^$^#^$^#^#^#^#]"
2024-10-31 13:50:12 UTC	7240	IN	Data Raw: ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae ae Data Ascii:
2024-10-31 13:50:13 UTC	11584	IN	Data Raw: b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 Data Ascii:
2024-10-31 13:50:13 UTC	13032	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:13 UTC	10136	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:13 UTC	4344	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:13 UTC	16384	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49763	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:12 UTC	372	OUT	GET /api/sharelink/info?id=FamigcCEF HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:13 UTC	340	IN	HTTP/1.1 200 OK Server: stgproxy Date: Thu, 31 Oct 2024 13:50:12 GMT Content-Type: application/json Content-Length: 39 Connection: close Cache-Control: max-age=0, no-store, public X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.39:50580 X-STG-FE: 10.4.1.53:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:13 UTC	39	IN	Data Raw: 7b 22 69 64 22 3a 22 46 61 6d 69 67 63 43 45 46 22 2c 22 68 61 73 5f 70 61 73 73 77 6f 72 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"id":"FamigcCEF","has_password":false}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:12 UTC	700	OUT	POST /api/sharelink/info HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive Content-Length: 84 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hidrive.ionos.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:12 UTC	84	OUT	Data Raw: 69 64 3d 46 61 6d 69 67 63 43 45 46 26 66 69 65 6c 64 73 3d 6e 61 6d 65 25 32 43 74 79 70 65 25 32 43 73 69 7a 65 25 32 43 74 74 6c 25 32 43 72 65 6d 61 69 6e 69 6e 67 25 32 43 6d 69 6d 65 5f 74 79 70 65 25 32 43 73 74 72 65 61 6d 69 6e 67 5f 75 72 6c Data Ascii: id=FamigcCEF&fields=name%2Ctype%2Csize%2Cttl%2Cremaining%2Cmime_type%2Cstreaming_url
2024-10-31 13:50:13 UTC	373	IN	HTTP/1.1 200 OK Server: stgproxy Date: Thu, 31 Oct 2024 13:50:12 GMT Content-Type: application/json Content-Length: 177 Connection: close Cache-Control: max-age=0, no-store, public Access-Control-Allow-Origin: * X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.62:50580 X-STG-FE: 10.4.1.51:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:13 UTC	177	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 42 75 73 69 6e 65 73 73 25 32 30 61 6e 64 25 32 30 46 69 6e 61 6e 63 69 61 6c 25 32 30 44 65 74 61 69 6c 73 2e 7a 69 70 22 2c 22 73 74 72 65 61 6d 69 6e 67 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 68 69 64 72 69 76 65 2e 69 6f 6e 6f 73 2e 63 6f 6d 2f 64 6c 2f 69 45 47 53 37 54 6d 54 67 35 63 54 57 4c 52 6e 6c 63 6e 63 22 2c 22 74 79 70 65 22 3a 22 66 69 6c 65 22 2c 22 73 69 7a 65 22 3a 31 37 36 37 31 33 2c 22 6d 69 6d 65 5f 74 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 7a 69 70 22 7d Data Ascii: {"name":"Business%20and%20Financial%20Details.zip","streaming_url":"https://hidrive.ionos.com/dl/iEGS7TmTg5cTWLRnlcnc","type":"file","size":176713,"mime_type":"application/zip"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:14 UTC	359	OUT	GET /api/sharelink/info HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:14 UTC	349	IN	HTTP/1.1 400 Bad Request Server: stgproxy Date: Thu, 31 Oct 2024 13:50:14 GMT Content-Type: application/json Content-Length: 95 Connection: close Cache-Control: max-age=0, no-store, public X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.73:50580 X-STG-FE: 10.4.1.36:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:14 UTC	95	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 3a 20 4d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 20 27 69 64 27 20 6d 69 73 73 69 6e 67 20 69 6e 20 63 61 6c 6c 20 74 6f 20 2f 73 68 61 72 65 6c 69 6e 6b 2f 69 6e 66 6f 22 2c 22 63 6f 64 65 22 3a 22 34 30 30 22 7d Data Ascii: {"msg":"Bad Request: Mandatory parameter 'id' missing in call to /sharelink/info","code":"400"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:14 UTC	371	OUT	GET /v146/images/static/favicon.ico HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:14 UTC	400	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:14 GMT Server: Apache Last-Modified: Mon, 28 Oct 2024 09:44:05 GMT ETag: "1d726-625864f368bc9" Accept-Ranges: bytes Content-Length: 120614 X-STG-HDFRONT-VER: hdfront-20, hdfrontconf-41, hdfront-ionos-200146 Connection: close Content-Type: image/x-icon X-STG-FE: 10.4.1.36:30280 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:14 UTC	4035	IN	Data Raw: 00 00 01 00 08 00 10 10 00 00 01 00 08 00 68 05 00 00 86 00 00 00 18 18 00 00 01 00 08 00 c8 06 00 00 ee 05 00 00 20 20 00 00 01 00 08 00 a8 08 00 00 b6 0c 00 00 30 30 00 00 01 00 08 00 a8 0e 00 00 5e 15 00 00 40 40 00 00 01 00 08 00 28 16 00 00 06 24 00 00 60 60 00 00 01 00 08 00 a8 2c 00 00 2e 3a 00 00 80 80 00 00 01 00 08 00 28 4c 00 00 d6 66 00 00 00 00 00 00 01 00 08 00 28 24 01 00 fe b2 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 08 00 00 00 00 00 40 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 f6 f2 f1 00 ed e6 e2 00 c6 b2 a5 00 bc a3 96 00 b3 96 86 00 aa 89 77 00 9f 7b 67 00 78 43 25 00 6d 34 13 00 63 25 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: h 00^@@($``,.:(Lf($( @w{gxC%m4c%
2024-10-31 13:50:14 UTC	5792	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-31 13:50:14 UTC	7240	IN	Data Raw: 4d 33 00 7d 4d 32 00 7b 4b 31 00 7a 49 2e 00 79 48 2d 00 77 45 2d 00 73 40 25 00 72 3f 23 00 72 3e 25 00 71 3e 21 00 70 3c 21 00 6d 38 1b 00 6c 37 1a 00 6a 34 17 00 6a 33 16 00 6a 33 15 00 69 32 14 00 68 31 13 00 67 30 12 00 66 2d 0f 00 65 2d 0e 00 65 2c 11 00 65 2c 10 00 64 2c 0e 00 64 2c 0c 00 64 2b 0e 00 64 2b 0d 00 64 2b 0c 00 63 2b 0c 00 64 2b 0b 00 63 2b 0b 00 63 2a 0d 00 63 2a 0c 00 63 2a 0b 00 63 2a 0a 00 63 29 0a 00 62 29 0a 00 62 29 09 00 62 28 09 00 61 28 09 00 61 27 0c 00 62 28 08 00 61 28 08 00 61 27 0b 00 61 27 0a 00 61 27 08 00 61 27 07 00 60 27 07 00 60 26 08 00 60 26 07 00 60 26 06 00 5f 25 07 00 5f 25 06 00 5f 25 05 00 5f 24 05 00 5f 24 04 00 5e 24 04 00 5e 23 07 00 5e 24 03 00 5e 23 06 00 5e 23 05 00 5e 23 04 00 5e 23 03 00 5d 22 06 00 Data Ascii: M3}M2{K1zI.yH-wE-s@%r?#r>%q>!p<!m8l7j4j3j3i2h1g0f-e-e,e,d,d,d+d+d+c+d+c+ccccc)b)b)b(a(a'b(a(a'a'a'a'`'`&`&`&_%_%_%_$_$^$^#^$^#^#^#^#]"
2024-10-31 13:50:14 UTC	8688	IN	Data Raw: b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 b9 Data Ascii:
2024-10-31 13:50:15 UTC	10136	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-31 13:50:15 UTC	11584	IN	Data Raw: 08 00 00 00 0c 06 00 00 00 00 08 10 00 00 00 00 08 10 10 10 10 10 10 10 10 00 00 00 00 08 10 10 10 10 0c 00 00 00 00 0c 10 10 10 10 10 10 10 10 10 06 00 00 00 00 00 06 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 00 00 00 00 04 10 10 10 10 10 10 10 10 08 00 00 00 00 10 10 10 10 10 04 00 00 00 04 10 10 10 10 10 10 10 10 08 00 00 02 0e 00 00 00 00 01 0f 10 00 00 00 00 08 10 10 10 10 10 10 10 10 00 00 00 00 08 10 10 10 10 0c 00 00 00 00 0c 10 10 10 10 10 10 10 10 06 00 00 00 00 00 06 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 00 00 00 00 04 10 10 10 10 10 10 10 10 08 00 00 00 00 10 10 10 10 10 04 00 00 00 04 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:15 UTC	13032	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:15 UTC	14480	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:15 UTC	7240	IN	Data Raw: 10 10 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 08 00 00 00 00 00 00 00 00 00 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 06 00 00 00 00 00 00 00 00 00 00 03 08 09 08 04 00 00 00 00 00 00 00 00 00 00 03 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 04 00 00 00 00 00 00 00 00 10 10 10 10 10 10 10 10 10 10 10 08 00 00 00 00 00 00 00 00 00 0a 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 06 00 00 00 00 00 00 00 00 00 00 03 08 09 08 04 00 00 00 00 00 00 00 00 00 00 03 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:
2024-10-31 13:50:15 UTC	1448	IN	Data Raw: 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 08 00 00 00 00 00 00 00 00 00 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 08 00 00 00 00 00 00 00 00 0c 10 10 10 10 10 10 10 10 10 10 00 00 00 00 00 00 00 00 04 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 04 00 00 00 08 10 0f 01 00 00 00 00 00 00 00 00 02 10 10 10 10 10 10 04 00 00 00 00 00 00 00 00 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 08 00 00 00 00 00 00 00 00 0c 10 10 10 10 10 10 10 10 10 10 00 00 00 00 00 00 00 00 04 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 01 00 00 00 00 00 00 00 00 00 03 0f 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49772	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:28 UTC	752	OUT	GET /api/sharelink/download?id=FamigcCEF HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:29 UTC	423	IN	HTTP/1.1 200 OK Server: stgproxy Date: Thu, 31 Oct 2024 13:50:29 GMT Content-Type: application/zip Content-Length: 176713 Connection: close Content-Disposition: attachment; filename="Business and Financial Details.zip" Cache-Control: max-age=0, no-store, public X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.74:50580 X-STG-FE: 10.4.1.39:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:29 UTC	1101	IN	Data Raw: 50 4b 03 04 14 00 00 08 00 00 8b 6c 5f 59 00 00 00 00 00 00 00 00 00 00 00 00 1f 00 00 00 42 75 73 69 6e 65 73 73 20 61 6e 64 20 46 69 6e 61 6e 63 69 61 6c 20 44 65 74 61 69 6c 73 2f 50 4b 03 04 14 00 00 08 08 00 2a 6c 5f 59 c2 27 61 b1 cb b0 02 00 05 d8 35 00 49 00 00 00 42 75 73 69 6e 65 73 73 20 61 6e 64 20 46 69 6e 61 6e 63 69 61 6c 20 44 65 74 61 69 6c 73 2f 42 75 69 6c 64 69 6e 67 20 50 6c 61 6e 20 61 6e 64 20 50 72 6f 70 65 72 74 79 20 64 65 74 61 69 6c 73 2e 70 64 66 2e 68 74 6d ec bd 6b 6f eb b6 f6 ff f9 7c 80 79 0f ff 79 10 cc 00 07 4a e4 bb 33 f8 63 80 c4 bb 69 0b f4 86 66 f7 14 bf 47 81 2c d3 b6 76 64 cb 95 e4 5c f6 ab 1f 5e 25 52 22 65 c9 4e 9c dd f6 7b 4e db 58 12 49 89 b7 c5 b5 3e 5c 24 ff 77 16 a6 d1 2e ff ff fe cf ff e3 7f ff 5f 9e f7 bf Data Ascii: PKl_YBusiness and Financial Details/PK*l_Y'a5IBusiness and Financial Details/Building Plan and Property details.pdf.htmko\|yyJ3cifG,vd\^%R"eN{NXI>\$w._
2024-10-31 13:50:29 UTC	2896	IN	Data Raw: fc 33 d9 50 ed 24 27 17 93 99 d1 46 27 33 b3 ad 15 d7 ae 3a 71 05 e8 36 9e 6c a2 ad b7 d6 e4 61 4f 4a 05 b3 b9 f0 16 a3 92 d7 07 b4 d0 a3 23 d8 5a a9 2f 54 3e f0 01 cd 0f bd 6c 15 53 41 12 3e f2 0b aa 97 d1 81 25 7d f5 f4 2f a4 72 6e 93 85 89 d2 ef ca cb b2 20 65 8e 97 49 92 8b 01 93 87 bc 12 05 2a cb 33 bb da 0c c6 23 2f a3 2a 12 d9 25 34 90 7a 07 1b 7e 96 69 b2 b9 27 e9 53 a4 a4 e9 5d 10 67 fa 1b 36 c1 2a 0a 95 d2 95 ee 49 f9 69 a5 e6 c9 74 37 ae 40 66 e1 9a 6c 82 cb 24 5d 5d fd 9a ae 82 6d f4 55 53 8b da 16 f8 22 ca 68 fd cb 31 79 4e 75 d6 47 59 11 41 ba a2 75 91 27 3b 53 3c 5b 2a 42 74 5d ad 16 68 9e 37 84 8d 8c 6b a6 53 7c c9 bc 55 9c cc 83 98 97 1f 2b 05 2f 8c 93 8c 2c 84 de aa 3d f3 58 ad 1d db b9 ff 50 cd 8e 2b 00 ac cc 1f 44 72 dd 3a 3a d3 84 03 Data Ascii: 3P$'F'3:q6laOJ#Z/T>lSA>%}/rn eI3#/%4z~i'S]g6Iit7@fl$]]mUS"h1yNuGYAu';S<[Bt]h7kS\|U+/,=XP+Dr::
2024-10-31 13:50:29 UTC	2896	IN	Data Raw: 90 26 49 ce f5 5a 7e c5 77 1a 7b e0 3b 8d 3d 14 fb c1 c9 67 cb 24 dc 67 0f ca 08 e9 96 93 63 36 2b b5 87 f1 f9 cc 92 ff 3b 59 ed e3 a0 5a e9 ae 38 f7 af 9b 79 4d a3 eb b0 01 6a 79 7d 7b 7b 13 ef d6 2c dc 3d 5f 7d e9 7c fd d8 77 84 69 d8 3d 95 4f e4 af ed b6 e0 61 0f 9f c0 d0 98 79 95 6d 68 cf 78 a0 ca d2 6a a5 88 92 a5 01 10 aa 2f df f3 8a 2c 9b 81 1e a5 46 27 98 b7 02 ab e0 0b e9 2a f3 9a ec 59 33 91 3a 8c 88 94 53 33 46 6d 26 fd c0 da ea a1 f6 22 3d 78 e9 ed 8b 8a ed d1 e8 0c ad 97 56 69 31 56 18 b4 f9 c0 1e 45 be df e6 e9 a5 9e d9 36 57 b5 3b 8d 55 31 52 69 b1 bb 7d b3 dd ae 20 e8 3d ad 7a 8f 93 6b 48 58 51 ab 5b 2b d7 74 00 9e 46 6f f8 43 be 79 6d 1d d0 db 2a 6b 35 3d 2d dd d3 df 22 e5 fe 88 7d c5 a8 7f c7 ff 53 7b 07 bf 2b 3d 15 e8 af ca 7e 53 f4 4e Data Ascii: &IZ~w{;=g$gc6+;YZ8yMjy}{{,=_}\|wi=Oaymhxj/,F'Y3:S3Fm&"=xVi1VE6W;U1Ri} =zkHXQ[+tFoCymk5=-"}S{+=~SN
2024-10-31 13:50:29 UTC	2896	IN	Data Raw: 60 ef e3 a7 65 d9 44 3e 8c 49 90 2e a3 17 8d 19 9d e4 b0 de ec ff a3 bb 77 89 7c 33 e5 42 5a e1 7d 5f b4 22 ad 52 d8 16 08 cc e6 10 31 16 24 7b 2c b6 06 6b f0 27 12 19 fc 78 bf 22 f7 e4 af ed 50 b1 ea 2a ce 46 63 a0 fb ca fa 62 1f f9 fd 9c b9 1d 1c f4 a1 75 85 eb 24 56 2a 89 7c 90 7c 1f b4 15 23 83 6f 41 be df 8b 32 23 e9 1d e1 9e eb de ee e5 e9 4b fc 78 68 a6 f7 50 1d 90 74 29 d2 3b 5d bc 57 bf f0 08 c9 de ba 4a da 4a f6 c1 e9 92 dd 6c ac 4e b1 ee ac 1f 67 88 f7 14 e6 36 af d9 a2 c6 bd a5 fe 01 35 df 5c f5 da 66 df da cf 9d d7 2c 99 fe 71 23 03 61 3a c7 07 6d a1 2d 9b e7 08 f3 ad 43 ce 17 04 88 ad 9f 08 1f 5b 38 3d 1d 60 41 6a 05 f4 58 d2 9f ff 70 69 cc a7 06 8d 19 d1 b6 84 68 3c b9 1c 0e 26 4d 27 4f 56 42 d4 06 9f 86 e9 fa f6 be aa 6a d7 19 3f 54 0d 82 Data Ascii: `eD>I.w\|3BZ}_"R1${,k'x"PFcbu$V\|\|#oA2#KxhPt);]WJJlNg65\f,q#a:m-C[8=`AjXpih<&M'OVBj?T
2024-10-31 13:50:29 UTC	4344	IN	Data Raw: 66 d1 18 29 59 96 9a 46 c6 55 8d e7 e7 e7 cb 8d 6a a2 97 61 b2 b9 a2 fd 7d 35 bf 2a ee 79 b2 67 b8 bb 25 2d 90 ed 1b e8 25 d5 b1 67 7a 10 ae d5 32 eb 0d 5a 00 d2 79 45 b3 bc d9 ed 98 0e cd 70 72 48 0d ef 15 f1 b6 e4 99 37 49 77 32 55 c9 c1 f0 17 2b 05 4e b6 ae 02 f9 b7 81 cc 71 29 a0 0b 33 6f e5 6d 95 ff 58 55 4e cd 84 ca bb e7 1a d0 86 6c f7 16 91 27 86 a8 ed f1 2e 68 33 a9 3a b3 66 4d c5 d6 79 35 ac 69 37 01 37 3d 9b 80 73 36 56 5b 8f 54 1c 84 a5 28 06 66 03 fb 97 37 c4 bf e5 90 9e 50 fd 96 a6 f8 2c 9e 2b 8f 05 77 27 6f 14 44 75 fd ab 69 6a ca 69 86 a9 96 ba 8f cd a6 46 95 7e 96 0c eb 32 cc 90 3a 03 a6 b7 23 f7 38 ca 2a 1c 6f db a8 ed f0 cc c4 91 99 99 8c a6 1b 33 83 66 cb ec 47 9a 35 da f4 3d d1 c3 18 31 e5 3f 79 3e bb 65 93 b3 b2 79 4a 82 47 d9 70 d8 Data Ascii: f)YFUja}5yg%-%gz2ZyEprH7Iw2U+Nq)3omXUNl'.h3:fMy5i77=s6V[T(f7P,+w'oDuijiF~2:#8o3fG5=1?y>eyJGp
2024-10-31 13:50:29 UTC	5792	IN	Data Raw: 4c f4 2b e4 f1 18 ec a9 9a 10 a4 1a 05 07 5e 52 6c f2 92 08 d9 16 43 31 9b 05 61 57 bb b9 e7 fb 1e ed af f2 32 37 2e 1b 34 10 9b a6 c1 6e f2 32 f7 16 b4 45 27 2b 4f df eb bc aa 82 fc 19 e4 7c 8f 28 a1 5a a8 aa 0a e6 42 58 ae a9 f0 ed fb bf a6 ab 60 1b 85 19 17 ff ec 05 d4 82 66 5d 33 e3 de 55 ba 12 72 a4 d6 d1 ef a2 75 f4 3f 5e eb e0 9b 53 52 bd e3 75 f6 f9 c6 ae 6e f0 42 f8 92 a9 1a c8 58 41 ca 7e c1 23 7f e2 f7 8b 55 e7 5e c7 36 df 55 4b 91 32 b5 e7 2b 8b 76 3a 7c 43 1d c5 1c e9 d5 a0 52 ae 85 93 0b 27 93 e5 92 2f 87 e0 36 c5 c0 a1 d7 e8 9b 30 1e 50 5f dc ea 81 5b 49 a9 aa 3c 46 a9 da 00 81 ef b4 63 7b 97 83 16 9a 40 55 53 91 4b 46 7d a5 98 88 df a7 29 50 55 b0 d9 2f 57 ad 38 87 fc 0e 1b b2 77 63 c0 35 09 5b da 9f b5 68 3a 4a 98 38 b7 8b d2 c7 e1 2f c1 Data Ascii: L+^RlC1aW27.4n2E'+O\|(ZBX`f]3Uru?^SRunBXA~#U^6UK2+v:\|CR'/60P_[I<Fc{@USKF})PU/W8wc5[h:J8/
2024-10-31 13:50:29 UTC	1448	IN	Data Raw: c0 13 dc ce dc 19 ed 38 cc 76 23 a4 df 99 39 db a8 bb 09 33 3a eb 6c b8 55 1f af 29 73 87 37 df b0 03 87 0d b5 db d3 f8 21 4d 92 9c eb b5 fc 8a ef 34 f6 c0 77 1a 7b 28 f6 83 93 cf 96 49 b8 cf 1e 94 11 d2 2d 27 c7 6c 56 6a 0f e3 f3 99 25 ff 77 b2 da c7 41 b5 d2 5d 71 ee 5f 37 f3 9a 46 d7 61 03 d4 f2 fa f6 f6 26 de ad 59 b8 7b be fa d2 f9 fa b1 ef 08 d3 b0 7b 6a 6d 03 64 cd 16 3c ec e1 13 18 1a 33 af b2 0d ed 19 0f 54 59 5a ad 2c 3b bc ab 06 40 a8 be 7c cf 2b b2 6c 06 7a 94 1a 9d 60 de 0a ac 82 2f a4 ab cc 6b b2 67 cd 44 ea 30 22 52 4e cd 18 92 8b 08 0f c5 79 1b 1d 36 f0 6e e9 0c ad 97 56 69 31 56 18 b4 f9 c0 1e 45 be df e6 e9 65 39 91 e9 80 d3 98 f5 78 a2 03 be d9 6e 57 10 f4 9e 56 bd c7 c9 35 24 ac a8 d5 ad 95 6b 3a 00 4f a3 37 fc 21 df bc b6 0e e8 6d 95 Data Ascii: 8v#93:lU)s7!M4w{(I-'lVj%wA]q_7Fa&Y{{jmd<3TYZ,;@\|+lz`/kgD0"RNy6nVi1VEe9xnWV5$k:O7!m
2024-10-31 13:50:29 UTC	5792	IN	Data Raw: 3e af ae 76 6b 1e f1 37 bc b6 36 e7 26 bd 9f 19 2e ec 5b 78 03 e6 8d 53 1c b8 79 42 d3 2b 6d a1 46 fb c9 ba 89 a3 16 c0 e1 4f e1 ce c6 11 db c0 37 7e 60 fd e0 b4 d2 af a0 e2 5e 69 5b bd 37 9e 0c 2f db 6c 17 6c cb 0e af 08 55 30 b5 39 0c 1e ea 47 b6 4c 26 eb bc 12 5a c7 99 d7 76 db 6b 28 3a d2 75 ff 72 32 18 72 70 aa 6e f5 7a fd cb 61 b1 82 ef 80 bb f5 ba 67 66 2b e4 07 32 b3 5e c7 be f7 45 2a a1 54 37 de 44 f3 24 5e 88 16 b8 99 7b 83 0b 7e 88 f3 36 f1 d4 57 f1 27 19 b5 78 d9 69 89 e6 15 b3 b7 aa a2 b7 bc 0e 63 d5 ae f9 8b d7 24 a6 82 56 99 68 47 da ab c3 b1 5b f6 98 56 6b dd 53 63 54 dd 84 ab d2 7a dc 7b 54 db 94 73 cf bf f4 7b b4 c5 db 85 bc 9c 1f ea 0d 7a ea 87 1b 09 68 ff 98 27 64 d1 3a 6c ac e3 9d ab 8a 07 7a 15 4b 0d 5e 55 70 af 43 f5 1e 96 a7 47 ef Data Ascii: >vk76&.[xSyB+mFO7~`^i[7/llU09GL&Zvk(:ur2rpnzagf+2^E*T7D$^{~6W'xic$VhG[VkScTz{Ts{zh'd:lzK^UpCG
2024-10-31 13:50:29 UTC	1448	IN	Data Raw: b5 9d dc 4e 5d 9a e1 a0 d0 d4 1a 14 e0 ea ca 2e 9f ef 23 64 37 21 5c 0b f4 b4 f8 25 7a b3 39 98 f3 a2 91 9b 6c b4 43 c8 42 23 b9 4a 49 b6 8f f3 cb 20 db bd 1c c4 1f 96 5d f5 b2 30 25 34 bd 54 5b 53 2b 8c 58 5e 0c 2c 0c 0d 4c 52 5e 2a 27 ac 0e 0b e6 19 f3 63 60 d6 6e 7d c5 a1 95 1b d9 02 52 05 67 a7 6a 2a cc d9 3e 4f 2c d3 33 65 4e d4 7f 5c 5b 93 a9 6d 7a 5a 0f 52 5d cd 6c 0b 53 5d b1 64 0b 63 d9 f7 c8 b5 e2 b2 31 8c aa d8 c6 7d f6 50 df ff f2 fa 2e 40 96 69 e9 d8 d9 d4 bd 7c 56 22 27 26 5c 2c c8 6b 15 bf ee d6 c7 0e 73 72 70 3b 86 24 0d de 73 90 72 25 6d 28 09 f3 c8 5b a8 0d 03 ca 85 fd ea d1 86 c9 73 f3 d1 db 0c 6e c6 9e 28 da fd 7f 04 8c 3a b8 de 71 50 78 78 18 cb 47 7d fb 90 5d 08 1a f1 bd 35 16 af a1 9b e2 9e 75 50 e6 b9 d4 12 be e8 4f 44 3d b0 fd 99 Data Ascii: N].#d7!\%z9lCB#JI ]0%4T[S+X^,LR^'c`n}Rgj>O,3eN\[mzZR]lS]dc1}P.@i\|V"'&\,ksrp;$sr%m([sn(:qPxxG}]5uPOD=
2024-10-31 13:50:29 UTC	5792	IN	Data Raw: 4c b0 df 7c 78 8c 1e e8 e0 7e 96 07 d2 3a fd 20 1a 71 57 ea 1a 96 8f 69 3a 98 c6 75 20 52 10 e6 59 10 13 da a9 a3 05 99 07 42 f3 29 7d 1a 38 46 62 47 6e 45 ca 47 58 57 48 bb 30 07 9c a4 82 93 54 f4 4f f8 5b 9c a4 e2 ee 2f 17 fc cc aa 0d f1 16 41 6a ac a3 37 4f 35 34 a3 14 a1 a8 f6 ce e0 b2 ae f8 e8 e7 af 54 11 8f 38 81 e1 42 ee cf ed cb 44 79 2b 15 9f 42 4b 87 e1 9d d3 3a 64 f3 d9 86 4d a7 22 0e 07 22 fc 54 2e 0b ea e9 f1 9c 4b 59 da bc b5 93 89 b9 8c 5e 98 2f 09 af 72 85 63 e5 31 87 42 0b a3 4d eb 82 bb 27 0a 0f 28 1e d2 58 9d 43 1f c9 5e 65 f1 86 30 75 6a 8b 0f 11 ab ef cc 53 eb d6 2a 9a 33 7d a8 3f a9 56 f1 77 c5 6a 37 7e 12 da 6c 1d b0 fa 15 b7 66 45 7d df cb fa fe 53 d6 b7 b0 58 69 1e d9 b4 6a a5 95 dc 57 da 5c 9e ac 56 31 59 98 5b 2a c7 31 95 36 a4 Data Ascii: L\|x~: qWi:u RYB)}8FbGnEGXWH0TO[/Aj7O54T8BDy+BK:dM""T.KY^/rc1BM'(XC^e0ujS3}?Vwj7~lfE}SXijW\V1Y[16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49773	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:28 UTC	700	OUT	POST /api/sharelink/info HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive Content-Length: 29 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hidrive.ionos.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hidrive.ionos.com/lnk/FamigcCEF Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:28 UTC	29	OUT	Data Raw: 69 64 3d 46 61 6d 69 67 63 43 45 46 26 66 69 65 6c 64 73 3d 72 65 6d 61 69 6e 69 6e 67 Data Ascii: id=FamigcCEF&fields=remaining
2024-10-31 13:50:29 UTC	371	IN	HTTP/1.1 200 OK Server: stgproxy Date: Thu, 31 Oct 2024 13:50:29 GMT Content-Type: application/json Content-Length: 2 Connection: close Cache-Control: max-age=0, no-store, public Access-Control-Allow-Origin: * X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.64:50580 X-STG-FE: 10.4.1.36:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:29 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49774	85.214.3.95	443	2172	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:30 UTC	359	OUT	GET /api/sharelink/info HTTP/1.1 Host: hidrive.ionos.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-31 13:50:30 UTC	349	IN	HTTP/1.1 400 Bad Request Server: stgproxy Date: Thu, 31 Oct 2024 13:50:30 GMT Content-Type: application/json Content-Length: 95 Connection: close Cache-Control: max-age=0, no-store, public X-STG-API: 2.1-api-one-393 (#80cf261cce5e) 10.4.1.20:50580 X-STG-FE: 10.4.1.54:50482 Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-10-31 13:50:30 UTC	95	IN	Data Raw: 7b 22 6d 73 67 22 3a 22 42 61 64 20 52 65 71 75 65 73 74 3a 20 4d 61 6e 64 61 74 6f 72 79 20 70 61 72 61 6d 65 74 65 72 20 27 69 64 27 20 6d 69 73 73 69 6e 67 20 69 6e 20 63 61 6c 6c 20 74 6f 20 2f 73 68 61 72 65 6c 69 6e 6b 2f 69 6e 66 6f 22 2c 22 63 6f 64 65 22 3a 22 34 30 30 22 7d Data Ascii: {"msg":"Bad Request: Mandatory parameter 'id' missing in call to /sharelink/info","code":"400"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:56 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:56 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:56 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 28 Oct 2024 13:23:36 GMT ETag: "0x8DCF753BAA1B278" x-ms-request-id: 174434da-801e-0015-686a-29f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135056Z-15b8d89586f5s5nz3ffrgxn5ac0000000acg000000006f5h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:56 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-31 13:50:57 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 041e76a7-601e-005c-45ae-26f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-16849878b78qfbkc5yywmsbg0c000000098000000000f121 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:59 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3be177bf-d01e-007a-546e-28f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-15b8d89586fwzdd88qtcg4dr1800000001r000000000eped x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:59 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 11ae3112-301e-005d-596b-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-16849878b78j5kdg3dndgqw0vg0000000bdg000000001e3u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:59 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:59 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 9a0790d9-e01e-0052-7cad-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-16849878b78qf2gleqhwczd21s00000009xg00000000020f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:59 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:50:59 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 834668b8-301e-0052-121c-2765d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-15b8d89586f8l5961kfst8fpb00000000neg00000000akyq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:50:59 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 7b93b929-d01e-0082-6676-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-15b8d89586ffsjj9qb0gmb1stn0000000dt000000000b94y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: bbf1142f-f01e-0085-589b-2788ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-15b8d89586f8l5961kfst8fpb00000000nfg000000009we8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:50:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 633f9008-101e-00a2-3e9b-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135059Z-16849878b78j5kdg3dndgqw0vg0000000b9000000000g0hw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 1f7bc680-101e-0065-6904-274088000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-16849878b78sx229w7g7at4nkg00000007x00000000083bq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:50:59 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: e84b733d-701e-005c-1bb8-26bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-16849878b78fhxrnedubv5byks00000007v000000000n82g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:00 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6b0d144c-801e-007b-3a49-27e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-16849878b78x6gn56mgecg60qc0000000be000000000azmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:00 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3c9c0adf-d01e-0028-0c96-257896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-16849878b78smng4k6nq15r6s40000000b4g00000000bwk5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:00 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:00 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: f6d6c722-a01e-00ab-371c-289106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-15b8d89586f6nn8zqg1h5suba800000004z0000000000cqf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:00 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:00 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:00 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0fe0dd21-c01e-0066-771c-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135100Z-16849878b78smng4k6nq15r6s40000000b6g000000004dk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:01 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 73421f5c-b01e-001e-1796-2a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135101Z-159b85dff8f2qnk7hC1DFWwb24000000028g000000009shw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:01 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:01 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 89d7e9f4-d01e-0066-46a8-2aea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135101Z-15b8d89586fmhkw429ba5n22m80000000b0000000000frsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:01 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 9a09e836-e01e-0052-3cae-26d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135101Z-16849878b78j7llf5vkyvvcehs0000000apg00000000eekw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:01 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:01 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 41883048-901e-005b-06d9-2a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135101Z-15b8d89586f8nxpt6ys645x5v00000000b0g0000000000bm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:01 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: d7829477-101e-008d-1890-2792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-17c5cb586f62vrfquq10qybcuw00000002n0000000007t57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:01 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 78a5d0bc-501e-005b-6da6-26d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-16849878b78km6fmmkbenhx76n00000008zg00000000ahta x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:02 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 134a0630-601e-0084-685d-2a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-159b85dff8f7lrfphC1DFWfw0800000001dg00000000a224 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:02 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 5fd3a61a-e01e-0071-0feb-2a08e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-16849878b78z2wx67pvzz63kdg000000084000000000m5tg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:02 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1abafd92-601e-0070-072b-27a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-16849878b78p49s6zkwt11bbkn000000098000000000eghq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:02 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:02 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c990e8a6-c01e-0034-078c-2a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-159b85dff8f7x84jhC1DFWaghs00000001ag00000000bqvy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:02 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:02 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:02 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: de33ccc9-c01e-008e-25fe-267381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135102Z-16849878b785jrf8dn0d2rczaw0000000as000000000e9w6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:03 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:03 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 546431bf-201e-0085-0b72-2734e3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135103Z-16849878b78p49s6zkwt11bbkn00000009a0000000008s99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:03 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:03 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: bb81791c-801e-00ac-6687-29fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135103Z-17c5cb586f62bgw58esgbu9hgw00000002cg000000003uk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:03 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:03 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: deaa19c2-701e-006f-33de-26afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135103Z-17c5cb586f626sn8grcgm1gf80000000083g000000008xxq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:03 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:03 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 2760be74-301e-0096-200b-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135103Z-16849878b785jrf8dn0d2rczaw0000000asg00000000dp88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:03 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:03 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:03 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 860be216-201e-0071-14dc-2aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135103Z-159b85dff8fvjwrdhC1DFWsn1000000001bg000000007zp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:03 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:04 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:04 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: b9cb9fa3-701e-005c-6994-2abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135104Z-16849878b7867ttgfbpnfxt44s00000009cg00000000ntff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:04 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:04 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 3201f11f-301e-006e-7658-27f018000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135104Z-17c5cb586f626sn8grcgm1gf80000000082g00000000aykb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:04 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: c9fe3c14-601e-0050-50d7-262c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135104Z-16849878b78wc6ln1zsrz6q9w8000000097g00000000gztg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:04 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:04 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:04 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 4d8b81f2-501e-0029-7c16-2bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135104Z-15b8d89586f8l5961kfst8fpb00000000ng000000000842v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:04 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:04 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:04 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:04 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 5e4053db-f01e-0052-6472-279224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135104Z-15b8d89586ff5l62aha9080wv00000000b1g000000002y0d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:04 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:05 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:05 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:05 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: a783173c-501e-008c-2349-27cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135105Z-16849878b78qg9mlz11wgn0wcc000000098g0000000058yf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:05 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:05 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:05 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 6856914c-401e-0029-0667-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135105Z-16849878b7898p5f6vryaqvp580000000aag00000000nusk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:05 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:05 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e1dd5be0-d01e-00a1-2084-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135105Z-17c5cb586f6z6tq2xr35mhd5x0000000023000000000fy96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:05 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 395fbb66-201e-003f-4179-266d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135105Z-16849878b78qf2gleqhwczd21s00000009tg00000000ecep x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:05 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:05 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:05 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: a96fbf53-401e-0016-5d5d-2653e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135105Z-16849878b7828dsgct3vrzta700000000820000000009kur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:05 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:06 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: f296e79a-801e-008c-04d4-297130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135106Z-17c5cb586f6p5pndayxh2uxv540000000190000000007254 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:06 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:06 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7c52a88a-f01e-00aa-0993-2a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135106Z-159b85dff8fsgrl7hC1DFWadan0000000260000000008t0p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:06 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:06 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 51ccb76b-001e-0049-0a37-265bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135106Z-16849878b782d4lwcu6h6gmxnw000000095000000000qahe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:06 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:06 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: b19a9190-b01e-00ab-7309-28dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135106Z-15b8d89586f42m673h1quuee4s0000000dng00000000d1m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:06 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:06 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:06 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: a1cd263b-b01e-0070-5f2a-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135106Z-16849878b78g2m84h2v9sta29000000008h000000000ct4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:06 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 0697abc8-001e-00ad-714f-28554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-15b8d89586flzzksdx5d6q7g1000000004rg000000009ht8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a606ba7c-601e-003d-0781-2a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-159b85dff8f5bl2qhC1DFWs6cn00000001mg000000004d7q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:07 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 4a7bd2a8-301e-0096-209e-26e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-16849878b78x44pv2mpb0dd37w00000001tg000000005ad6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:07 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: c1b2f9d4-701e-0098-1062-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-16849878b7898p5f6vryaqvp580000000aa000000000q9u7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:07 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 6c6fa777-201e-003c-1958-2630f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-17c5cb586f6sqz6f73fsew1zd8000000037g00000000fwrd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:07 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 57989b77-d01e-0049-621c-27e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135107Z-16849878b78q9m8bqvwuva4svc000000084000000000dys2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: a1cd7d15-b01e-0070-762b-271cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-16849878b78qfbkc5yywmsbg0c00000009a000000000adfp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:08 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 3c5c3d60-c01e-0066-4c9e-26a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-16849878b78nzcqcd7bed2fb6n000000023g000000006mp8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:08 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 64f5c2f9-201e-000c-22cd-2a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-159b85dff8f7lrfphC1DFWfw0800000001bg00000000eg7m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:08 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 9a8e6971-501e-0078-586f-2806cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-15b8d89586fpccrmgpemqdqe5800000004f000000000a2n6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:08 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 98e85290-a01e-0021-7dec-2a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-16849878b78hh85qc40uyr8sc800000009u000000000kna8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:08 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:08 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:08 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8e6d5db5-101e-0017-4c27-2747c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135108Z-16849878b78tg5n42kspfr0x4800000009g000000000pdrr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:08 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 6cbbe1db-401e-0083-6516-26075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-16849878b78nzcqcd7bed2fb6n0000000250000000000h4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:09 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: a342e9ea-d01e-0066-419c-27ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-16849878b786fl7gm2qg4r5y7000000009z0000000003rf9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:09 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:09 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 10f07cf3-601e-0070-28ce-2aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-159b85dff8f9mtxchC1DFWf9vg000000010g000000003eww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:09 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: a0c84568-901e-0016-0da6-2aefe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-17c5cb586f672xmrz843mf85fn00000008mg0000000053g4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:09 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:09 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 4b1c8405-301e-005d-7701-27e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-16849878b78bjkl8dpep89pbgg000000088000000000hh7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 4bda8ee7-201e-0003-1763-27f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135109Z-16849878b7898p5f6vryaqvp580000000afg000000008un7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:09 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 3c311aa7-c01e-008e-22a5-2a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-159b85dff8fsgrl7hC1DFWadan00000002900000000035gh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:10 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: d9732123-901e-007b-1098-25ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-16849878b78nzcqcd7bed2fb6n000000023g000000006mt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:10 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 082aec87-f01e-003c-0a0e-2b8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-15b8d89586flzzksdx5d6q7g1000000004p000000000dx41 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:10 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 6741ff86-f01e-00aa-74b9-268521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-16849878b78qfbkc5yywmsbg0c000000099g00000000bvsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:10 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 670c0d8f-b01e-0002-01b6-291b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-15b8d89586fmc8ck21zz2rtg1w00000006sg00000000eh0r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:10 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:10 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 045b9726-001e-0014-4db7-2a5151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135110Z-159b85dff8f6x4jjhC1DFW7uqg000000018g000000006k45 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:10 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:11 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: df439d9f-401e-0067-5610-2709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135111Z-16849878b78g2m84h2v9sta29000000008eg00000000hx4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:11 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:11 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 44c43cee-601e-003e-459c-273248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135111Z-15b8d89586fmc8ck21zz2rtg1w00000006tg00000000bqg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:11 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:11 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: f6a2cc2d-401e-0015-3796-250e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135111Z-16849878b78x44pv2mpb0dd37w00000001m000000000pkha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:11 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:11 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 4f8161d3-a01e-00ab-6acd-2a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135111Z-159b85dff8f2qnk7hC1DFWwb24000000029g000000006yns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:11 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:11 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:11 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: d871491f-101e-0046-2593-2a91b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135111Z-159b85dff8f5bl2qhC1DFWs6cn00000001h000000000a3z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:11 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:11 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2034bdf9-701e-003e-3056-2679b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-16849878b786fl7gm2qg4r5y7000000009yg000000005mzd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:12 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: ba33cc4f-e01e-0052-2e6f-28d9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-15b8d89586fxdh48ft0acdbg4400000003g0000000002yd8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:12 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: c3c63728-001e-0082-75c8-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-17c5cb586f6z6tq2xr35mhd5x0000000026g00000000abz5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:12 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 45a27b82-c01e-002b-5784-2a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-159b85dff8fdh9tvhC1DFW50vs00000001n0000000005bc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:12 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: c21b0bdf-c01e-008e-186f-287381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-15b8d89586fmhkw429ba5n22m80000000b5g000000004th7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:12 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:12 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:12 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 41937e91-c01e-008e-5d57-277381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135112Z-16849878b787bfsh7zgp804my400000008bg00000000gega x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:12 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:13 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:13 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: a1443afe-101e-00a2-13ee-279f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135113Z-15b8d89586ff5l62aha9080wv00000000axg00000000aeck x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:13 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:13 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5fa9ef6b-c01e-008d-1a60-2b2eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135113Z-15b8d89586fnfb49yv03rfgz1c000000015g00000000dszb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:13 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:13 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 19a18c92-701e-0098-0fb0-26395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135113Z-16849878b78fssff8btnns3b1400000009vg00000000fge4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:13 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:13 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b981dc60-601e-0097-7636-29f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135113Z-15b8d89586fxdh48ft0acdbg4400000003cg00000000adw0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:13 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:13 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:13 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:13 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 2e99a458-901e-0067-29ae-26b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135113Z-16849878b78fhxrnedubv5byks000000081g000000000rnp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:13 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:14 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: d866d412-001e-0028-1c9c-27c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135115Z-15b8d89586fst84kttks1s2css000000036g00000000d43y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:15 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:15 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 5c8c4e1d-601e-0002-3bca-2aa786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135115Z-159b85dff8f5bl2qhC1DFWs6cn00000001n0000000002v3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:15 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:15 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 763d968a-101e-008d-1b2e-2b92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135115Z-15b8d89586f8l5961kfst8fpb00000000nmg0000000015wa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:15 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:15 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:15 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:15 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 255ed8c5-301e-0051-461c-2738bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135115Z-16849878b78qwx7pmw9x5fub1c00000007s000000000de06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:15 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:15 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:15 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:15 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: cdbfd92d-501e-0029-317f-27d0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135115Z-15b8d89586fmc8ck21zz2rtg1w000000070000000000000p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:15 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:16 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 258e3987-401e-0047-4dfa-288597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135116Z-17c5cb586f672xmrz843mf85fn00000008n0000000003xst x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:16 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 2e8006eb-901e-0083-471c-26bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135116Z-16849878b78sx229w7g7at4nkg00000007wg000000009d2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:16 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:16 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 17a5a9a5-201e-0003-7b36-28f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135116Z-15b8d89586fzcfbd8we4bvhqds00000004m00000000065cg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:16 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:16 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 207ff7bf-701e-006f-1357-27afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135116Z-16849878b78km6fmmkbenhx76n00000008v000000000rxc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:16 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:16 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:16 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: eff8debc-001e-0065-199c-270b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135116Z-16849878b7828dsgct3vrzta70000000080000000000f2pn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:16 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:16 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: eb0745eb-f01e-003c-6cca-2a8cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-17c5cb586f6z6tq2xr35mhd5x0000000025g00000000cadv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 40c56fb5-c01e-00a2-740e-2b2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-15b8d89586flspj6y6m5fk442w0000000fk0000000008nxk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:17 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 16f71f95-f01e-0099-73fb-259171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-16849878b78x6gn56mgecg60qc0000000be000000000b0g2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:17 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 0df29f50-101e-005a-068d-27882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-16849878b78qg9mlz11wgn0wcc000000094000000000haue x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:17 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: f0ac2fb9-601e-003e-0667-2a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-17c5cb586f6p5pndayxh2uxv54000000017000000000c7aw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:17 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: e1cf8e51-d01e-00a1-6880-2935b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-159b85dff8f5bl2qhC1DFWs6cn00000001m0000000005mqh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08f6a26f-f01e-0071-6b1c-27431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-16849878b78p49s6zkwt11bbkn00000009bg000000002s9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 3a798620-501e-00a0-0295-279d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-16849878b78p8hrf1se7fucxk80000000ahg00000000600d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ea4f12d2-001e-0066-30b1-2a561e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-159b85dff8fprglthC1DFW8zcg00000001eg000000007waw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:17 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:17 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 93439f28-801e-00ac-63f6-2afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135117Z-16849878b78x44pv2mpb0dd37w00000001rg00000000behm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:18 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 4fde2afa-301e-0099-279b-276683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-17c5cb586f6wnfhvhw6gvetfh4000000092g00000000d5t4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:18 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 10294bf0-701e-0021-254d-273d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-17c5cb586f69p7mmw593w958p4000000010g00000000250w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:18 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: a1e8ab16-701e-0050-601c-266767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-16849878b782d4lwcu6h6gmxnw000000095g00000000nu0y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:18 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 548bc1da-901e-0067-71ad-29b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-159b85dff8f2qnk7hC1DFWwb24000000027g00000000aqvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:18 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:18 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: c904ac86-e01e-0003-2a22-2b0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135118Z-15b8d89586f5s5nz3ffrgxn5ac0000000ae0000000003a1h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-31 13:51:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:19 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7b68ac53-d01e-0082-7e67-27e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135119Z-16849878b78fkwcjkpn19c5dsn00000008kg00000000hhkw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:19 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:19 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: a9c77195-601e-003e-7294-293248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135119Z-15b8d89586f8nxpt6ys645x5v00000000aug00000000c50n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:19 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:19 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:19 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 68df6217-401e-0029-6d9c-279b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135119Z-16849878b786lft2mu9uftf3y40000000ay0000000005hfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:19 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:19 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:19 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:19 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 5c4d015b-701e-0097-6b71-28b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135119Z-15b8d89586fnsf5zkvx8tfb0zc00000004p000000000daq6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:19 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:19 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:19 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:19 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 56c29abd-201e-0000-6535-2aa537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135119Z-159b85dff8f2qnk7hC1DFWwb24000000028000000000at79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:19 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:20 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:20 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 9b485842-301e-0096-2f9c-27e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135120Z-15b8d89586f6nn8zqg1h5suba800000004tg00000000btnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:20 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:20 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:20 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4b09b00a-d01e-0028-11e9-297896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135120Z-17c5cb586f6jwd8h9y40tqxu5w00000000r000000000a61g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:20 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:20 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:20 UTC	538	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:20 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: c91dfad3-401e-0015-1dd2-2a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135120Z-159b85dff8f7lrfphC1DFWfw0800000001cg00000000bw3v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:20 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:20 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:20 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:20 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 338a3e6d-c01e-0079-709c-27e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135120Z-16849878b78x44pv2mpb0dd37w00000001ug0000000014kc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:20 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:20 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:20 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:20 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 9a40e34d-b01e-005c-559c-274c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135120Z-16849878b786fl7gm2qg4r5y7000000009v000000000g9pu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:20 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:21 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:21 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e02f31dd-001e-0082-0849-275880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135121Z-16849878b787wpl5wqkt5731b40000000aag00000000g1vh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:21 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-31 13:51:21 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-31 13:51:21 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 31 Oct 2024 13:51:21 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 09556753-901e-0064-11fd-26e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241031T135121Z-17c5cb586f626sn8grcgm1gf80000000082000000000bx2m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-31 13:51:21 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Target ID:	0
Start time:	09:49:55
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:50:00
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1948,i,8650896634388582776,7673543875609925860,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:50:03
Start date:	31/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hidrive.ionos.com/lnk/FamigcCEF"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:50:31
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\unarchiver.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\SysWOW64\unarchiver.exe" "C:\Users\user\Downloads\Business and Financial Details.zip"
Imagebase:	0xd60000
File size:	12'800 bytes
MD5 hash:	16FF3CC6CC330A08EED70CBC1D35F5D2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	09:50:31
Start date:	31/10/2024
Path:	C:\Windows\SysWOW64\7za.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\7za.exe" x -pinfected -y -o"C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w" "C:\Users\user\Downloads\Business and Financial Details.zip"
Imagebase:	0x7a0000
File size:	289'792 bytes
MD5 hash:	77E556CDFDC5C592F5C46DB4127C6F4C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	09:50:31
Start date:	31/10/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7699e0000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	20.4%
Dynamic/Decrypted Code Coverage:	100%
Signature Coverage:	5.5%
Total number of Nodes:	73
Total number of Limit Nodes:	4

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 0143B1D6 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0143B208

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 7f187c1979b8c604eef672a0b4f11dfcfe927ad9f9e6d83bd3733265a025c6bb
Instruction ID: 44d9ed50f803ec7eb13e80d4e33fcf62719aafa5b775be8999766ecf8c532a74
Opcode Fuzzy Hash: 7f187c1979b8c604eef672a0b4f11dfcfe927ad9f9e6d83bd3733265a025c6bb
Instruction Fuzzy Hash: A201D6719042409FDB11CF15D88976AFBD4DF88224F08C5ABDD488F356D379A404CBA2

Function 05520C99 Relevance: 5.1, Strings: 4, Instructions: 86
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

`jj, xrefs: 05520D37
Plj, xrefs: 05520CC8
`jj, xrefs: 05520D62
e]i^, xrefs: 05520D6E, 05520D73

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID: Plj$`jj$`jj$e]i^
API String ID: 0-3034166426
Opcode ID: 325e2f3938283100db87818931ea7b0dcf882b5345b063704af7c180baf203eb
Instruction ID: eb1382f861b2adac6eae35ff878dd7fac52e0dd239e53aed1d8e732d26dffa91
Opcode Fuzzy Hash: 325e2f3938283100db87818931ea7b0dcf882b5345b063704af7c180baf203eb
Instruction Fuzzy Hash: 3A217774B002148FC744DA3A99447AFBAD7AFC9248F05442DD586DB392DF3AAD068B82

Function 05520CA8 Relevance: 5.1, Strings: 4, Instructions: 82
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

Strings

`jj, xrefs: 05520D37
Plj, xrefs: 05520CC8
`jj, xrefs: 05520D62
e]i^, xrefs: 05520D6E, 05520D73

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID: Plj$`jj$`jj$e]i^
API String ID: 0-3034166426
Opcode ID: 3045f2a7915326d115384271689804928b62671220e9b8bb64ee832d8d4257cf
Instruction ID: 3c0f4279982242725aef7a01570212eb0b781e56a00b086fb5bbf1e5a4dcf5ae
Opcode Fuzzy Hash: 3045f2a7915326d115384271689804928b62671220e9b8bb64ee832d8d4257cf
Instruction Fuzzy Hash: 40217774B003108BC704EB3AD9406AFBBE7AFC9208B41842DD186DB392CF79AD06C791

Function 0143B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0143B2F3

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: a503a1452dfedf78b39070f26d09d53100c15bb80bce15031385dbb08dc4577b
Instruction ID: 874f42cf612f2c312d8b3cc45e387316ce757202d1c1cf6c89cb009f643ffb9f
Opcode Fuzzy Hash: a503a1452dfedf78b39070f26d09d53100c15bb80bce15031385dbb08dc4577b
Instruction Fuzzy Hash: 4C31C6715043446FE7228B61CC45FA7BFBCEF45310F08449AF985CB162D369A919CB71

Function 0143AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0143ADA7

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 7c9a8932a2f5e267ed65b1eef33a914eb04c556a18a546d75dc7f9a5bd7e6250
Instruction ID: dfc6265b0f75249cd555ff86601f85a1ca72517b8e78e6a38bef2d8336acdc62
Opcode Fuzzy Hash: 7c9a8932a2f5e267ed65b1eef33a914eb04c556a18a546d75dc7f9a5bd7e6250
Instruction Fuzzy Hash: 3131D372504344AFEB228B65CC45FA7BFBCEF09210F08489AF985CB162D325A819CB71

Function 0143AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0143AC36

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: 51e42d087af575153337237f4ba1c5cba0fd25b786be2e468451fac41c062310
Instruction ID: 65aad5160e341c70246a81a6192fe970eb1a5a4842fcd28a76631fe29e3c5808
Opcode Fuzzy Hash: 51e42d087af575153337237f4ba1c5cba0fd25b786be2e468451fac41c062310
Instruction Fuzzy Hash: E0317E7250E3C06FD3038B718C65A66BFB4AF47610F1A84DBD8C4DF1A3D2696919C7A2

Function 0143A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0143A67D

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: ad27ee9a808ab4791aa080bc24f3a040eba0f7876d70c2d044d3a71538df41f6
Instruction ID: 57ac34ae275e2953352d73304dd9b72f51c159f6b5a1b5f7723983c29a2f6a65
Opcode Fuzzy Hash: ad27ee9a808ab4791aa080bc24f3a040eba0f7876d70c2d044d3a71538df41f6
Instruction Fuzzy Hash: E9317071544340AFE722CB65CC45F67BBE8EF49210F08849EE985CB262D375E809DB71

Function 0143A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0143A1C2

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: 6c17f0a935d70c1c0dfc748cfd014aec287c2a0302b47e2f06e8c8c07fd3473f
Instruction ID: c279cce2a8c2f2fdbe10b28c42ce56c1124bd5f4a9cff02b0c992ca0f89c7a8e
Opcode Fuzzy Hash: 6c17f0a935d70c1c0dfc748cfd014aec287c2a0302b47e2f06e8c8c07fd3473f
Instruction Fuzzy Hash: 2D21A17150D3C06FD3128B258C51BA6BFB4EF87610F0985DBE9C4CF593D229A919C7A2

Function 0143A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A40C

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: 757ddde2434a54f46c74fedf69e44a4222ca2cdc0b19c39098331042b63c7d0c
Instruction ID: 5d948857bc17b4078ee8f6b25a4025de05d8b9b654684101f262585061914184
Opcode Fuzzy Hash: 757ddde2434a54f46c74fedf69e44a4222ca2cdc0b19c39098331042b63c7d0c
Instruction Fuzzy Hash: 1F218072644744AFD721CF15CC85FA7BBF8EF45610F18849AE985CB2A2D364E908CB61

Function 0143B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0143B2F3

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 5b496400cb7e020aee53cff2d1627baf085120c6b532ec34769d13d89602e989
Instruction ID: 47e4534cfb0fd72dcf186b456ec5f61ff19f0105e84a548d455dd43a20a3d73c
Opcode Fuzzy Hash: 5b496400cb7e020aee53cff2d1627baf085120c6b532ec34769d13d89602e989
Instruction Fuzzy Hash: D621C472500604AFEB218F65CC46FABFBECEF48314F04896AEE85CB151D375A9148BA1

Function 0143AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

DuplicateHandle.KERNELBASE(?,00000E24), ref: 0143ADA7

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: DuplicateHandle
String ID:
API String ID: 3793708945-0
Opcode ID: 42f370538857d1478cbefcd1b888cf05c16c9ea85217d9bd84df1a5b8be85d5c
Instruction ID: e4d3a0d780c555ef305680d87dd0d5fefff04420dd4fb67d7750a21b96ef0a2a
Opcode Fuzzy Hash: 42f370538857d1478cbefcd1b888cf05c16c9ea85217d9bd84df1a5b8be85d5c
Instruction Fuzzy Hash: 6C21F472500204AFEB218F65CC46FABFBECEF08224F04882AF985CB551D735A8158BA1

Function 0143A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFilePointer.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A8DE

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: 4b05cf563c5c817dfc15e37000a9781f028a002b0f7635609f9d2bd6811c7be5
Instruction ID: 6446f1c152898b2b905e9b24db9adc17204e943970f1657b1a28f1a9d5ea9b60
Opcode Fuzzy Hash: 4b05cf563c5c817dfc15e37000a9781f028a002b0f7635609f9d2bd6811c7be5
Instruction Fuzzy Hash: 5B21F1715083806FE7228B60CC45FA3BFB8EF46314F0984DAE984CF193C268A909C772

Function 0143A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ReadFile.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A9C1

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 99ca7ccbdc1b86429a0fb1ebadc645a89d8bb5604c4b158e78c916dcf9de932d
Instruction ID: 2f13d0d6785e9fcd0acb47bc585f8c081ab6593d9d272f25627a47fef54e7ea1
Opcode Fuzzy Hash: 99ca7ccbdc1b86429a0fb1ebadc645a89d8bb5604c4b158e78c916dcf9de932d
Instruction Fuzzy Hash: 0B21D3715093806FD722CF60CC45F97BFB8EF46214F08849AE9849F152C375A808CB72

Function 0143A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileW.KERNELBASE(?,?,?,?,?,?), ref: 0143A67D

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 594848b465bb60a0e0ab53d95c029911db9c85974c5b16e3635ec3fff2fc8bf1
Instruction ID: bfd932d2b1f76b5c3cdaf2962f055eadc1fd7b3ea6d08ccb399e300aba6be7b4
Opcode Fuzzy Hash: 594848b465bb60a0e0ab53d95c029911db9c85974c5b16e3635ec3fff2fc8bf1
Instruction Fuzzy Hash: 4E21A371600600AFE721CF65CC45F66FBE8EF48214F18845AE9C9CB251D375E804CB61

Function 0143A78F Relevance: 1.6, APIs: 1, Instructions: 73
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetFileType.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A815

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: d6b280aa69fa34cc764bead9de34eb0964ff282e5095651e79b2f510be16296c
Instruction ID: b0f688af595befc24bf9f0f041d4db18e08274426ad53970367262e0414daba8
Opcode Fuzzy Hash: d6b280aa69fa34cc764bead9de34eb0964ff282e5095651e79b2f510be16296c
Instruction Fuzzy Hash: 5721F3B55083806FE7128B219C41BA3BFA8DF46314F1980DBE984CB293D368AD09C776

Function 0143AA0B Relevance: 1.6, APIs: 1, Instructions: 70
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0143AA8B

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: fd5fb039a7a038bba7de48016dc106a5b1be48e6e151e8489fd77bfaf287adf5
Instruction ID: 5bf635951e310769ae43b8887e5eeb26b76c56b4ed6462b441dba47684e4ef20
Opcode Fuzzy Hash: fd5fb039a7a038bba7de48016dc106a5b1be48e6e151e8489fd77bfaf287adf5
Instruction Fuzzy Hash: 442171725483805FE712CB29DC55B92BFE8AF46214F0D84EAE985CB263D225D905CB61

Function 0143A392 Relevance: 1.6, APIs: 1, Instructions: 69registryCOMMON

Download Yara Rule

APIs

RegQueryValueExW.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A40C

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: QueryValue
String ID:
API String ID: 3660427363-0
Opcode ID: b1aa8cf2c2aff350172b352be35e8a697076597924c548eff9feb5ef9111f223
Instruction ID: ff6958d110f8701c7a02323a97056733c4715d7e188bd3dd2cd81adb273c2e19
Opcode Fuzzy Hash: b1aa8cf2c2aff350172b352be35e8a697076597924c548eff9feb5ef9111f223
Instruction Fuzzy Hash: B5218175640604AFE721CE15CC85F67F7ECEF48714F18856AE985CB2A1D374E805CA71

Function 0143A962 Relevance: 1.6, APIs: 1, Instructions: 60fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A9C1

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 9cb980ccbcb9d6f8a528f09f7056eca0fe759a2be8d959f839ce0319b6bb179a
Instruction ID: fd9358b28f517481a314bea8f3b9a94e5afab44a6dc2e5b2bf6454472f528936
Opcode Fuzzy Hash: 9cb980ccbcb9d6f8a528f09f7056eca0fe759a2be8d959f839ce0319b6bb179a
Instruction Fuzzy Hash: DB11E671500200AFE721CF55CC41F67FBA8EF48314F14895AE985DB251C379A404CBB1

Function 0143A882 Relevance: 1.6, APIs: 1, Instructions: 59COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A8DE

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FilePointer
String ID:
API String ID: 973152223-0
Opcode ID: e049057998ba6892231af900c7a72758c009fbeab58032703d3484d6869d3f2f
Instruction ID: 9b424a027ab25722a87068a4b34be6f27dac3e8c98d5177ab4d2e13e660537f4
Opcode Fuzzy Hash: e049057998ba6892231af900c7a72758c009fbeab58032703d3484d6869d3f2f
Instruction Fuzzy Hash: 6B110471500200AFEB21CF54DC46F67FBA8EF48324F14885AED85DB255C378A9058BB2

Function 0143A2AE Relevance: 1.6, APIs: 1, Instructions: 53COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0143A30C

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: a87bf74b9ae1f48356ff9b41c154db6366e428e550802c83446385ea9648cfd3
Instruction ID: 61d062010301bcb541f3368838a8d95d0e3eb68e40e4bfed0dc321723c8dae28
Opcode Fuzzy Hash: a87bf74b9ae1f48356ff9b41c154db6366e428e550802c83446385ea9648cfd3
Instruction Fuzzy Hash: 4F1191754493C09FD7238B25DC54A52BFB4DF47224F0980DBDD858F2A3D275A809CB62

Function 0143A7C2 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetFileType.KERNELBASE(?,00000E24,70634ACF,00000000,00000000,00000000,00000000), ref: 0143A815

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileType
String ID:
API String ID: 3081899298-0
Opcode ID: faedf051a0259b8f0c2f172bf6c571946c4428a392b4ec3cfdb5da9321925b1e
Instruction ID: 4bd7ce118e250fa2fdebccb45dfa07b2b904fbb3125dda834c089f56f20bcb92
Opcode Fuzzy Hash: faedf051a0259b8f0c2f172bf6c571946c4428a392b4ec3cfdb5da9321925b1e
Instruction Fuzzy Hash: 5F012671644200AEE721CF15CC46F67FBD8DF44724F18C056EE858B292D378A8058BB6

Function 0143AA46 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(?,?), ref: 0143AA8B

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreateDirectory
String ID:
API String ID: 4241100979-0
Opcode ID: 650061680ce15c0647b194d52ece534360100cfc0be58f5b92848d6493c61364
Instruction ID: 5c018513160eac19310c80959aee41fdf707c26b6d4aa6ffcad22b4fbc4804bd
Opcode Fuzzy Hash: 650061680ce15c0647b194d52ece534360100cfc0be58f5b92848d6493c61364
Instruction Fuzzy Hash: 6C1182726402409FEB10DF29D985B56FBD8EF48220F18C4AAED85CB256D275E905CB61

Function 0143AF8B Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0143AFE4

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 36ad0fc32750881b4175def0c78a6e3537fab32c86c214e4e1807b7dbe7a150f
Instruction ID: ddde59bd4b00edad75f8b083eb9f932b85d049c86ac4c292d207fd1bdc32e670
Opcode Fuzzy Hash: 36ad0fc32750881b4175def0c78a6e3537fab32c86c214e4e1807b7dbe7a150f
Instruction Fuzzy Hash: 45119E75509380AFD7128B25DC45B52FFF4EF46220F0984DBED858B2A3D275A808DB61

Function 0143B1B4 Relevance: 1.6, APIs: 1, Instructions: 52COMMON

Download Yara Rule

APIs

GetSystemInfo.KERNELBASE(?), ref: 0143B208

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: InfoSystem
String ID:
API String ID: 31276548-0
Opcode ID: 8ec382128f8910f44d779d7e241311f754439838e90f50468364c553aae4798d
Instruction ID: 291fd15ebf1d2e81d6edd2c88c147e4223100e567db81144a5f16a3406e1fc7f
Opcode Fuzzy Hash: 8ec382128f8910f44d779d7e241311f754439838e90f50468364c553aae4798d
Instruction Fuzzy Hash: 8F117071509380AFDB12CF15DC58B56FFA4DF46220F0884EBED898F257D275A908CB62

Function 0143ABE6 Relevance: 1.5, APIs: 1, Instructions: 47pipeCOMMON

Download Yara Rule

APIs

CreatePipe.KERNELBASE(?,00000E24,?,?), ref: 0143AC36

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CreatePipe
String ID:
API String ID: 2719314638-0
Opcode ID: ea936e8283fade50ab36041a8855f99e26620decb7f9ab055c1c1a18a6bf7b10
Instruction ID: c74e39c4f7d759aebd06032cf09601b67499492c57f2bcd2b045518b298087d1
Opcode Fuzzy Hash: ea936e8283fade50ab36041a8855f99e26620decb7f9ab055c1c1a18a6bf7b10
Instruction Fuzzy Hash: C501B171A00200ABD310DF16CC46B36FBE8FB88A20F14812AEC489B645D735B915CBE6

Function 0143A172 Relevance: 1.5, APIs: 1, Instructions: 47fileCOMMON

Download Yara Rule

APIs

FindNextFileW.KERNELBASE(?,00000E24,?,?), ref: 0143A1C2

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: FileFindNext
String ID:
API String ID: 2029273394-0
Opcode ID: cf70ef658d79af72eb9190398421c8e03f5f0758044406cf0afa7b4a05a1e2af
Instruction ID: 3050313670118077bba8f23b3c75062faa8a337f7aca6ea6d27a43064066d491
Opcode Fuzzy Hash: cf70ef658d79af72eb9190398421c8e03f5f0758044406cf0afa7b4a05a1e2af
Instruction Fuzzy Hash: AC017171A00200ABD310DF16DC46B36FBE8EB88A20F14856AED489B645D775B915CBE6

Function 0143AFB2 Relevance: 1.5, APIs: 1, Instructions: 39COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?), ref: 0143AFE4

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: 38a97f093bc5ebbb60cf8ed698bbf4fb958d7a41f2770d7ecc764235d54562ec
Instruction ID: 570b8c4ea43ea155fbb4a11425358f2ee36932615e3a1bd46d904b97dcf7164f
Opcode Fuzzy Hash: 38a97f093bc5ebbb60cf8ed698bbf4fb958d7a41f2770d7ecc764235d54562ec
Instruction Fuzzy Hash: 2101F4B56006449FDB118F19D885766FBE4EF48224F08C0ABDD858B3A6D379E844DEA2

Function 0143A2DA Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

SetErrorMode.KERNELBASE(?), ref: 0143A30C

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: ErrorMode
String ID:
API String ID: 2340568224-0
Opcode ID: 9fa715404cdb9c1c7498db0cf9d10292f037f02da22853900ba241ec456e4689
Instruction ID: 3731bef2e8efc2758e2bd700c97d8162f14fbe6a8df195ac098ddb42ec84b830
Opcode Fuzzy Hash: 9fa715404cdb9c1c7498db0cf9d10292f037f02da22853900ba241ec456e4689
Instruction Fuzzy Hash: B9F0F4345442409FDB11CF05D885726FBD0DF48324F08C09ADD858F366D3B9A404CAA2

Function 0143A6D4 Relevance: 1.3, APIs: 1, Instructions: 68COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0143A748

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: a34dd34a4a4d3d24281bff93f6cbf17d7a55f24dcb28ed3c76e40d498958b0ca
Instruction ID: 17d1424a19ebfaf20104e42c11ee48a4825a996d345d5fc454b6bee9ca542670
Opcode Fuzzy Hash: a34dd34a4a4d3d24281bff93f6cbf17d7a55f24dcb28ed3c76e40d498958b0ca
Instruction Fuzzy Hash: 7721B0B59097C05FD7138B29DC95792BFB8AF46220F0980DBEC858B6A7D2249908C772

Function 0143A716 Relevance: 1.3, APIs: 1, Instructions: 43COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(?), ref: 0143A748

Memory Dump Source

Source File: 00000007.00000002.2031806900.000000000143A000.00000040.00000800.00020000.00000000.sdmp, Offset: 0143A000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_143a000_unarchiver.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: e6c904394677257f89c3bf4d65b16ea9620ef72723254439d316bd7d8714cf21
Instruction ID: ae1774e6902dedaf2379d62c6744a0f29c8d24a11b3b2448fdaf18ee2884d3c4
Opcode Fuzzy Hash: e6c904394677257f89c3bf4d65b16ea9620ef72723254439d316bd7d8714cf21
Instruction Fuzzy Hash: 8101F775A002409FEB12CF19D886766FBE4DF44220F18C4ABDC86CF356D379E804CAA2

Function 055202C0 Relevance: .3, Instructions: 285COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 739c11270eb89bcc0db725088e0e04a1217ddeefafae03f6e43b852200be408f
Instruction ID: f96740f0f908f98869808938b3b8c3b77f618a438c9ecdd4504081e93b10b9e5
Opcode Fuzzy Hash: 739c11270eb89bcc0db725088e0e04a1217ddeefafae03f6e43b852200be408f
Instruction Fuzzy Hash: 76B15C78601210CFC724DF65E958AAB7BE6FF9D390F119069E506A73A9CF34AC44CB90

Function 05520799 Relevance: .3, Instructions: 284COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: afe2fc4d158585cdfa67f34b5be58466e8766352eb4e4dfed0ec9ae894fa111c
Instruction ID: 664f12bc1ddbfc3827f67cf3c2dd7238a85cf970759c59e7aaa6329f795342b6
Opcode Fuzzy Hash: afe2fc4d158585cdfa67f34b5be58466e8766352eb4e4dfed0ec9ae894fa111c
Instruction Fuzzy Hash: 5DA17C74B012108FDB149FB49559BBE73A7FBC8348F118029E916A73E5DF789C428B50

Function 05520B8F Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fb423d2e5f4a8b70042a48cc0726307c2b230b84f582512d9133783ca8f336f7
Instruction ID: e27729f9dc6c3e929ce37b59932936ab39e4b000c173bcaf433e1c52c2461473
Opcode Fuzzy Hash: fb423d2e5f4a8b70042a48cc0726307c2b230b84f582512d9133783ca8f336f7
Instruction Fuzzy Hash: 0811B135A101186FCB448BB4D8489EF77F6FF88314B06557AE506E7272DF31AC4A8B80

Function 05520BA0 Relevance: .1, Instructions: 60COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 97403d7ff2323a7ad367d0690520b81315e1d55894a546af5c36bd26c58c067c
Instruction ID: e5023115c404ef5c30bf220682ac9d3b8131aac293ccd4f4a60a69d085e72606
Opcode Fuzzy Hash: 97403d7ff2323a7ad367d0690520b81315e1d55894a546af5c36bd26c58c067c
Instruction Fuzzy Hash: 22118F36A10118AFCB049BB4D8489EF77F6FF8C314B06547AE605E7261DF31AC458B81

Function 018C0808 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2032338993.00000000018C0000.00000040.00000020.00020000.00000000.sdmp, Offset: 018C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_18c0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 01b61ff5a38385e2c440e44480dd94c2a419f3355cdd72490a12b1ded20f07f4
Instruction ID: 7636a29f3da734fab7241e19d0525e19dbe74642ffaf9c90161dcf400cf38f5e
Opcode Fuzzy Hash: 01b61ff5a38385e2c440e44480dd94c2a419f3355cdd72490a12b1ded20f07f4
Instruction Fuzzy Hash: 4801B5B240D3406FC701CB14AC41C57FBA8DF86520F08856EEC898B105E275BD14CBF2

Function 018C05E0 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2032338993.00000000018C0000.00000040.00000020.00020000.00000000.sdmp, Offset: 018C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_18c0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 78ee48c924c2a554470274fa8cf3bdcc6961eaebccede6b4a3f0f58e053a399d
Instruction ID: c55bd3158a062d76fabbd0358d7ce1d33eb925f674b2514d8bd1edc92695f632
Opcode Fuzzy Hash: 78ee48c924c2a554470274fa8cf3bdcc6961eaebccede6b4a3f0f58e053a399d
Instruction Fuzzy Hash: 540186B65093806FD711CF15DC45862FFB8EB86620709C19FED898B656D269B804CB72

Function 018C082E Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2032338993.00000000018C0000.00000040.00000020.00020000.00000000.sdmp, Offset: 018C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_18c0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: baf49825b061746d47c2f2e81403da4a45b115a50a9220530026a2f96fa5e26b
Instruction ID: 369be08eb3bddf839d041ffa6d9831b995911a4541803203f4ffd922e11ede3e
Opcode Fuzzy Hash: baf49825b061746d47c2f2e81403da4a45b115a50a9220530026a2f96fa5e26b
Instruction Fuzzy Hash: 8CF082B29452046BD240DF15ED46856F7ECDF84521F08C52EEC488B304E276BD154AE6

Function 05520C50 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 621e57c4abfa75333a36051765dafe53153c07a13f99be1657f27d23dc364cdd
Instruction ID: ecf69fb5a64241a3a956d509b3cd8dd9976f58b652c5b1cca750fa5804d97ac5
Opcode Fuzzy Hash: 621e57c4abfa75333a36051765dafe53153c07a13f99be1657f27d23dc364cdd
Instruction Fuzzy Hash: FDE0D831F143141FCB84DEB858441ED7FE5EB91660B62457AC008D7262EF3588428380

Function 018C0606 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2032338993.00000000018C0000.00000040.00000020.00020000.00000000.sdmp, Offset: 018C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_18c0000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dac9a247e41a832a882b8c43142fbcd03d9dedf249873ad210ec7150e0e60989
Instruction ID: 41f0fc96c40c9e6d2d9e31e3be6b188ead031fbdd37cb8a8ad2be8cc75ef885d
Opcode Fuzzy Hash: dac9a247e41a832a882b8c43142fbcd03d9dedf249873ad210ec7150e0e60989
Instruction Fuzzy Hash: 87E092B6A006005B9650CF0AEC82452F7D8EB84630B08C17FDC4D8B705E279B904CAA5

Function 05520C60 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dee27bb54923c8456fa6d629c8d97c1364c5c7b268dd0d4add41acb0fca241df
Instruction ID: 5e3e45f781dead316a49e95a8f7466fa973ffd23a36221875dad3242dc97a428
Opcode Fuzzy Hash: dee27bb54923c8456fa6d629c8d97c1364c5c7b268dd0d4add41acb0fca241df
Instruction Fuzzy Hash: A7D01231F002182F8B54EAB958545AE7AEA9B85564B668479D009D7341EE31D8418790

Function 05520DD1 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ecb0cc32642fe1805550ccd42fb3ce5118eab19a04acd73ee054de01f5b81808
Instruction ID: 285d76e8f331ff09a1b29c1a99091d7013f25ceabe5d6aa8c9a54541428cbf7d
Opcode Fuzzy Hash: ecb0cc32642fe1805550ccd42fb3ce5118eab19a04acd73ee054de01f5b81808
Instruction Fuzzy Hash: 2DE0C2302453148FC7569774C81D9FA3BA5FFD6314F4682AAC84A9B1F2CA389C85DB40

Function 014323F4 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2031731168.0000000001432000.00000040.00000800.00020000.00000000.sdmp, Offset: 01432000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1432000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a13e5f0026b6b4fd4801c510b8005de13f768a94af4894ec398e94482ebb2aa7
Instruction ID: 5c9c4f16b4816b4ee08ad430e109fd54687b82896ef97d027515ad263488700f
Opcode Fuzzy Hash: a13e5f0026b6b4fd4801c510b8005de13f768a94af4894ec398e94482ebb2aa7
Instruction Fuzzy Hash: CBD02E392016904FE3128A1CC1A4F863BE4ABA4704F0A00FAA8008B373C3A8E4C0C200

Function 014323BC Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2031731168.0000000001432000.00000040.00000800.00020000.00000000.sdmp, Offset: 01432000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_1432000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b876c6e4cbd4f9906b9ed620745e9be4ab7a3bcc36db7a9a2e3018cdce1172d
Instruction ID: 7273e9db46e4259cc58964f63d863773bb064e3a245f70e68844e18b37cb293f
Opcode Fuzzy Hash: 4b876c6e4cbd4f9906b9ed620745e9be4ab7a3bcc36db7a9a2e3018cdce1172d
Instruction Fuzzy Hash: 89D05E353412814BD715DA2CC2D5F5A77D4AB88B14F0644E9BC108B372C7B8D8C0CA00

Function 05520DE0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000007.00000002.2033030636.0000000005520000.00000040.00000800.00020000.00000000.sdmp, Offset: 05520000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_7_2_5520000_unarchiver.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c6b0e06844f18df72e62f578e348373dcd71bde6eaead48a2d7b7fd033a358a0
Instruction ID: 098d0eb6f379f10d77565c4349650c302d94c7e0a7b336419d72e3abdfe99133
Opcode Fuzzy Hash: c6b0e06844f18df72e62f578e348373dcd71bde6eaead48a2d7b7fd033a358a0
Instruction Fuzzy Hash: 72C012303012148BC7049768D51DA6A739A7BC4308F46C06494095B2E1CE74EC80C784

Source: global traffic	HTTP traffic detected: GET /lnk/FamigcCEF HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/hdshare.98ea110adcfb01d9ea58.css HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/bootstrap.556f531165a982e55ac1.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare.d10440b3317db342388a.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/bootstrap.556f531165a982e55ac1.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare-vendor.e87c7ef075c6fc68a726.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare-images.2f94aa7829bc7ecd852b.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lnk/js/hdshare.d10440b3317db342388a.js HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OpenSans-SemiBold-webfont.773343aa665d7ab6ceb5.woff HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fa-solid-900.b6879d41b0852f01ed5b.woff2 HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OpenSans-Regular-webfont.8e4fce4052b0df5529c7.woff HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fa-regular-400.b041b1fa4fe241b23445.woff2 HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /exos/icons/exos-icon-font.woff?v=15 HTTP/1.1Host: ce1.uicdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OpenSans-Bold-webfont.b57886ecb84a5d8aa715.woff HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hidrive.ionos.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://hidrive.ionos.com/css/hdshare.98ea110adcfb01d9ea58.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sharelink/info?id=FamigcCEF HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v146/images/static/favicon.ico HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sharelink/info?id=FamigcCEF HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sharelink/info HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v146/images/static/favicon.ico HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sharelink/download?id=FamigcCEF HTTP/1.1Host: hidrive.ionos.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://hidrive.ionos.com/lnk/FamigcCEFAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sharelink/info HTTP/1.1Host: hidrive.ionos.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: hidrive.ionos.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ce1.uicdn.net

Source: https://hidrive.ionos.com/lnk/FamigcCEF#file	HTTP Parser: No <meta name="author".. found
Source: https://hidrive.ionos.com/lnk/FamigcCEF#file	HTTP Parser: No <meta name="author".. found

Source: https://hidrive.ionos.com/lnk/FamigcCEF#file	HTTP Parser: No <meta name="copyright".. found
Source: https://hidrive.ionos.com/lnk/FamigcCEF#file	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://hidrive.ionos.com/lnk/FamigcCEF

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\hqgca3jy.h0w\Business and Financial Details\Building Plan and Property details.pdf.htm

C:\Users\user\AppData\Local\Temp\unarchiver.log

C:\Users\user\Downloads\4b514cdd-6afc-448e-ba26-f053fa21258d.tmp

C:\Users\user\Downloads\Business and Financial Details.zip (copy)

C:\Users\user\Downloads\Business and Financial Details.zip.crdownload

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Windows Analysis Report
https://hidrive.ionos.com/lnk/FamigcCEF

Function 05520C99 Relevance: 5.1, Strings: 4, Instructions: 86
COMMON

Function 05520CA8 Relevance: 5.1, Strings: 4, Instructions: 82
COMMON

Function 0143B246 Relevance: 1.6, APIs: 1, Instructions: 101
COMMON

Function 0143AD04 Relevance: 1.6, APIs: 1, Instructions: 96
COMMON

Function 0143AB76 Relevance: 1.6, APIs: 1, Instructions: 93
pipeCOMMON

Function 0143A5DC Relevance: 1.6, APIs: 1, Instructions: 90
fileCOMMON

Function 0143A120 Relevance: 1.6, APIs: 1, Instructions: 83
fileCOMMON

Function 0143A370 Relevance: 1.6, APIs: 1, Instructions: 80
registryCOMMON

Function 0143B276 Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0143AD2A Relevance: 1.6, APIs: 1, Instructions: 80
COMMON

Function 0143A850 Relevance: 1.6, APIs: 1, Instructions: 78
COMMON

Function 0143A933 Relevance: 1.6, APIs: 1, Instructions: 77
fileCOMMON

Function 0143A5FE Relevance: 1.6, APIs: 1, Instructions: 76
fileCOMMON