Edit tour

Windows Analysis Report
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pe

Overview

General Information

Sample URL:	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptX
Analysis ID:	1558822
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3752 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2240,i,11962410349638849435,3318013894265169833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveContent-Length: 272Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://outlook.office365.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true

Source: chromecache_75.2.dr, chromecache_72.2.dr	String found in binary or memory: https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js
Source: chromecache_75.2.dr	String found in binary or memory: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-4361-a5b0-8e7
Source: chromecache_71.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Source: chromecache_71.2.dr	String found in binary or memory: https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312
Source: chromecache_75.2.dr, chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/images/0/favicon.ico
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.eot?#iefix
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-bold.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-bold.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-light.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-light.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-semibold.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-semibold.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-semilight.ttf
Source: chromecache_72.2.dr	String found in binary or memory: https://r1.res.office365.com/owa/prem/fonts/segoeui-semilight.woff
Source: chromecache_72.2.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.components.mi
Source: chromecache_72.2.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.min.css
Source: chromecache_72.2.dr	String found in binary or memory: https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49781 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/39@18/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2240,i,11962410349638849435,3318013894265169833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2240,i,11962410349638849435,3318013894265169833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ooc-g2.tm-4.office.com	52.98.243.34	true	false	high
CDG-efz.ms-acdc.office.com	40.99.220.50	true	false	high
www.google.com	142.250.185.100	true	false	high
static2.sharepointonline.com	unknown	unknown	false	high
r1.res.office365.com	unknown	unknown	false	high
ajax.aspnetcdn.com	unknown	unknown	false	high
outlook.office365.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://outlook.office365.com/Encryption/lock.png	false	high
https://outlook.office365.com/Encryption/authentication.css	false	high
https://outlook.office365.com/Encryption/default.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	false	high
https://outlook.office365.com/Encryption/help.png	false	high
https://outlook.office365.com/Encryption/OTPSend.ashx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPRef=SigninPage	false	high
https://outlook.office365.com/Encryption/liveid.png	false	high
https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d	false	high
https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	false	high
https://outlook.office365.com/Encryption/base.css	false	high
https://outlook.office365.com/Encryption/arrow.png	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.eot?#iefix	chromecache_72.2.dr	false		high
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.components.mi	chromecache_72.2.dr	false		high
https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-4361-a5b0-8e7	chromecache_75.2.dr	false		high
https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312	chromecache_71.2.dr	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css	chromecache_71.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-semibold.ttf	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/images/0/favicon.ico	chromecache_75.2.dr, chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-light.ttf	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-bold.ttf	chromecache_72.2.dr	false		high
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js	chromecache_75.2.dr, chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-semibold.woff	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.ttf	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.ttf	chromecache_72.2.dr	false		high
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.min.css	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-semilight.woff	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/styles/fonts/office365icons.woff	chromecache_72.2.dr	false		high
https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-bold.woff	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-semilight.ttf	chromecache_72.2.dr	false		high
https://r1.res.office365.com/owa/prem/fonts/segoeui-light.woff	chromecache_72.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
40.99.220.50	CDG-efz.ms-acdc.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
52.98.243.34	ooc-g2.tm-4.office.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1558822
Start date and time:	2024-11-19 20:45:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/39@18/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 64.233.167.84, 142.250.185.174, 34.104.35.123, 152.199.19.160, 93.184.221.240, 2.23.209.33, 2.23.209.10, 2.23.209.25, 2.23.209.15, 192.229.221.95, 2.23.209.38, 104.102.54.247, 142.250.185.138, 172.217.23.106, 142.250.185.74, 142.250.185.106, 216.58.212.170, 172.217.18.106, 142.250.186.74, 142.250.181.234, 142.250.74.202, 216.58.206.74, 142.250.185.202, 142.250.186.42, 142.250.185.234, 142.250.185.170, 216.58.206.42, 142.250.186.138, 142.250.185.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, cs22.wpc.v0cdn.net, e13287.dscg.akamaiedge.net, wildcard.res.office365.com.edgekey.net, e40491.dscd.akamaiedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, mscomajax.vo.msecnd.net, ocsp.digicert.com, edgedl.me.gvt1.com, static2.sharepointonline.com.edgekey.net, update.googleapis.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fP

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	downloaded
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
URL:	https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65277), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	104475
Entropy (8bit):	5.079418602673286
Encrypted:	false
SSDEEP:	384:6Wy2UjuYRXbpwXd2MAfbqdfXCCPcTo5ugIjidunI05bbNJdxIL/lcU/rEE8i4DM9:6F7NJds7XGDlat796yZGZimvq71Z
MD5:	96490FCFBB701FF728C155A776A0A513
SHA1:	E17FE68AA8B8FF6A4A0D9900688A0F1C76E62047
SHA-256:	6B701DBE9B7AEBA38782E2F6726E2A928EC2ABEF62F43866C88F44FD1A282B2A
SHA-512:	647DF948E0405FCF42BD50573AF2E18FCC48966F4C6CD707A469670AFC74708B4E8A7E6889B3429F1DC42784277EDBBE2C7A6B3E22FE452940CDCA159FBB7BEC
Malicious:	false
Reputation:	low
URL:	https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.components.min.css
Preview:	/* Copyright (c) Microsoft. All rights reserved. Licensed under the MIT license. See LICENSE in the project root for license information. /../. Office UI Fabric JS 1.2.0. * The JavaScript front-end framework for building experiences for Office 365.. **/..ms-Breadcrumb{font-family:Segoe UI WestEuropean,Segoe UI,-apple-system,BlinkMacSystemFont,Roboto,Helvetica Neue,sans-serif;-webkit-font-smoothing:antialiased;margin:23px 0 1px}.ms-Breadcrumb.is-overflow .ms-Breadcrumb-overflow{display:inline}.ms-Breadcrumb-chevron{font-size:12px;color:#666;vertical-align:top;margin:11px 7px}.ms-Breadcrumb-list{display:inline;white-space:nowrap;padding:0;margin:0}.ms-Breadcrumb-list .ms-Breadcrumb-listItem{list-style-type:none;vertical-align:top;margin:0;padding:0;display:inline-block}.ms-Breadcrumb-list .ms-Breadcrumb-listItem:last-of-type .ms-Breadcrumb-chevron{display:none}.ms-Breadcrumb-overflow{display:none;position:relative}.ms-Breadcrumb-overflow .ms-Breadcrumb-overflowButton{font-size:16px;

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 26, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2212
Entropy (8bit):	7.097964058978433
Encrypted:	false
SSDEEP:	48:q0itNn2VSJ3Ry1rg1zDJwcd7kfW8ZiUu2e5rYA1:C2wy1EfJwcd7kf9iUDe2C
MD5:	6F31D22D9FFA4E6089617DB8AF93532C
SHA1:	29913AD3687BF5C8468D147EDDB23EEE78C8B6C0
SHA-256:	0B8A4613072E0DF8AB004A6D3AEDDADDDC732FFCBB5C1F2EB806761CA3EB0491
SHA-512:	18CCB83D91AB9EB639AB093E832840465B34D6B5D0B855AE4DABCC0A58E7BC087F6665845ECAF2152CA19997903410526A8FEFBE0FE1E56281E672720678AACA
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/arrow.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6A84CD5D067A11E191CECD000FC74EE5" xmpMM:DocumentID="xmp.did:6A84CD5E067A11E191CECD000FC74EE5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6A84CD5B067A11E191CECD000FC74EE5" stRef:documentID="xmp.did:6A84CD5C067A11E191CECD000FC74EE5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>U......mPLTE...j..Q.....[...........X........n...............L.....H......V..g..O..^........J.....P...........g.......

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	6.346231859040133
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVqLWaeLJyJ3V0LcMLGG5PrLSHhxCt+2l9:oitNn2VpaJ3HerLSBxCtP9
MD5:	A1714B03531B66BD4E47409A42E40586
SHA1:	4B883D903A613D230259DD981065636BCC8DB6F7
SHA-256:	55400220F8792E5146328487B0DBBB259A3F558E8FD51F2B445A5DDB6BC1608E
SHA-512:	411FD6DB3CFE4912392DC4CBBEDB41AF9423048099FE63B4B53A9E7168111586282CF94773CC84E9078F0E38DAB207419019F3E20F0211585DB45ED91462B53B
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/lock.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6B6ED2E994911E190AEAF7FBE865C77" xmpMM:DocumentID="xmp.did:E6B6ED2F994911E190AEAF7FBE865C77"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6B6ED2C994911E190AEAF7FBE865C77" stRef:documentID="xmp.did:E6B6ED2D994911E190AEAF7FBE865C77"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.%..].....H..q,.K..S ...}............W..q ..............Hm..\.mS..s..d ..._F6...@K(..M\|+.6Cw....P.>.

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 11 x 14, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1119
Entropy (8bit):	6.373970549376551
Encrypted:	false
SSDEEP:	24:RhFy1hpunQWwjx82lY2T3gVraXoyJ3Vl/GUHNMQRW/7Vl85:DFwitNn2cZmJ3zwJzM
MD5:	7F776C49514D7C99EA38863445ABF426
SHA1:	BC0FD16E880AB33F3E9DB42BA46209B66BF88644
SHA-256:	9A76FD8ECF68FCDADD8F96FC97FB2EC1F234BAD80B23B0AEDDD99D2BD0819A23
SHA-512:	49908DC8F7A6C4142726BDADAC6BC0156387900E5F62CBD7319F0063EA04594D3891E2BF7CC2115F25678849F02EC1E1D8A49ABA1A4CD4EEBE39A2946C1D457A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............a.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:5ED2985C491111E1B646B2E2D8E41427" xmpMM:DocumentID="xmp.did:5ED2985D491111E1B646B2E2D8E41427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5ED2985A491111E1B646B2E2D8E41427" stRef:documentID="xmp.did:5ED2985B491111E1B646B2E2D8E41427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.......)q .d...@.n...\|.F.b.Bo {...0`.X ...t.............b ..1..8.Ib!..u...........).F.\..~..... ..

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32042), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	71409
Entropy (8bit):	5.147942230203707
Encrypted:	false
SSDEEP:	1536:6fCzb6ZwoT62ty40f9cIn9sUfrDajj8Y8awNMvOOedOmyLpVZ4rR5JmeUNLCtGfw:UKOmyWTtGfw
MD5:	FEEE42503B4F434E577AD8FE100CE6F2
SHA1:	4DC83CDA17E8774F333343FA3D2A34E57AA76AF9
SHA-256:	36B147DA61D542A557A9B3D490E9EA174874C8D0D8FCDF35A841734BB5604ED5
SHA-512:	D768B59DE6444E1687DEF8A57A9E84D3D988089DFBC36552DB3A1F0F18BE8F04B4565EC5E01EB600A5AA3881C124B9F312AD72FDCF081B16B2361A4CCF381BB4
Malicious:	false
Reputation:	low
URL:	https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/js/fabric.min.js
Preview:	//Copyright (c) Microsoft. All rights reserved. Licensed under the MIT license. See LICENSE in the project root for license information.../*. Office UI Fabric JS 1.2.0. * The JavaScript front-end framework for building experiences for Office 365.. */.var fabric;!function(e){var t=33,i=function(){function e(){}return e.transition=function(t,i){var n={element:t,props:i,transformations:{}};e._animationObjects.push(n),e._parseProperties(n),e._createTransition(n),setTimeout(e._setProperties,0,n),e._setCallback(n)},e.animation=function(t,i,n){var s={element:t,keyframes:i,props:n};e._animationObjects.push(s),e._parseProperties(s),e._createAnimation(s),e._setCallback(s)},e.scrollTo=function(t,i){var n={element:t,props:i,step:0};e._setScrollProperties(n),n.props.delay?setTimeout(e._animationObjects,1e3n.props.delay,n):e._animateScroll(n),e._animationObjects.push(n)},e._setScrollProperties=function(e){e.beginTop=e.element.scrollTop,e.change=e.props.top-e.beginTop,e.props.duration=1e3*e.prop

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 29464, version 1.0
Category:	downloaded
Size (bytes):	29464
Entropy (8bit):	7.9806313354933565
Encrypted:	false
SSDEEP:	768:YvDsls654eX7+H3NHTobFlalhMtxr+LfESHIPUJ:YvDsYZH3tcRglGw8SHIPc
MD5:	6A419545705DEE19082E8E62105488DF
SHA1:	72A5D33A47932ED6CF2D196C8D8222204E4A71FD
SHA-256:	C63A3930EC9DD26C24B4C62B83D8CF778416A0DED1D9AA83E0840A675155B71B
SHA-512:	E3F5DEA379C35EAF243919AC8AB3D3D55AE365D0F089E20B4598ACB04638E510036BCFB1F706C013956B87592414AA792F8A308430D0A91FD318E6E657DB01C2
Malicious:	false
Reputation:	low
URL:	https://r1.res.office365.com/owa/prem/fonts/segoeui-semilight.woff
Preview:	wOFF......s........p........................GDEF..............GPOS............p..GSUB...X........m~x.OS/2.......V...`j.u5cmap...L.......@.y..cvt ...........,.$.fpgm............s.ugasp...P...........#glyf...`..C...e..)#.head..Z....6...6....hhea..Z8... ...$...hmtx..ZX.........c.kern..\....G..#..l.loca..m4........b.\|.maxp..o(... ... ....name..oH...h...,.\|.npost..q........ .Q.wprep..q....Q.....`............."................................x...{p........r.........iZ...8.!n..F..)nB..&...B.._...C.q..$l.&f...,C.;S$.N.YM..$:...Y..v:...8~..._..N..\|.........s.....R..c..O5....5..n..E,K2..!Y...d..'.;.D..]..O...=;.4...[E;.-g..s~...d.........g......u..{A.$;....w.8....<.@.....3=..eF.......f_.w\|......{o....E./z%g..3..$.<wM..gs..[.W..l^8............u.8...p.9.9..;?...s.Saa..%...W.....p[.....-)z...Ef._.....e\C..5.H.H..W...Ws&..(.rF......;.6[.c...reJ>W.8..e.,.y.{.R&k.@..uR,.Zn....D..G..Y...........Wvr.K....C..J...,..U..+..tRN...)n..i.;#...rV.....c.~A.H..V..C.*q."?.O%)

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	4449
Entropy (8bit):	4.959152531462339
Encrypted:	false
SSDEEP:	48:7qyQcdoKm44W8KozfBKhcJCdu7CDdrf1/RaaNJLav+CQDvO:GyQc+iozfUhcS1/RBDU+1m
MD5:	59D7E00D1CDBA87D824C22F43744ABB7
SHA1:	0BF43CA8CF9FE088F23C69188902250E52E15A25
SHA-256:	F0A913AF5D92533B11D86B937B425D1D0F8EB8112895910ED9F3C08AB796E6A8
SHA-512:	ED14FD12B03D2CF672B29AA9F63E535F8E893E693DB0568AEF5A25C80E78DAAE325BED9F168C3C460A8D9148F16C1075A5965D48A4380FEF468849873AD5035B
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/base.css
Preview:	/.. The base styles shared by the default.aspx, errorpage.aspx and signuppage.aspx.. The only thing required on the aspx is the definition of the font families.. /....* {.. padding:0px;.. margin:0px;.. border:0px;..}....html {.. height:100%;..}....body {.. height:100%;..}.....rootTable {.. width:100%;.. height:100%;..}.....header {.. overflow:hidden;.. vertical-align:top;.. height:40px;..}.....headerTable {.. width:100%;..}.....infoColumn {.. background-color:rgb(0, 114, 198);..}.....infoTable {.. width:100%;..}.....defaultColumn {.. white-space:nowrap;.. overflow:hidden;.. text-overflow:ellipsis;..}.....defaultColumnWithWrap {.. white-space: normal;.. overflow: hidden;.. text-overflow: ellipsis;..}.....stretchColumn {.. width:100%;.. white-space:nowrap;.. overflow:hidden;.. text-overflow:ellipsis;..}.....brandingColumn {..}.....brandingText {.. font-family:'Segoe UI Regular';.. font-size:13px;.. c

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1100
Entropy (8bit):	6.346231859040133
Encrypted:	false
SSDEEP:	24:K1hpunQWwjx82lY2T32HEVqLWaeLJyJ3V0LcMLGG5PrLSHhxCt+2l9:oitNn2VpaJ3HerLSBxCtP9
MD5:	A1714B03531B66BD4E47409A42E40586
SHA1:	4B883D903A613D230259DD981065636BCC8DB6F7
SHA-256:	55400220F8792E5146328487B0DBBB259A3F558E8FD51F2B445A5DDB6BC1608E
SHA-512:	411FD6DB3CFE4912392DC4CBBEDB41AF9423048099FE63B4B53A9E7168111586282CF94773CC84E9078F0E38DAB207419019F3E20F0211585DB45ED91462B53B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:E6B6ED2E994911E190AEAF7FBE865C77" xmpMM:DocumentID="xmp.did:E6B6ED2F994911E190AEAF7FBE865C77"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:E6B6ED2C994911E190AEAF7FBE865C77" stRef:documentID="xmp.did:E6B6ED2D994911E190AEAF7FBE865C77"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.%..].....H..q,.K..S ...}............W..q ..............Hm..\.mS..s..d ..._F6...@K(..M\|+.6Cw....P.>.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2955
Entropy (8bit):	7.853182148758864
Encrypted:	false
SSDEEP:	48:CocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODh+YPLIdqc:CZ/I09Da01l+gmkyTt6Hk8nTtc
MD5:	2F6B2AC283DCE9A4930FF7AAD20556B0
SHA1:	D552F0DD2FA493111D303CF014F350FF3C5D789D
SHA-256:	DA7B1E7C0E95A9CABA46BE191F562268CEE236556F67E4B10F2B3A05785B9CAD
SHA-512:	9326C5F1FE1B8EF2FD095DBC40FB94F72D6BCBD38BC63598467C3F9AFD9A5E6E182CF88B67F3797F78D31535B4465ECA62118395C96598CA34ABD98DF89F24AD
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/liveid.png
Preview:	.PNG........IHDR...P...P............pHYs...#...#.x.?v...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.3527805169937888
Encrypted:	false
SSDEEP:	24:uBt4Xx4WdZSKhds/KIaCBD4+VLmNmPmTkVKva0bb1FrCyRwGiuaa4sjgV6m2/NUZ:uB+XA3RByBLCDuvjjgSKsx7cccccb
MD5:	F82312F1281E8D6C87F7FFCA0A7D147C
SHA1:	103D0C7B915B40584E0543856E87B360568FE8C8
SHA-256:	DEC51A1A5C6F5DADDEBE7C7D1048319969446F03DE89A953C3C3514F8DB08E8A
SHA-512:	C9EA288CC6D9D4B9872FCC49FD2AD461C9600B807311CD82C07C68465224D3A6004FA89F60088A34BBCF4CA96404F5A1B01E6009CA4FD964D63A53CF856F7C0C
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... .....@....................................................................................................x...x.!.x.I.x.].................................x.C.x.m.x...x...x...x...x...x...................................x...x...x...x...x...x...x...x...................................x...x...x...t...w...x...x...v...(o.u...x...x...x...x...........x...x...x...s..8..t...x...u....w.u...x...x...x...x...........x...o.............(..x...u.../w.l...v...x...x...x...........x...{.......d...z..v..t...u....Bw.....N..q...x...x...........x...u.......b......i..u...q....w.{!......n...x...........x...r...t..........w...x...v..."w.u...q....T.....u...........x...x...r...\|...t...w...x...u...2{.t...x...u...~%.............x...x...x...x...x...x...x...w....G.v...x...x...w...u...........x...x...x...x...x...x...x...x...................................x...x...x.E.x.o.x...x...x...x.......................................................x...x

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.3527805169937888
Encrypted:	false
SSDEEP:	24:uBt4Xx4WdZSKhds/KIaCBD4+VLmNmPmTkVKva0bb1FrCyRwGiuaa4sjgV6m2/NUZ:uB+XA3RByBLCDuvjjgSKsx7cccccb
MD5:	F82312F1281E8D6C87F7FFCA0A7D147C
SHA1:	103D0C7B915B40584E0543856E87B360568FE8C8
SHA-256:	DEC51A1A5C6F5DADDEBE7C7D1048319969446F03DE89A953C3C3514F8DB08E8A
SHA-512:	C9EA288CC6D9D4B9872FCC49FD2AD461C9600B807311CD82C07C68465224D3A6004FA89F60088A34BBCF4CA96404F5A1B01E6009CA4FD964D63A53CF856F7C0C
Malicious:	false
Reputation:	low
URL:	https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/images/0/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... .....@....................................................................................................x...x.!.x.I.x.].................................x.C.x.m.x...x...x...x...x...x...................................x...x...x...x...x...x...x...x...................................x...x...x...t...w...x...x...v...(o.u...x...x...x...x...........x...x...x...s..8..t...x...u....w.u...x...x...x...x...........x...o.............(..x...u.../w.l...v...x...x...x...........x...{.......d...z..v..t...u....Bw.....N..q...x...x...........x...u.......b......i..u...q....w.{!......n...x...........x...r...t..........w...x...v..."w.u...q....T.....u...........x...x...r...\|...t...w...x...u...2{.t...x...u...~%.............x...x...x...x...x...x...x...w....G.v...x...x...w...u...........x...x...x...x...x...x...x...x...................................x...x...x.E.x.o.x...x...x...x.......................................................x...x

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 34924, version 1.0
Category:	downloaded
Size (bytes):	34924
Entropy (8bit):	7.987740829472462
Encrypted:	false
SSDEEP:	768:CtDsmvhrD92jyxJtf+JzT2z6K1AWhoWQGQwXg4MqHNESHHfW:CtDs0l92jktf+BAlbQwQceSnfW
MD5:	46749BBAEBFE8F28B80DF5381DD55AA4
SHA1:	EC0C969053EC70DB78B2067955330B6D50DF6300
SHA-256:	07EC698B1036CDFBB8892F02D9510F5F671284FCA9FA003B883996DA040A444B
SHA-512:	F6760BC6DB9418B109F191705D0539F4E85B9EEFC097A63FCB471A83D398D0A7AD7E8AAD90A417B42B9A9F2D5A645300476B49E0C129AB9D6AEB5C21382586B6
Malicious:	false
Reputation:	low
URL:	https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff
Preview:	wOFF.......l.......p........................GDEF..............GPOS............p..GSUB...X........m~x.OS/2.......Y...`k.v.cmap...P.......@.y..cvt ............\|.].fpgm.......D.....<.gasp...............#glyf... ..S3.....3jhead..kT...6...6.czNhhea..k.... ...$...Vhmtx..k....}......b\kern..n,...G..#..l.loca..~t.........Y..maxp...h... ... .i.)name.......a........post........... .Q.wprep.......l...@..............."................................x...{p........r.........iZ...8.!n..F..)nB..&...B.._...C.q..$l.&f...,C.;S$.N.YM..$:...Y..v:...8~..._..N..\|.........s.....R..c..O5....5..n..E,K2..!Y...d..'.;.D..]..O...=;.4...[E;.-g..s~...d.........g......u..{A.$;....w.8....<.@.....3=..eF.......f_.w\|......{o....E./z%g..3..$.<wM..gs..[.W..l^8............u.8...p.9.9..;?...s.Saa..%...W.....p[.....-)z...Ef._.....e\C..5.H.H..W...Ws&..(.rF......;.6[.c...reJ>W.8..e.,.y.{.R&k.@..uR,.Zn....D..G..Y...........Wvr.K....C..J...,..U..+..tRN...)n..i.;#...rV.....c.~A.H..V..C.q."?.O%)

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65291), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	68062
Entropy (8bit):	5.268457023539725
Encrypted:	false
SSDEEP:	384:JbmwPxF9aWzSDiBwQ9M2VGJqiU29ccZlR8iFzSDr+wF8pHBsFkeJxRS6tShRxqrR:JbttkWD/nTc3q4L78YoMElZH
MD5:	5D48F159BC5F915DCB15225B450087D8
SHA1:	B326B865D25F5479F3A53982A86CC7AD617C1F70
SHA-256:	6D578EB55E7FB3FC677C63E6AB840053A5773CA0B667D6FE6DC27EDBD1A59E73
SHA-512:	FF64C81B93C12ECEE4AC931BB105BA6472B008934106B896DCC1CC7A125067E2BA06FC310CAB001F9F03F6234426AB2FD2F6DB34D6CC754654B145A3D86F53E8
Malicious:	false
Reputation:	low
URL:	https://static2.sharepointonline.com/files/fabric/office-ui-fabric-js/1.2.0/css/fabric.min.css
Preview:	/* Copyright (c) Microsoft. All rights reserved. Licensed under the MIT license. See LICENSE in the project root for license information. /../. Office UI Fabric 4.0.0. * The front-end framework for building experiences for Office 365.. */..ms-u-borderBox,.ms-u-borderBox:after,.ms-u-borderBox:before{box-sizing:border-box}.ms-u-borderBase{border:1px solid}.ms-u-clearfix{zoom:1}.ms-u-clearfix:after,.ms-u-clearfix:before{display:table;content:'';line-height:0}.ms-u-clearfix:after{clear:both}.ms-u-normalize{box-sizing:border-box;margin:0;padding:0;box-shadow:none}.ms-u-textAlignLeft{text-align:left}.ms-u-textAlignCenter{text-align:center}.ms-u-textAlignRight{text-align:right}.ms-u-screenReaderOnly{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);border:0}.ms-u-textTruncate{overflow:hidden;text-overflow:ellipsis;white-space:nowrap;word-wrap:normal}.ms-u-noWrap{white-space:nowrap}.ms-bgColor-themeDark,.ms-bgColor-themeDark--hover:hover{bac

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32077)
Category:	dropped
Size (bytes):	97163
Entropy (8bit):	5.373204330051448
Encrypted:	false
SSDEEP:	1536:GYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJSFk/zkZ4HjL5o8srOaS9TwD6b7/Jp9i:t4J+R3jL5TCOauTwD6FdnCVQNea98HrV
MD5:	4F252523D4AF0B478C810C2547A63E19
SHA1:	5A9DCFBEF655A2668E78BAEBEAA8DC6F41D8DABB
SHA-256:	668B046D12DB350CCBA6728890476B3EFEE53B2F42DBB84743E5E9F1AE0CC404
SHA-512:	8C6B0C1FCDE829EF5AB02A643959019D4AC30D3A7CC25F9A7640760FEFFF26D9713B84AB2E825D85B3B2B08150265A10143F82E05975ACCB10645EFA26357479
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.12.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="1.12.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.ca

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 11 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1119
Entropy (8bit):	6.373970549376551
Encrypted:	false
SSDEEP:	24:RhFy1hpunQWwjx82lY2T3gVraXoyJ3Vl/GUHNMQRW/7Vl85:DFwitNn2cZmJ3zwJzM
MD5:	7F776C49514D7C99EA38863445ABF426
SHA1:	BC0FD16E880AB33F3E9DB42BA46209B66BF88644
SHA-256:	9A76FD8ECF68FCDADD8F96FC97FB2EC1F234BAD80B23B0AEDDD99D2BD0819A23
SHA-512:	49908DC8F7A6C4142726BDADAC6BC0156387900E5F62CBD7319F0063EA04594D3891E2BF7CC2115F25678849F02EC1E1D8A49ABA1A4CD4EEBE39A2946C1D457A
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/help.png
Preview:	.PNG........IHDR..............a.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh" xmpMM:InstanceID="xmp.iid:5ED2985C491111E1B646B2E2D8E41427" xmpMM:DocumentID="xmp.did:5ED2985D491111E1B646B2E2D8E41427"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5ED2985A491111E1B646B2E2D8E41427" stRef:documentID="xmp.did:5ED2985B491111E1B646B2E2D8E41427"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.......)q .d...@.n...\|.F.b.Bo {...0`.X ...t.............b ..1..8.Ib!..u...........).F.\..~..... ..

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.625
Encrypted:	false
SSDEEP:	3:Hbn:7n
MD5:	05DA8015B8DCA87F7D4E80372F381C2E
SHA1:	1E37124AB8958B7361F22CD0D4CBFDD9A1D463BE
SHA-256:	AE034EB99602D00F80C511546FD1D809C4CFD0494FA47B55A6566607D34FBFDB
SHA-512:	BE8C2780E9EFEE56FCA511E6E817D313215439C2E8BB9F4EE74ACE5A956D3D9D6D0DB37478CAAA34B89339FA384D238A970E17FE924F8CA0A157B5F31F8E9ECE
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmkKmy0jz5l8hIFDXrXs00=?alt=proto
Preview:	CgkKBw1617NNGgA=

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3304
Entropy (8bit):	5.034048268230628
Encrypted:	false
SSDEEP:	96:UxL7ynHvWj4X+0/l3iwboLbuvNnZZrzz8kFr:Ul73wTb8buvJZZB
MD5:	3F551716BD63A0A2CFB3384B3A56611C
SHA1:	80FEFB90F288D7C1F28FFA9616239776F86DE12A
SHA-256:	08A857EEEC64D9C6B3ECE76762EED837929E0E6F8A29D1315A04D38C3053B4B6
SHA-512:	D34C1466AA8059401D6A2BB12E96552D6C7D722F74AD97D1B8A8AEC67116B35D903671155BBF5CBD96129A646A2BEABEF39B6BB68F7A50DAAC9EEDB8C876E3D7
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/authentication.css
Preview:	/.. The base styles is used only by authentication page... The css styles are from <linkrel="stylesheet"href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">.. tha tauthentication page used to reference. However, it's causing narrator issue where it's announcing "table" for every "<div>".. Bug: https://o365exchange.visualstudio.com/IP%20Engineering/_queries/edit/1648312.. /....* {.. -webkit-box-sizing:border-box;-.. moz-box-sizing:border-box;.. box-sizing:border-box;..}....body {.. font-family:"HelveticaNeue",Helvetica,Arial,sans-serif;.. font-size:14px;.. line-height:1.42857143;.. color:#333;.. background-color:#fff;.. margin:0..}....button,.input,.select,.textarea {.. font-family:inherit;.. font-size:inherit;.. line-height:inherit..}....p {.. margin:0010px..}....a {.. color:#337ab7;.. text-decoration:none..}..a:focus,.a:hover {.. color:#23527c;.. text-decoration:underline..}..a:focus {.. ou

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8634
Entropy (8bit):	5.068139529857937
Encrypted:	false
SSDEEP:	192:EaKeFh0YSmD/EAG7E7C7CbEICPjK00hWz:lKeFh0YSmD/HG4mmbz+jKNWz
MD5:	81D4F122A53FDEF35A921262576790FA
SHA1:	ABFAE1687BF899958683DFC7E68D283C524E264E
SHA-256:	5F799431F92B27BF742AA2475B2713C2004E5395803AC70AB6D82D0E63CE2D58
SHA-512:	A61D334228D11B6544F4B215794CE1A86DD182A6ED2EBF91CE89496C603B9FE2E77C0659502B099709D63467E989E732392A84F051BC65CBDBADBC60F9764537
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/ErrorPage.aspx?src=5&code=20&be=PAXPR01MB8758&fe=FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM&hrs=24
Preview:	....<!DOCTYPE html>....<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">..<head>.. <meta name="e4ePage" content="errorpage.aspx"/>.. ..<meta http-equiv="X-UA-Compatible" content="IE=10" />..<meta http-equiv="pragma" content="no-cache" />..<meta name="format-detection" content="telephone=no"/>..<meta name="viewport" content="user-scalable=0, width=device-width, initial-scale=1.0, maximum-scale=1.0"/>..<meta name="msapplication-tap-highlight" content="no" />..<meta name="google" value="notranslate">.... <title>Encrypted Message Error</title>.. ..<style>..@font-face {..font-family: 'Segoe UI WPC';..src: url('https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff') format('woff'),.. url('https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.ttf') format('truetype');..}..@font-face {..font-family: 'Segoe UI Regular';..src: url('https://r1.res.office365.com/owa/prem/fonts/segoeui-regular.woff') format('woff'),.. url('https://r1.res.office365.com/owa

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 26, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2212
Entropy (8bit):	7.097964058978433
Encrypted:	false
SSDEEP:	48:q0itNn2VSJ3Ry1rg1zDJwcd7kfW8ZiUu2e5rYA1:C2wy1EfJwcd7kf9iUDe2C
MD5:	6F31D22D9FFA4E6089617DB8AF93532C
SHA1:	29913AD3687BF5C8468D147EDDB23EEE78C8B6C0
SHA-256:	0B8A4613072E0DF8AB004A6D3AEDDADDDC732FFCBB5C1F2EB806761CA3EB0491
SHA-512:	18CCB83D91AB9EB639AB093E832840465B34D6B5D0B855AE4DABCC0A58E7BC087F6665845ECAF2152CA19997903410526A8FEFBE0FE1E56281E672720678AACA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6A84CD5D067A11E191CECD000FC74EE5" xmpMM:DocumentID="xmp.did:6A84CD5E067A11E191CECD000FC74EE5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6A84CD5B067A11E191CECD000FC74EE5" stRef:documentID="xmp.did:6A84CD5C067A11E191CECD000FC74EE5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>U......mPLTE...j..Q.....[...........X........n...............L.....H......V..g..O..^........J.....P...........g.......

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32042), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	71409
Entropy (8bit):	5.147942230203707
Encrypted:	false
SSDEEP:	1536:6fCzb6ZwoT62ty40f9cIn9sUfrDajj8Y8awNMvOOedOmyLpVZ4rR5JmeUNLCtGfw:UKOmyWTtGfw
MD5:	FEEE42503B4F434E577AD8FE100CE6F2
SHA1:	4DC83CDA17E8774F333343FA3D2A34E57AA76AF9
SHA-256:	36B147DA61D542A557A9B3D490E9EA174874C8D0D8FCDF35A841734BB5604ED5
SHA-512:	D768B59DE6444E1687DEF8A57A9E84D3D988089DFBC36552DB3A1F0F18BE8F04B4565EC5E01EB600A5AA3881C124B9F312AD72FDCF081B16B2361A4CCF381BB4
Malicious:	false
Reputation:	low
Preview:	//Copyright (c) Microsoft. All rights reserved. Licensed under the MIT license. See LICENSE in the project root for license information.../*. Office UI Fabric JS 1.2.0. * The JavaScript front-end framework for building experiences for Office 365.. */.var fabric;!function(e){var t=33,i=function(){function e(){}return e.transition=function(t,i){var n={element:t,props:i,transformations:{}};e._animationObjects.push(n),e._parseProperties(n),e._createTransition(n),setTimeout(e._setProperties,0,n),e._setCallback(n)},e.animation=function(t,i,n){var s={element:t,keyframes:i,props:n};e._animationObjects.push(s),e._parseProperties(s),e._createAnimation(s),e._setCallback(s)},e.scrollTo=function(t,i){var n={element:t,props:i,step:0};e._setScrollProperties(n),n.props.delay?setTimeout(e._animationObjects,1e3n.props.delay,n):e._animateScroll(n),e._animationObjects.push(n)},e._setScrollProperties=function(e){e.beginTop=e.element.scrollTop,e.change=e.props.top-e.beginTop,e.props.duration=1e3*e.prop

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (340), with CRLF line terminators
Category:	downloaded
Size (bytes):	8231
Entropy (8bit):	5.0252231656769455
Encrypted:	false
SSDEEP:	96:EnUcGi3svQk9iJvid956GRsvQkR1PRsvQkAqckIpra+5rN5WcqMRUUcx1B1ye2Ms:EnG9BVy3ypvIpOexRUjx1Tye2kD7JZJw
MD5:	98C89B3FA2C78E3A6EE27B2FDAAD16AB
SHA1:	8B3CA076A4437842268A9A423785ED55EE1A5B39
SHA-256:	2797596E1F34624E3FC6898AB252C5CD9D9D28BF88D405A7411287E4B19DCB0E
SHA-512:	6EACC784D7911FEAE7A7005C3709BAD9C35E456A2B17E01817E359A0CE0FC4DB50A10B1EEA029FB8423F6E679CB8BA7C7FE44D812F1A6B66F70214464D2A506D
Malicious:	false
Reputation:	low
URL:	https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d
Preview:	....<!DOCTYPE html>....<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US">..<head>.. <meta charset="utf-8">.. <meta http-equiv="X-UA-Compatible" content="IE=edge">.. <meta name="viewport" content="width=device-width, initial-scale=1">.. <meta name="e4ePage" content="authenticationpage.aspx"/>.. <script src="https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.12.4.min.js"></script>.. <title>Encrypted Message Authentication</title>.. <link rel="shortcut icon" href="https://r1.res.office365.com/owa/prem/15.20.8158.23/resources/images/0/favicon.ico" type="image/x-icon" />.. <link rel="stylesheet" type="text/css" href="authentication.css">.... <script>.. $(document).ready(function() {.. $("#signinButton").click(function() {.. LogOAuthSignIn('Microsoft', 'signinbutton', 'user clicked sign in button');.... var url = "https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=1736cb2d-2432-436

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 20:46:12.728564024 CET	49675	443	192.168.2.4	173.222.162.32
Nov 19, 2024 20:46:15.460506916 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.460552931 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:15.460613966 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.460673094 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.460684061 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:15.461056948 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.461077929 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:15.461092949 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.529421091 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:15.529479027 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.292721033 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.293086052 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.293124914 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.294209957 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.294280052 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.294296026 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.294368029 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.295655012 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.295727968 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.295867920 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.295881987 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.341306925 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.355875015 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.356172085 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.356239080 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.357287884 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.357362986 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.357383966 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.357441902 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.357785940 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.357856989 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.402862072 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:16.402889967 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:16.449552059 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:17.535168886 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:17.535231113 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:17.535326958 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:17.535571098 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:17.535592079 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.220999002 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.225325108 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:18.225361109 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.226250887 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.226336956 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:18.228876114 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:18.228950024 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.277116060 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:18.277152061 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:18.322640896 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:18.371900082 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:18.371949911 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:18.372035980 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:18.374228954 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:18.374242067 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.081088066 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.081168890 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.085371017 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.085402966 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.085832119 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.133922100 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.137531996 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.183372021 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.246680021 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:19.246762991 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:19.246788025 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:19.246889114 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:19.246937037 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:19.247713089 CET	49735	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:19.247733116 CET	443	49735	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:19.250650883 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:19.250740051 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:19.403019905 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.403105974 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.403172970 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.403264046 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.403264046 CET	49740	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.403305054 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.403346062 CET	443	49740	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.438761950 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.438807964 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:19.438879967 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.439265013 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:19.439282894 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.153975964 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.154052973 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.155925989 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.155944109 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.156368971 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.157706022 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.199331999 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.486406088 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.486511946 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.486598015 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.487531900 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.487552881 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:20.487569094 CET	49741	443	192.168.2.4	184.28.90.27
Nov 19, 2024 20:46:20.487579107 CET	443	49741	184.28.90.27	192.168.2.4
Nov 19, 2024 20:46:21.783037901 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:21.783447027 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:21.783523083 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:21.783935070 CET	49736	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:21.783999920 CET	443	49736	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:21.785939932 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:21.785998106 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:21.786068916 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:21.786343098 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:21.786359072 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:22.640527964 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:22.640888929 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:22.640917063 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:22.642182112 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:22.642528057 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:22.642769098 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:22.642833948 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:22.694158077 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.545412064 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.545480967 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.545500994 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.545533895 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.545542002 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.545562983 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.545592070 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.545773029 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.546040058 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.577943087 CET	49742	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.577970982 CET	443	49742	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.581931114 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.582024097 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.582186937 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.587337971 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.587399960 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.591126919 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.591183901 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:24.591289043 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.591533899 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:24.591552019 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.604677916 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.605158091 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.605197906 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.605520010 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.608623981 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.610503912 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.610590935 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.610805988 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.610831022 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.611056089 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.611093998 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.611587048 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.612057924 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.612144947 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.612441063 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.612476110 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.665227890 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:25.665254116 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:25.666615009 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:25.667980909 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:25.667989969 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:25.866177082 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.866193056 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.866255045 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.866331100 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.866548061 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.866849899 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.866904974 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.874794006 CET	49743	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.874809980 CET	443	49743	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.875303030 CET	49745	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.875344038 CET	443	49745	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.891160011 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.891191959 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.891284943 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.891778946 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:25.891793966 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:25.935909986 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:25.935950994 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:25.936259985 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:25.938038111 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:25.938051939 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.278736115 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:26.278812885 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:26.282099962 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:26.282114983 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:26.282351971 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:26.325515985 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:26.892111063 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.903789043 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:26.907550097 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.907561064 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.908427000 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.908487082 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.908494949 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.908528090 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.909182072 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.909219980 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.909584999 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:26.909646034 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:26.910160065 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:26.910511017 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.910520077 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:26.913171053 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:26.913263083 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:26.913358927 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:26.913383007 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:26.955193996 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:26.983422041 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.027365923 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.135210991 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:27.135709047 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:27.135760069 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:27.136883020 CET	49749	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:27.136899948 CET	443	49749	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:27.182387114 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182410002 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182416916 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182425976 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182446957 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182471991 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.182485104 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.182512999 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.182532072 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.183161974 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.183219910 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.183223963 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.183233976 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.183293104 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.310677052 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:27.310703039 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:27.310762882 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:27.310787916 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:27.310806036 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:27.310827971 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:27.310859919 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:27.312815905 CET	49748	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:27.312830925 CET	443	49748	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:27.322570086 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:27.322622061 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:27.322679996 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:27.323323965 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:27.323339939 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:27.839196920 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.839196920 CET	49746	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:46:27.839225054 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:27.839237928 CET	443	49746	20.12.23.50	192.168.2.4
Nov 19, 2024 20:46:28.075045109 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:28.075109005 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:28.075366974 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:28.109499931 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.111818075 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.111846924 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.112396955 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.113217115 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.113298893 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.114305019 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.114329100 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.333023071 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.333058119 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.333117962 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.333153963 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.333168983 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.333194017 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.333225965 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.335361958 CET	49754	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:28.335381985 CET	443	49754	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:28.338685989 CET	49739	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:46:28.338737011 CET	443	49739	142.250.185.100	192.168.2.4
Nov 19, 2024 20:46:29.666877985 CET	80	49723	217.20.57.36	192.168.2.4
Nov 19, 2024 20:46:29.667048931 CET	49723	80	192.168.2.4	217.20.57.36
Nov 19, 2024 20:46:29.667210102 CET	49723	80	192.168.2.4	217.20.57.36
Nov 19, 2024 20:46:29.671988010 CET	80	49723	217.20.57.36	192.168.2.4
Nov 19, 2024 20:46:34.654211998 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.654310942 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:34.654442072 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.655961990 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.655997992 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:34.671658039 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.671698093 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:34.671778917 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.672075033 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:34.672087908 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.481353045 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.481738091 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:35.481786966 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.482309103 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.482738972 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:35.482834101 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.482968092 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:35.483022928 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.484199047 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.484431982 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:35.484448910 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.484765053 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.485141039 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:35.485192060 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:35.539233923 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.087225914 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.087506056 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.087595940 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.126723051 CET	49759	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.126741886 CET	443	49759	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.142643929 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.142702103 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363743067 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363764048 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363771915 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363814116 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363840103 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.363864899 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363882065 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.363899946 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.363933086 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.364062071 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.364125967 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.364170074 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.366327047 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.366339922 CET	443	49760	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.366355896 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.366395950 CET	49760	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.401217937 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.401277065 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.401371956 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.402905941 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.402925014 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.402982950 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.403229952 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.403244019 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.403307915 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.403660059 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.403682947 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.404438019 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.404449940 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:36.404805899 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:36.404824972 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.224317074 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.224661112 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.224678040 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225085974 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225317955 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225436926 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.225486994 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225579977 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225580931 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.225605011 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225733042 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.225748062 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.225816965 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.225825071 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.226082087 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.226375103 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.226458073 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.226474047 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.226501942 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.227292061 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.227360964 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.227369070 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.227405071 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.228225946 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.228307962 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.228454113 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.228461981 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.275160074 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.275160074 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.462495089 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.462851048 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.462908983 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.463639021 CET	49761	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.463659048 CET	443	49761	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.466676950 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.466713905 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:37.466800928 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.467065096 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.467076063 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:37.614521980 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.614543915 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.614595890 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.614607096 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.614751101 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.614790916 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.615809917 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.615823984 CET	443	49762	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.615861893 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.616677999 CET	49762	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.621176004 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.621203899 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.621274948 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.621318102 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.621337891 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.621381044 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.623308897 CET	49763	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:37.623336077 CET	443	49763	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:37.626178980 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.626215935 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:37.626286983 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.626501083 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:37.626512051 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.465511084 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.465715885 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.465756893 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.466074944 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.466484070 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.466545105 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.466643095 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.466672897 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.468300104 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.468472958 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.468481064 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.468972921 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.469312906 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.469387054 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.469413996 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.469464064 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.508799076 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.694427967 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.694466114 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.694526911 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.694544077 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.694968939 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.695010900 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.704262972 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.704407930 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.704477072 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.771585941 CET	49768	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.771619081 CET	443	49768	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:38.774883986 CET	49767	443	192.168.2.4	40.99.220.50
Nov 19, 2024 20:46:38.774904966 CET	443	49767	40.99.220.50	192.168.2.4
Nov 19, 2024 20:46:49.787617922 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.787724972 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:49.787854910 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.788057089 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.788114071 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:49.788172960 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.793276072 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.793291092 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:49.793435097 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:49.793471098 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.602004051 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.642113924 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.647188902 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.674000025 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.674048901 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.675359011 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.678941965 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.678997993 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.679626942 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.682194948 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.682393074 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.683866978 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.683995008 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.684457064 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.684518099 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.684536934 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.727351904 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.730870962 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.975547075 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.975632906 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.975680113 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.975864887 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:50.975924969 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.975925922 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.975925922 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.978027105 CET	49773	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:50.978069067 CET	443	49773	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.642853022 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.642853022 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.642995119 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.644908905 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.644938946 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.645015955 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.646471024 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.646485090 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971081972 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971144915 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971165895 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971203089 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971226931 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.971241951 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971292019 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.971292019 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.971308947 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971380949 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:57.971424103 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971553087 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:57.971607924 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:58.014058113 CET	49774	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:58.014086962 CET	443	49774	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:58.463531017 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:58.463809013 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:58.463826895 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:58.464323997 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:58.464728117 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:46:58.464809895 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:46:58.509675980 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:04.290853024 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.290973902 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:04.291057110 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.291748047 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.291785002 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:04.867568970 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:04.867846012 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.872726917 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.872760057 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:04.872999907 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:04.883621931 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:04.927330017 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.280966997 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281008005 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281023979 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281440973 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.281533003 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281713963 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281754017 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281758070 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.281775951 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281805038 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.281816959 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.281816959 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.281884909 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.281884909 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.286750078 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.286750078 CET	49779	443	192.168.2.4	20.12.23.50
Nov 19, 2024 20:47:05.286787033 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:05.286818981 CET	443	49779	20.12.23.50	192.168.2.4
Nov 19, 2024 20:47:06.758654118 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:06.758766890 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:06.758847952 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:06.763508081 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:06.763542891 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:06.763911009 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:06.763952971 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:06.764060974 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103791952 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103861094 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103913069 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103933096 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103961945 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.103971004 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:07.103990078 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.104021072 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:07.104047060 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:07.104101896 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.104163885 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:07.105855942 CET	49778	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:07.105871916 CET	443	49778	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:07.574311018 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:07.574417114 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:07.574528933 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:07.575014114 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:07.575059891 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.035936117 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.036288023 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.036370039 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.036712885 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.037044048 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.037115097 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.037216902 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.037256002 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.236664057 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.236794949 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.238950968 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.238982916 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.239342928 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.249350071 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.291367054 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.350730896 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.350805044 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.350848913 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.350893974 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.350940943 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.350976944 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.351005077 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.366602898 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.366630077 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.366662979 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.366719007 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.366731882 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.366785049 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.433389902 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.433444023 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.433517933 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.433592081 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.433629990 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.433676004 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.437134027 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.437218904 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.437239885 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.437309027 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.518984079 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.519035101 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.519102097 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.519129038 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.519164085 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.519186020 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.520983934 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.521028996 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.521090984 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.521106005 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.521133900 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.521222115 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.522859097 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.522923946 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.522999048 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.523032904 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.523091078 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.523091078 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.524053097 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.524173021 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.524216890 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.524292946 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.605897903 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.605954885 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.606015921 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.606040001 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.606070042 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.606103897 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.607387066 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.607431889 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.607486010 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.607498884 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.607525110 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.607544899 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.609257936 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.609285116 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.609342098 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.609352112 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.609391928 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.609416962 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.610142946 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.610160112 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.610217094 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.610227108 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.610270023 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.611084938 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.611102104 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.611159086 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.611169100 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.611206055 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.611466885 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.612914085 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.612932920 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.612973928 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.612977028 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.612986088 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.613029003 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.613053083 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.613095999 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.614914894 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.614936113 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.614948034 CET	49781	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.614954948 CET	443	49781	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.659847975 CET	49780	443	192.168.2.4	52.98.243.34
Nov 19, 2024 20:47:08.659894943 CET	443	49780	52.98.243.34	192.168.2.4
Nov 19, 2024 20:47:08.746256113 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.746280909 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.746344090 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.748888016 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.748984098 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.749059916 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.749366999 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.749454021 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.749528885 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.749936104 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.749947071 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.750086069 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.750130892 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.750334024 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.750353098 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.751024008 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751077890 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.751136065 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751370907 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751393080 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.751409054 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751458883 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:08.751518965 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751621962 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:08.751638889 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.400501966 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.401277065 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.401346922 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.402424097 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.402431965 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.415865898 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.416332006 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.416359901 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.416383982 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.416806936 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.416815996 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.417114973 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.417130947 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.417494059 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.417499065 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.422498941 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.422836065 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.422914982 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.423197031 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.423212051 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.501892090 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.501957893 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.502070904 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.502121925 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.502155066 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.502187014 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.502214909 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.502418041 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.502450943 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.502477884 CET	49784	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.502492905 CET	443	49784	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.505891085 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.505991936 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.506143093 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.506308079 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.506331921 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517812967 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517848969 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517855883 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517919064 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517930984 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.517940998 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.517987013 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.517998934 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518074036 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518137932 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518172979 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518188953 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518201113 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518201113 CET	49782	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518207073 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518212080 CET	443	49782	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518306017 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518306017 CET	49783	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.518349886 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.518377066 CET	443	49783	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.521012068 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521055937 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.521063089 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521090031 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.521137953 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521168947 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521292925 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521306038 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.521318913 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.521333933 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.525654078 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.525702000 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.525753975 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.525886059 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.525886059 CET	49785	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.525914907 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.525955915 CET	443	49785	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.528094053 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.528105974 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.528183937 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.528316975 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.528330088 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.629889011 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.630693913 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.630714893 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.631213903 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.631220102 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.736656904 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.736695051 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.736761093 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.736785889 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.736818075 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.736866951 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.737067938 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.737085104 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.737099886 CET	49786	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.737106085 CET	443	49786	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.740309000 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.740333080 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:09.740418911 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.740591049 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:09.740600109 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.149077892 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.149966002 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.150054932 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.150321007 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.150336027 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.166312933 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.166836023 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.166852951 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.167242050 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.167249918 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.186532974 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.187190056 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.187206984 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.187494040 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.187500954 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.195871115 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.196352005 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.196372986 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.196757078 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.196763992 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.250699997 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.250900030 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.251030922 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.251406908 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.251456022 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.251486063 CET	49787	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.251502991 CET	443	49787	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.254880905 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.254956961 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.255057096 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.255244970 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.255275965 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.265925884 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.265979052 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.266082048 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.266453028 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.266467094 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.266490936 CET	49790	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.266498089 CET	443	49790	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.268733025 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.268786907 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.268897057 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.269021034 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.269041061 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.291358948 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.291517973 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.291594028 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.291614056 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.291620016 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.291647911 CET	49788	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.291652918 CET	443	49788	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.293607950 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.293698072 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.293817997 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.293919086 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.293940067 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.306613922 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.306694031 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.306752920 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.307043076 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.307054996 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.307069063 CET	49789	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.307075024 CET	443	49789	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.309730053 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.309796095 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.309902906 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.309998035 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.310029030 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.386746883 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.387342930 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.387357950 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.387881994 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.387888908 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.486828089 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.486999035 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.487066984 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.487289906 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.487289906 CET	49791	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.487308025 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.487328053 CET	443	49791	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.490382910 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.490422010 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.490524054 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.490689039 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.490705967 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.902631044 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.910769939 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.910835981 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.911499977 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.911514997 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.930109978 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.931087017 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.931106091 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.931693077 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.931704044 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.939131975 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.939747095 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.939790964 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.940324068 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.940340042 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.958070040 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.958774090 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.958821058 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:10.959532976 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:10.959553957 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.009872913 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.009947062 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.010044098 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.032130003 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.032325029 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.032411098 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.041771889 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.041943073 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.042027950 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.069179058 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.069242001 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.069314957 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.091466904 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.091466904 CET	49792	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.091541052 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.091578960 CET	443	49792	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.092741013 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.092808962 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.092849016 CET	49795	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.092866898 CET	443	49795	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.100187063 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.100187063 CET	49794	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.100204945 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.100227118 CET	443	49794	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.101269007 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.101290941 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.101317883 CET	49793	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.101329088 CET	443	49793	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.137059927 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.137115955 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.137192965 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.143778086 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.155231953 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.155276060 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.155363083 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.164426088 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.164452076 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.169503927 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.169524908 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.174460888 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.174468040 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.178855896 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.178870916 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.193036079 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.193074942 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.193186045 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.193336964 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.193375111 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.198066950 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.198146105 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.198240042 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.198386908 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.198424101 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.271656990 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.271823883 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.271909952 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.273367882 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.273387909 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.273405075 CET	49796	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.273411036 CET	443	49796	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.289020061 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.289067984 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.289181948 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.289355993 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.289371967 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.827807903 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.828737974 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.828768969 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.829376936 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.829384089 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.865681887 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.866213083 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.866249084 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.866818905 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.866832018 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.878034115 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.878623962 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.878652096 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.878671885 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.878990889 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.879014015 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.879190922 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.879200935 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.879609108 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.879616022 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.930017948 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.930521965 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.930552959 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.931111097 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.931124926 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.932065964 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.932235003 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.932302952 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.932360888 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.932362080 CET	49797	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.932388067 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.932401896 CET	443	49797	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.937096119 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.937181950 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.937294006 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.937500954 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.937535048 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.969436884 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.969604969 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.969696045 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.969793081 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.969813108 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.969825983 CET	49799	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.969832897 CET	443	49799	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.972995996 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.973037958 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.973120928 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.973335981 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.973350048 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.980269909 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.980335951 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.980395079 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.980514050 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.980514050 CET	49798	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.980550051 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.980576038 CET	443	49798	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.981952906 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.982100010 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.982172966 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.982244015 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.982244015 CET	49800	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.982280016 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.982304096 CET	443	49800	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.983956099 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.983990908 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.984090090 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.984247923 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.984262943 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.984296083 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.984380007 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:11.984451056 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.984628916 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:11.984663963 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.029169083 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.029328108 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.029422045 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.029464960 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.029478073 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.029489040 CET	49801	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.029494047 CET	443	49801	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.032309055 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.032335043 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.032419920 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.032633066 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.032646894 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.589392900 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.590086937 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.590112925 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.590727091 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.590735912 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.618614912 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.619136095 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.619147062 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.619765997 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.619770050 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.634995937 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.635454893 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.635502100 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.636006117 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.636014938 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.641091108 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.641479969 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.641499043 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:12.641968966 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:12.641978025 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.698604107 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.698682070 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.698858976 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.698926926 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.698956013 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699044943 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699045897 CET	49802	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699079990 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699089050 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699116945 CET	443	49802	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699126959 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699176073 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699178934 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699234962 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699295044 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699309111 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699342012 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699378967 CET	49804	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699385881 CET	443	49804	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699454069 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699594975 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699637890 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.699681997 CET	49805	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.699698925 CET	443	49805	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.701107979 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.701137066 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.701157093 CET	49803	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.701165915 CET	443	49803	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.701198101 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.701936960 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.701951027 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.702579021 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.702583075 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.704375982 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.704391956 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.704423904 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.704426050 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.704504013 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.704557896 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.704756975 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.704772949 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.705159903 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.705189943 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.705765009 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.705776930 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.705858946 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.705952883 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.705967903 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.706187010 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.706223965 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.706307888 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.706454039 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.706475973 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.804054976 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.804157019 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.804233074 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.804441929 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.804455042 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.804467916 CET	49806	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.804471970 CET	443	49806	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.807985067 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.808037043 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:13.808113098 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.808332920 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:13.808348894 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.345891953 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.346520901 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.346600056 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.346997976 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.347009897 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.354041100 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.354367971 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.354398012 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.354772091 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.354782104 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.389482975 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.389939070 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.389949083 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.390295029 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.390300989 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.422499895 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.422926903 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.422991037 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.423310041 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.423338890 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.445599079 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.445684910 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.445751905 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.445961952 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.445961952 CET	49809	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.446002007 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.446027040 CET	443	49809	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.450027943 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.450062037 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.450158119 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.450336933 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.450350046 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.458029032 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.458086014 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.458182096 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.458343983 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.458358049 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.458384037 CET	49811	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.458398104 CET	443	49811	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.460764885 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.460825920 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.460913897 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.461044073 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.461061001 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.486927032 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.487647057 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.487695932 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.488322973 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.488337040 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.494379997 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.494559050 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.494628906 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.494677067 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.494697094 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.494709969 CET	49810	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.494718075 CET	443	49810	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.497677088 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.497694016 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.497776031 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.497972965 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.497984886 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.526922941 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.527007103 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.527065039 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.527204990 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.527224064 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.527236938 CET	49807	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.527242899 CET	443	49807	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.530472040 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.530555964 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.530684948 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.530854940 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.530888081 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.596503019 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.596685886 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.596877098 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.597151995 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.597193956 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.597220898 CET	49812	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.597238064 CET	443	49812	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.600883961 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.600985050 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:14.601098061 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.601332903 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:14.601373911 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.092932940 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.093605995 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.093626022 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.094094992 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.094100952 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.125513077 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.126173973 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.126228094 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.126611948 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.126626015 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.142636061 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.143116951 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.143127918 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.143673897 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.143680096 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.192974091 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.193166971 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.193262100 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.193418980 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.193445921 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.193464994 CET	49813	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.193471909 CET	443	49813	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.197122097 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.197221041 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.197312117 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.197552919 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.197587967 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.198708057 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.199186087 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.199218035 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.199629068 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.199641943 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.237116098 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.237320900 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.237416029 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.237504005 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.237540960 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.237598896 CET	49814	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.237615108 CET	443	49814	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.240746975 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.240835905 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.240947008 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.241149902 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.241180897 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.246536970 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.246699095 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.246767998 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.246814013 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.246835947 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.246849060 CET	49815	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.246855974 CET	443	49815	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.249182940 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.249217987 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.249331951 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.249473095 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.249485970 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.249695063 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.250091076 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.250134945 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.250504971 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.250520945 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.306570053 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.306736946 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.306823015 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.306910992 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.306910992 CET	49816	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.306952953 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.306978941 CET	443	49816	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.309320927 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.309385061 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.309498072 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.309664011 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.309699059 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.348556995 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.348716974 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.348808050 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.348995924 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.349040985 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.349070072 CET	49817	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.349086046 CET	443	49817	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.351419926 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.351453066 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.351543903 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.351710081 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.351722956 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.854453087 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.855178118 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.855222940 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.855834007 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.855849028 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.888829947 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.889735937 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.889753103 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.890424013 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.890429020 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.921855927 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.922561884 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.922630072 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.923181057 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.923193932 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.957000017 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.957500935 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.957567930 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.958319902 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.958374023 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.959434032 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.959536076 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.959635019 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.959877968 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.959903955 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.959918022 CET	49818	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.959925890 CET	443	49818	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.963749886 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.963844061 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.963948965 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.964143038 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.964184999 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.987060070 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.987195015 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.987341881 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.987528086 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.987546921 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.987556934 CET	49820	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.987561941 CET	443	49820	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.990686893 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.990741968 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.990825891 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.991055965 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.991075993 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.996548891 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.996998072 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.997023106 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:15.997589111 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:15.997594118 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.027828932 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.027971983 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.028048038 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.028275967 CET	49819	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.028312922 CET	443	49819	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.031258106 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.031362057 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.031469107 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.031706095 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.031740904 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.058120012 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.058267117 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.058341026 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.058476925 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.058514118 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.058542013 CET	49821	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.058557987 CET	443	49821	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.061732054 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.061764002 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.061836958 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.062123060 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.062139034 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.094234943 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.094849110 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.094933987 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.094981909 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.094996929 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.095009089 CET	49822	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.095014095 CET	443	49822	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.097354889 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.097393036 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.097481012 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.097685099 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.097706079 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.623894930 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.624732971 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.624752045 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.625389099 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.625395060 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.636070013 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.636737108 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.636771917 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.637259007 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.637267113 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.671936035 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.672405005 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.672456026 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.673077106 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.673089981 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.711081028 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.711739063 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.711767912 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.712618113 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.712625980 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.723541975 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.723781109 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.723969936 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.724000931 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.724011898 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.724025965 CET	49823	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.724030972 CET	443	49823	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.727229118 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.727344990 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.727580070 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.727709055 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.727749109 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.735970974 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.736119986 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.737175941 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.737176895 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.737176895 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.739397049 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.739428997 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.739502907 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.739638090 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.739651918 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.750070095 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.750588894 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.750668049 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.751285076 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.751298904 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.774565935 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.774632931 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.774799109 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.774847031 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.774847984 CET	49825	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.774878979 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.774902105 CET	443	49825	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.777877092 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.777956963 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.778033018 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.778176069 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.778212070 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.812231064 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.812311888 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.812443018 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.812817097 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.812840939 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.812855959 CET	49826	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.812864065 CET	443	49826	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.815254927 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.815277100 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.815361023 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.815495014 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.815509081 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.864113092 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.864192963 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.864309072 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.864362955 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.864362955 CET	49827	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.864393950 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.864415884 CET	443	49827	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.866568089 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.866614103 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:16.866684914 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.866792917 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:16.866815090 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.039953947 CET	49824	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.039993048 CET	443	49824	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.365833998 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.367098093 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.367172956 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.367786884 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.367805958 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.384744883 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.385117054 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.385133028 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.385660887 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.385665894 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.422302961 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.422811985 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.422867060 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.423353910 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.423367977 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.476603985 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.477313995 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.477333069 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.479273081 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.479276896 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.483396053 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.483570099 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.483635902 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.483700991 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.483700991 CET	49829	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.483717918 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.483726025 CET	443	49829	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.486996889 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.487076044 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.487220049 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.487381935 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.487413883 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.498389959 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.498475075 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.498655081 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.498729944 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.498766899 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.498817921 CET	49828	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.498833895 CET	443	49828	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.500646114 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.501204967 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.501259089 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.501343012 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.501383066 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.501446962 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.501565933 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.501581907 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.501735926 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.501741886 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.525711060 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.525859118 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.526068926 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.526112080 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.526112080 CET	49830	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.526134014 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.526154995 CET	443	49830	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.528649092 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.528681040 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.528770924 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.528907061 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.528930902 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.581912041 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.582030058 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.582169056 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.582436085 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.582456112 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.582469940 CET	49831	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.582478046 CET	443	49831	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.592211962 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:17.592264891 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:17.592360020 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:17.592828989 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:17.592849016 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:17.593616962 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.593703032 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.593785048 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.593954086 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.593983889 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.600934029 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.601011992 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.601197958 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.601284981 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.601285934 CET	49832	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.601330042 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.601361036 CET	443	49832	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.603864908 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.603912115 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:17.604012966 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.604368925 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:17.604384899 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.152117014 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.152882099 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.152908087 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.153148890 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.153541088 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.153570890 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.153575897 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.153599024 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.154064894 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.154078960 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.179712057 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.180099010 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.180116892 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.180609941 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.180620909 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.222136021 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:18.222762108 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:18.222812891 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:18.223304033 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:18.223953962 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:18.224040031 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:18.253135920 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.253799915 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.253845930 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.254429102 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.254436016 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.254926920 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.255014896 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.255075932 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.255357981 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.255402088 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.255429029 CET	49833	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.255446911 CET	443	49833	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.256458044 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.256547928 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.256618023 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.256696939 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.256738901 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.256767988 CET	49834	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.256784916 CET	443	49834	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.258915901 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.260837078 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.260883093 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.260968924 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.261253119 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.261269093 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.261831045 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.261836052 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.262372971 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.262383938 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.263250113 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.263298035 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.263392925 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.263571978 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.263597965 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.274518967 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:18.282356977 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.282417059 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.282490969 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.282630920 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.282650948 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.282675028 CET	49835	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.282685995 CET	443	49835	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.285197020 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.285248995 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.285355091 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.285521984 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.285553932 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.355300903 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.355391979 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.355463028 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.355556011 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.355577946 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.355592966 CET	49838	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.355601072 CET	443	49838	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.357852936 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.357961893 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.358046055 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.358171940 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.358194113 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.362859011 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.363023043 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.363087893 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.363120079 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.363133907 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.363143921 CET	49837	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.363148928 CET	443	49837	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.365398884 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.365443945 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.365524054 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.365654945 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.365674973 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.384037971 CET	49724	80	192.168.2.4	199.232.210.172
Nov 19, 2024 20:47:18.389259100 CET	80	49724	199.232.210.172	192.168.2.4
Nov 19, 2024 20:47:18.389638901 CET	49724	80	192.168.2.4	199.232.210.172
Nov 19, 2024 20:47:18.926213026 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.926938057 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.926976919 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.927580118 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.927586079 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.946419001 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.956916094 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.956964970 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:18.957472086 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:18.957485914 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.000439882 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.000946999 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.001012087 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.001512051 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.001524925 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.017709970 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.018184900 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.018220901 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.018650055 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.018661022 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.024245024 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.024611950 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.024650097 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.024986029 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.024991035 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.032937050 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.033112049 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.033174038 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.033289909 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.033310890 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.033325911 CET	49839	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.033332109 CET	443	49839	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.036657095 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.036703110 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.036804914 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.036977053 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.036993980 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.057130098 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.057209969 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.057261944 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.057471037 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.057507992 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.057533979 CET	49841	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.057549000 CET	443	49841	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.060152054 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.060194016 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.060251951 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.060405970 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.060415983 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.100783110 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.100931883 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.100992918 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.101047993 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.101047993 CET	49840	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.101068020 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.101078987 CET	443	49840	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.103271961 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.103308916 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.103379965 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.103487968 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.103497982 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.120202065 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.120352983 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.120438099 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.120480061 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.120501041 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.120522976 CET	49843	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.120533943 CET	443	49843	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.122863054 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.122883081 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.122951984 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.123085976 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.123097897 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.211779118 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.211869001 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.211997032 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.212291956 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.212340117 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.212369919 CET	49842	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.212385893 CET	443	49842	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.215204954 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.215301991 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.215400934 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.215538025 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.215574026 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.693300962 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.694103956 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.694169998 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.694824934 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.694839954 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.698455095 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.698834896 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.698860884 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.699232101 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.699237108 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.778732061 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.779155970 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.779171944 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.779736042 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.779742002 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.792170048 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.792397976 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.792474985 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.792558908 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.792558908 CET	49844	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.792603970 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.792633057 CET	443	49844	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.795681000 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.795720100 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.795800924 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.795974970 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.795990944 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.803432941 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.803591013 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.803651094 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.803673983 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.803688049 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.803697109 CET	49845	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.803704023 CET	443	49845	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.805951118 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.806042910 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.806126118 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.806267977 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.806302071 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.814624071 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.814954996 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.815005064 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.815479040 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.815493107 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.876348019 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.877006054 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.877037048 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.877573013 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.877585888 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.879359961 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.879600048 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.879661083 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.879702091 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.879718065 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.879729033 CET	49847	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.879734039 CET	443	49847	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.882074118 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.882121086 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.882189035 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.882306099 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.882318020 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.916052103 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.916134119 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.916217089 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.916311979 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.916311979 CET	49846	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.916348934 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.916372061 CET	443	49846	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.918572903 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.918622971 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.918694973 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.918833017 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.918849945 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.981236935 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.981291056 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.981376886 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.981687069 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.981734037 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.981765032 CET	49848	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.981781006 CET	443	49848	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.985214949 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.985323906 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:19.985441923 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.989008904 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:19.989051104 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.439393044 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.439984083 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.440064907 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.440551043 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.440615892 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.440633059 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.440891981 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.440915108 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.441351891 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.441356897 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.525298119 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.526046038 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.526072979 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.526794910 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.526808023 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.539705038 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.539936066 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.539997101 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540043116 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540062904 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.540071011 CET	49849	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540076017 CET	443	49849	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.540312052 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.540474892 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.540541887 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540606022 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540606976 CET	49850	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.540646076 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.540672064 CET	443	49850	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.542803049 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.542840004 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.542912960 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.543039083 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.543057919 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.543071032 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.543143034 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.543204069 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.543281078 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.543306112 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.599486113 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.599925041 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.599941969 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.600369930 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.600374937 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.625102997 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.625266075 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.625334978 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.625447035 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.625459909 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.625471115 CET	49851	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.625474930 CET	443	49851	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.627928972 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.627966881 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.628107071 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.628261089 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.628292084 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.650840998 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.651210070 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.651233912 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.651778936 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.651791096 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.711565971 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.711733103 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.711810112 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.712029934 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.712045908 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.712057114 CET	49852	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.712060928 CET	443	49852	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.715286970 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.715306997 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.715390921 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.715553045 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.715564013 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.757591009 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.757734060 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.757824898 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.757824898 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.757899046 CET	49853	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.757925034 CET	443	49853	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.760149956 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.760185957 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:20.760268927 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.760401011 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:20.760428905 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.215049982 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.215652943 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.215707064 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.216273069 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.216286898 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.232815027 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.233130932 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.233158112 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.233647108 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.233653069 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.269715071 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.270126104 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.270143986 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.270628929 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.270639896 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.318579912 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.318757057 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.318856001 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.319006920 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.319053888 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.319082975 CET	49855	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.319097996 CET	443	49855	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.322129965 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.322180986 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.322274923 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.322411060 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.322418928 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.338356018 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.338501930 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.338567019 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.338608027 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.338608027 CET	49854	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.338630915 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.338644981 CET	443	49854	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.340359926 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.340396881 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.340461969 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.340684891 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.340698004 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.364069939 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.364532948 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.364545107 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.365150928 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.365155935 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.368850946 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.369012117 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.369077921 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.369122028 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.369148016 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.369173050 CET	49856	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.369184971 CET	443	49856	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.371857882 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.371952057 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.372036934 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.372186899 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.372205019 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.410979033 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.411670923 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.411751986 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.412139893 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.412156105 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.463963032 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.464088917 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.464289904 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.464406013 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.464415073 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.464457035 CET	49857	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.464464903 CET	443	49857	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.466763020 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.466798067 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.466871023 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.466993093 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.466999054 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.509496927 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.509655952 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.509718895 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.509799004 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.509799004 CET	49858	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.509841919 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.509870052 CET	443	49858	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.512057066 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.512115002 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.512181997 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.512280941 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.512300968 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.977135897 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.978080034 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.978100061 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.978491068 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.978493929 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.988519907 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.988920927 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.988936901 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:21.989525080 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:21.989528894 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.013685942 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.013997078 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.014034033 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.014484882 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.014502048 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.077841043 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.077886105 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.077938080 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.077955961 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.078057051 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.078109026 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.078242064 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.078258038 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.078269958 CET	49859	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.078274965 CET	443	49859	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.081679106 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.081726074 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.081811905 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.081996918 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.082011938 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.087822914 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.087965965 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.088030100 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.088062048 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.088062048 CET	49860	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.088076115 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.088088036 CET	443	49860	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.090354919 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.090416908 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.090504885 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.090620041 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.090646982 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.114116907 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.114581108 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.114593983 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.115147114 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.115153074 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.117074013 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.117244005 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.117335081 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.117335081 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.117396116 CET	49861	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.117427111 CET	443	49861	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.119616032 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.119638920 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.119704008 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.119822979 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.119841099 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.160326958 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.161149025 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.161187887 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.161618948 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.161629915 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401268959 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401321888 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401418924 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401456118 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401482105 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401489019 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401546955 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401587009 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401607037 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401659012 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401705980 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401714087 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401761055 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401819944 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401835918 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.401845932 CET	49862	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.401851892 CET	443	49862	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.403103113 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.403136969 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.403182030 CET	49863	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.403198004 CET	443	49863	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.410398006 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410443068 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.410526037 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410572052 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410639048 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.410711050 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410726070 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.410733938 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410959005 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.410979986 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.721853971 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.722549915 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.722589016 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.723187923 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.723195076 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.758302927 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.758861065 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.758900881 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.759499073 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.759506941 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.782704115 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.783215046 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.783242941 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.783842087 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.783848047 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.822901964 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.822930098 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.822990894 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.822997093 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.823051929 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.823342085 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.823363066 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.823374987 CET	49864	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.823381901 CET	443	49864	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.826769114 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.826858044 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.826950073 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.827163935 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.827197075 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.865164995 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.865248919 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.865309000 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.865497112 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.865514040 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.865530968 CET	49865	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.865537882 CET	443	49865	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.868634939 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.868727922 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.868807077 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.869404078 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.869436979 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.887624025 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.887798071 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.887861013 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.887902021 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.887908936 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.887921095 CET	49866	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.887926102 CET	443	49866	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.890367031 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.890391111 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:22.890470028 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.890621901 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:22.890635967 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.050102949 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.050498009 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.050745964 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.050806999 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.050908089 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.050951004 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.051239014 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.051253080 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.051513910 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.051522017 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.149487972 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.149652004 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.149787903 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.149952888 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.150000095 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.150031090 CET	49868	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.150048018 CET	443	49868	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.151240110 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.151566982 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.151644945 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.151706934 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.151706934 CET	49867	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.151763916 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.151791096 CET	443	49867	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.153703928 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.153749943 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.153757095 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.153788090 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.153839111 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.153867960 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.153997898 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.154021025 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.154056072 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.154069901 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.471134901 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.471765995 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.471785069 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.472412109 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.472419024 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.505569935 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.506081104 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.506166935 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.506716013 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.506730080 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.532337904 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.532763004 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.532795906 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.533225060 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.533231020 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.569638014 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.569915056 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.569979906 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.570053101 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.570072889 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.570085049 CET	49869	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.570091963 CET	443	49869	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.573544979 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.573618889 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.573684931 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.573913097 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.573935986 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.608182907 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.608777046 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.608854055 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.608926058 CET	49870	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.608947039 CET	443	49870	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.614706039 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.614748001 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.614824057 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.615236044 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.615252972 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.859534025 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.859694958 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.859760046 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.859930038 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.859955072 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.859968901 CET	49871	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.859976053 CET	443	49871	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.863537073 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.863563061 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:23.863626003 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.863826036 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:23.863842010 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.051996946 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.052598953 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.052625895 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.053033113 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.053040981 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.060611010 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.061036110 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.061100006 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.061494112 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.061508894 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.153068066 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.153291941 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.153354883 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.153601885 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.153618097 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.153649092 CET	49873	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.153656006 CET	443	49873	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.157008886 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.157059908 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.157147884 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.157319069 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.157337904 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.166990995 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.167176962 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.167363882 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.167363882 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.167365074 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.169718981 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.169773102 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.169862032 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.169991016 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.170012951 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.235369921 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.236038923 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.236082077 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.236680031 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.236696005 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.474462986 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.474689960 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.474759102 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.474944115 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.474977970 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.475004911 CET	49874	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.475020885 CET	443	49874	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.477349997 CET	49872	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.477368116 CET	443	49872	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.478612900 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.478657007 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.478729010 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.478905916 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.478924990 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.659647942 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.660227060 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.660253048 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.660892963 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.660900116 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.667387009 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.667680979 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.667730093 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.668169975 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.668184996 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.761657000 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.763130903 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.763185978 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.763209105 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.763273001 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.763297081 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.763325930 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.763344049 CET	49875	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.763351917 CET	443	49875	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.766688108 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.766721964 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.766810894 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.766963005 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.766978979 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.770265102 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.770886898 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.770950079 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.770973921 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.770988941 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.771002054 CET	49876	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.771008968 CET	443	49876	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.773422956 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.773503065 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.773581028 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.773718119 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.773752928 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.818356991 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.818870068 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.818887949 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.819509029 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.819524050 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.873128891 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.873816013 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.873893976 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.874419928 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.874435902 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.926208019 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.926369905 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.926574945 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.926621914 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.926621914 CET	49878	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.926645994 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.926659107 CET	443	49878	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.929585934 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.929617882 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.929702997 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.929835081 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.929840088 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.982098103 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.982310057 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.982366085 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.982388020 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.982449055 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.982502937 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.982502937 CET	49877	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.982537985 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.982561111 CET	443	49877	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.984865904 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.984895945 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:24.984962940 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.985066891 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:24.985075951 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.114561081 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.114962101 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.114984035 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.115545988 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.115552902 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.214739084 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.214971066 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.215239048 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.215239048 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.215239048 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.218234062 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.218280077 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.218357086 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.218523026 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.218542099 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.416603088 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.417063951 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.417365074 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.417426109 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.417587042 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.417604923 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.418064117 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.418068886 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.418167114 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.418179989 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.514431953 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.514602900 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.514792919 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.514832020 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.514858007 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.514873028 CET	49880	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.514879942 CET	443	49880	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.515796900 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.516033888 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.516145945 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.516216993 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.516300917 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.516300917 CET	49881	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.516346931 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.516381979 CET	443	49881	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.518672943 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.518717051 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.518795013 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.518901110 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.518925905 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.518945932 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.518980980 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.519115925 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.519181967 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.519203901 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.524364948 CET	49879	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.524399996 CET	443	49879	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.562304020 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.562722921 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.562733889 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.563332081 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.563337088 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.660202980 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.661115885 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.661180973 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.661565065 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.661621094 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.666021109 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.666286945 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.666352987 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.666498899 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.666500092 CET	49882	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.666518927 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.666529894 CET	443	49882	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.669600010 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.669640064 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.669714928 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.669856071 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.669877052 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.765844107 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.765999079 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.766139984 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.766390085 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.766390085 CET	49883	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.766437054 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.766448021 CET	443	49883	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.769763947 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.769841909 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.770240068 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.770241022 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.770322084 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.873574018 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.875660896 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.875713110 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.876279116 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.876291037 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.972515106 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.972791910 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.972887993 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.972971916 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.972971916 CET	49884	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.973011017 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.973032951 CET	443	49884	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.975683928 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.975739002 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:25.975809097 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.975934982 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:25.975954056 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.167800903 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.168488979 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.168519974 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.169121981 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.169127941 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.204602003 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.205228090 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.205285072 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.205837965 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.205854893 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.308981895 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.309103966 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.309180975 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.309206009 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.309292078 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.309453011 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.309504032 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.309534073 CET	49886	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.309550047 CET	443	49886	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.313041925 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.313095093 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.313225031 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.313425064 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.313438892 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.321983099 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.322386026 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.322403908 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.322798967 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.322805882 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.424408913 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.424937963 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.424968004 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.425272942 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.425299883 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429424047 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429543018 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429605007 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.429634094 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429657936 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429718971 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.429764032 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.429779053 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.429792881 CET	49887	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.429800034 CET	443	49887	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.432267904 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.432318926 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.432401896 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.432605028 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.432621956 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.523499966 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.523678064 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.523847103 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.524285078 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.524285078 CET	49888	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.524318933 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.524347067 CET	443	49888	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.526875019 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.526912928 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.527013063 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.527154922 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.527169943 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.628870964 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.629494905 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.629512072 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.630017042 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.630023956 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.733534098 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.733714104 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.733778954 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.733953953 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.733972073 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.733988047 CET	49889	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.733994007 CET	443	49889	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.738171101 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.738219023 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.738317013 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.738435030 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.738446951 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.970307112 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.971965075 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.972021103 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.972121954 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.972141981 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.972156048 CET	49885	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.972162962 CET	443	49885	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.975183010 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.975214005 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.975280046 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.975487947 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.975500107 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.993099928 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.993552923 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.993633032 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:26.994059086 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:26.994074106 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.084552050 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.085016966 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.085051060 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.085500002 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.085506916 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.102850914 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.102999926 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.103072882 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.103220940 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.103276014 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.103302956 CET	49890	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.103348017 CET	443	49890	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.106127977 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.106178999 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.106245041 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.106389999 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.106401920 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.185802937 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.185834885 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.185890913 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.185951948 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.186067104 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.186460972 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.186484098 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.186505079 CET	49891	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.186513901 CET	443	49891	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.189074993 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.189105988 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.189182997 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.189323902 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.189332962 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.191023111 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.191401005 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.191461086 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.191833973 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.191853046 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.298506975 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.299448013 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.299537897 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.299616098 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.299616098 CET	49892	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.299675941 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.299702883 CET	443	49892	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.303230047 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.303334951 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.303442001 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.303603888 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.303628922 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.389091969 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.389991045 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.390026093 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.390345097 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.390355110 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.490392923 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.490813971 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.490876913 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.490921974 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.490942955 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.490957975 CET	49893	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.490966082 CET	443	49893	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.493385077 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.493415117 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.493480921 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.493588924 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.493601084 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.636468887 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.637378931 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.637418032 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.637861967 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.637877941 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.751791954 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.751914024 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.752382994 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.752491951 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.752511024 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.752522945 CET	49894	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.752528906 CET	443	49894	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.755311012 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.755407095 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.755490065 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.755618095 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.755640030 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.768198013 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.768742085 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.768789053 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.769161940 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.769176006 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.835273027 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.835863113 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.835874081 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.836220026 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.836224079 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.867269993 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.867376089 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.867485046 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.867607117 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.868010044 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.868010044 CET	49895	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.868046999 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.868071079 CET	443	49895	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.870443106 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.870521069 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.870616913 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.870757103 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.870779037 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.934423923 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.935434103 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.935503006 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.935537100 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.935556889 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.935569048 CET	49896	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.935573101 CET	443	49896	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.937764883 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.937793970 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.937865973 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.937995911 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.938009977 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.984944105 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.985568047 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.985604048 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:27.985976934 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:27.985987902 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.090264082 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.090492010 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.090606928 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.090925932 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.090958118 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.091005087 CET	49897	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.091020107 CET	443	49897	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.097788095 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.097862959 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.097951889 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.098100901 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.098119020 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.143569946 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:28.143652916 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:28.143929005 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:28.422588110 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.423379898 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.423414946 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.423891068 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.423897028 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.543992996 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.544281960 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.544390917 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.544423103 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.544447899 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.544461012 CET	49898	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.544466019 CET	443	49898	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.547739029 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.547800064 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.547904015 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.548121929 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.548131943 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.608078003 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.608887911 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.608922958 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.609534025 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.609539986 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.613863945 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.614372015 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.614437103 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.615034103 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.615047932 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.617628098 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.618127108 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.618190050 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.618676901 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.618684053 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.712841034 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.713169098 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.713273048 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.713360071 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.713360071 CET	49900	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.713404894 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.713435888 CET	443	49900	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.716738939 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.716789007 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.716881037 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.717051983 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.717067957 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.720813036 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.720978022 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.721045971 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.721112967 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.721137047 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.721152067 CET	49901	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.721158981 CET	443	49901	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.723375082 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.723404884 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.723488092 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.723691940 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.723704100 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.749396086 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.749932051 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.750027895 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.750055075 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.750077963 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.750150919 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.750195026 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.750209093 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.750222921 CET	49899	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.750228882 CET	443	49899	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.752506971 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.752527952 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.752599001 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.752784014 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.752801895 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.778456926 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.778897047 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.778934002 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.779305935 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.779342890 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.887923002 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.888763905 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.888842106 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.888892889 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.888925076 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.888952017 CET	49902	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.888966084 CET	443	49902	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.891976118 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.892005920 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:28.892102003 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.892302990 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:28.892313004 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.232786894 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.233582020 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.233603954 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.234080076 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.234086037 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.337902069 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.338165045 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.338219881 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.338238001 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.338257074 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.338319063 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.338534117 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.338550091 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.338582039 CET	49903	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.338587999 CET	443	49903	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.344288111 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.344316959 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.344383001 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.344918966 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.344933987 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.381608009 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.382082939 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.382148981 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.382900000 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.382915020 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.421133041 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.421719074 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.421742916 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.422146082 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.422157049 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.473176956 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.473568916 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.473579884 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.473963976 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.473968029 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.485840082 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.485904932 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.485972881 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.486069918 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.486108065 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.486135960 CET	49904	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.486150980 CET	443	49904	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.489012957 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.489099026 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.489196062 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.489360094 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.489392042 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.527472019 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.528389931 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.528593063 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.528666973 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.528692007 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.528733015 CET	49906	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.528743029 CET	443	49906	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.531970978 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.532021046 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.532110929 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.532274961 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.532290936 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.566731930 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.567209005 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.567219019 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.567935944 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.567939997 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.589122057 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.589304924 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.589356899 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.589365005 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.589412928 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.589466095 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.591959000 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.591974020 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.591984987 CET	49905	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.591990948 CET	443	49905	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.598721027 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.598766088 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.598834991 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.598997116 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.599014044 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671247005 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671411037 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671488047 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.671497107 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671524048 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671582937 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.671694994 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.671701908 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.671713114 CET	49907	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.671716928 CET	443	49907	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.675455093 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.675492048 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.675574064 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.675831079 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.675846100 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.931875944 CET	49836	443	192.168.2.4	142.250.185.100
Nov 19, 2024 20:47:29.931915998 CET	443	49836	142.250.185.100	192.168.2.4
Nov 19, 2024 20:47:29.986884117 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.996143103 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.996177912 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:29.997637987 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:29.997652054 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.094770908 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.095376968 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.095525980 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.104876995 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.104876995 CET	49908	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.104902029 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.104918003 CET	443	49908	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.116962910 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.117049932 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.117127895 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.125897884 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.125931978 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.159899950 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.160964012 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.161004066 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.161562920 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.161576033 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.206425905 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.207110882 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.207142115 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.207597017 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.207603931 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.256333113 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.256870985 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.256895065 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.257304907 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.257314920 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266407967 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266645908 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266716003 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.266736984 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266768932 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266828060 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.266871929 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.266925097 CET	49909	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.266941071 CET	443	49909	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.269418001 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.269459009 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.269545078 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.269653082 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.269663095 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.309372902 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.309840918 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.309950113 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.309950113 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.309982061 CET	49910	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.310003042 CET	443	49910	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.312906981 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.312999010 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.313116074 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.313281059 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.313314915 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.351039886 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.351495028 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.351506948 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.352360964 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.352365017 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.455789089 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.456207991 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.456286907 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.456338882 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.456358910 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.456372976 CET	49912	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.456377983 CET	443	49912	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.459351063 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.459403992 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.459500074 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.459688902 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.459709883 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.750140905 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.750271082 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.750392914 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.750653028 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.750981092 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.750981092 CET	49911	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.751004934 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.751018047 CET	443	49911	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.754581928 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.754642963 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.754761934 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.754983902 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.755003929 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.794928074 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.795444012 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.795490026 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.796051979 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.796060085 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.900286913 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.900394917 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.900458097 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.900703907 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.900724888 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.900738955 CET	49913	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.900747061 CET	443	49913	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.904587030 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.904687881 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.904803038 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.904987097 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.905011892 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.934422016 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.935125113 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.935149908 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.935893059 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.935899019 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.960591078 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.961033106 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.961056948 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:30.961618900 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:30.961626053 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.050882101 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.051101923 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.051307917 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.051362038 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.051378965 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.051388979 CET	49914	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.051394939 CET	443	49914	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.054796934 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.054879904 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.054976940 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.055202961 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.055236101 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.061434984 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.061873913 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.061980963 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.062056065 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.062104940 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.062124014 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.062138081 CET	49915	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.062144995 CET	443	49915	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.064620018 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.064654112 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.065015078 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.065174103 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.065188885 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.098320007 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.098824024 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.098855972 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.099423885 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.099452019 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.197820902 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.198085070 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.198157072 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.198226929 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.198266029 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.198295116 CET	49916	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.198308945 CET	443	49916	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.201525927 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.201554060 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.201631069 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.201940060 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.201951981 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.412480116 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.413099051 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.413145065 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.413738012 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.413754940 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.510902882 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.511018038 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.511132956 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.511218071 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.511342049 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.511377096 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.511404991 CET	49917	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.511420012 CET	443	49917	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.515263081 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.515311003 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.515475988 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.515697002 CET	49922	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.515712976 CET	443	49922	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.552993059 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.553761959 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.553839922 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.554383993 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.554404020 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.653311014 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.653490067 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.653563023 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.653902054 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.653923035 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.653934956 CET	49918	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.653939962 CET	443	49918	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.658927917 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.658968925 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.659051895 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.659271955 CET	49923	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.659284115 CET	443	49923	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.699476004 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.700223923 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.700287104 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.700891018 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.700905085 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.707042933 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.707541943 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.707570076 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.708102942 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.708108902 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.803157091 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.803256035 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.803452015 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.803669930 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.803719044 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.803811073 CET	49919	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.803828001 CET	443	49919	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.807013988 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.807069063 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.807156086 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.807364941 CET	49924	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.807383060 CET	443	49924	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.813097000 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.813332081 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.813431025 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.813564062 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.813597918 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.813611031 CET	49920	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.813618898 CET	443	49920	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.815943003 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.816031933 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.816131115 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.816441059 CET	49925	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.816478014 CET	443	49925	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.852946997 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.853513956 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.853524923 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.853970051 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.853975058 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.960546970 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.960681915 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.960797071 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.960830927 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.960871935 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.960937977 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.960952997 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.960962057 CET	49921	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.960967064 CET	443	49921	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.964353085 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.964389086 CET	443	49926	13.107.246.45	192.168.2.4
Nov 19, 2024 20:47:31.964551926 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.964679003 CET	49926	443	192.168.2.4	13.107.246.45
Nov 19, 2024 20:47:31.964701891 CET	443	49926	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 19, 2024 20:46:13.761152029 CET	53	57624	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:13.778086901 CET	53	53132	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:14.756249905 CET	53	60126	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:15.431669950 CET	49533	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:15.431817055 CET	53012	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:15.438880920 CET	53	53012	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:15.439179897 CET	53	49533	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:17.526377916 CET	59746	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:17.526505947 CET	49390	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:17.534173965 CET	53	59746	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:17.534190893 CET	53	49390	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:24.579210997 CET	53314	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:24.581492901 CET	51428	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:25.813874006 CET	53443	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:25.814030886 CET	65260	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:25.899143934 CET	49243	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:25.899414062 CET	54278	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:25.905745029 CET	53	49243	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:25.905994892 CET	53	54278	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:27.319477081 CET	55067	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:27.319746971 CET	56254	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:28.462143898 CET	51848	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:28.462348938 CET	50151	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:29.986953974 CET	138	138	192.168.2.4	192.168.2.255
Nov 19, 2024 20:46:31.766799927 CET	53	52923	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:36.401859999 CET	64113	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:36.402040958 CET	61695	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:37.709950924 CET	59715	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:37.710088968 CET	50361	53	192.168.2.4	1.1.1.1
Nov 19, 2024 20:46:37.773030043 CET	53	58938	1.1.1.1	192.168.2.4
Nov 19, 2024 20:46:50.683341026 CET	53	58917	1.1.1.1	192.168.2.4
Nov 19, 2024 20:47:13.703103065 CET	53	59328	1.1.1.1	192.168.2.4
Nov 19, 2024 20:47:13.798413992 CET	53	52042	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Nov 19, 2024 20:46:27.354130983 CET	192.168.2.4	1.1.1.1	c280	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 19, 2024 20:46:15.431669950 CET	192.168.2.4	1.1.1.1	0x755a	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.431817055 CET	192.168.2.4	1.1.1.1	0xa364	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:17.526377916 CET	192.168.2.4	1.1.1.1	0x3c35	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:17.526505947 CET	192.168.2.4	1.1.1.1	0x43b9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:24.579210997 CET	192.168.2.4	1.1.1.1	0xbd9a	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:24.581492901 CET	192.168.2.4	1.1.1.1	0x3d71	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:25.813874006 CET	192.168.2.4	1.1.1.1	0xe720	Standard query (0)	ajax.aspnetcdn.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.814030886 CET	192.168.2.4	1.1.1.1	0x41ac	Standard query (0)	ajax.aspnetcdn.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:25.899143934 CET	192.168.2.4	1.1.1.1	0x94dd	Standard query (0)	outlook.office365.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.899414062 CET	192.168.2.4	1.1.1.1	0xb419	Standard query (0)	outlook.office365.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:27.319477081 CET	192.168.2.4	1.1.1.1	0x58c0	Standard query (0)	r1.res.office365.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:27.319746971 CET	192.168.2.4	1.1.1.1	0x75f6	Standard query (0)	r1.res.office365.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:28.462143898 CET	192.168.2.4	1.1.1.1	0x580e	Standard query (0)	r1.res.office365.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:28.462348938 CET	192.168.2.4	1.1.1.1	0x9169	Standard query (0)	r1.res.office365.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:36.401859999 CET	192.168.2.4	1.1.1.1	0x556c	Standard query (0)	static2.sharepointonline.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:36.402040958 CET	192.168.2.4	1.1.1.1	0x4c80	Standard query (0)	static2.sharepointonline.com	65	IN (0x0001)	false
Nov 19, 2024 20:46:37.709950924 CET	192.168.2.4	1.1.1.1	0x417e	Standard query (0)	static2.sharepointonline.com	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:37.710088968 CET	192.168.2.4	1.1.1.1	0x1bf5	Standard query (0)	static2.sharepointonline.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 19, 2024 20:46:15.438880920 CET	1.1.1.1	192.168.2.4	0xa364	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:15.438880920 CET	1.1.1.1	192.168.2.4	0xa364	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:15.438880920 CET	1.1.1.1	192.168.2.4	0xa364	No error (0)	outlook.ms-acdc.office.com	CDG-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.243.34	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.179.66	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.243.2	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		40.99.150.66	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		40.99.149.210	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.152.178	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.241.178	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:15.439179897 CET	1.1.1.1	192.168.2.4	0x755a	No error (0)	ooc-g2.tm-4.office.com		52.98.152.242	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:17.534173965 CET	1.1.1.1	192.168.2.4	0x3c35	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:17.534190893 CET	1.1.1.1	192.168.2.4	0x43b9	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 19, 2024 20:46:24.586334944 CET	1.1.1.1	192.168.2.4	0xbd9a	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:24.589449883 CET	1.1.1.1	192.168.2.4	0x3d71	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.821088076 CET	1.1.1.1	192.168.2.4	0xe720	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.821239948 CET	1.1.1.1	192.168.2.4	0x41ac	No error (0)	ajax.aspnetcdn.com	mscomajax.vo.msecnd.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	ooc-g2.tm-4.office.com	outlook.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	outlook.ms-acdc.office.com	CDG-efz.ms-acdc.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	CDG-efz.ms-acdc.office.com		40.99.220.50	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	CDG-efz.ms-acdc.office.com		40.99.217.114	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	CDG-efz.ms-acdc.office.com		52.98.151.242	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905745029 CET	1.1.1.1	192.168.2.4	0x94dd	No error (0)	CDG-efz.ms-acdc.office.com		52.98.178.178	A (IP address)	IN (0x0001)	false
Nov 19, 2024 20:46:25.905994892 CET	1.1.1.1	192.168.2.4	0xb419	No error (0)	outlook.office365.com	ooc-g2.tm-4.office.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:27.326906919 CET	1.1.1.1	192.168.2.4	0x58c0	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:27.354073048 CET	1.1.1.1	192.168.2.4	0x75f6	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:28.469647884 CET	1.1.1.1	192.168.2.4	0x580e	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:28.470391989 CET	1.1.1.1	192.168.2.4	0x9169	No error (0)	r1.res.office365.com	wildcard.res.office365.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:36.409403086 CET	1.1.1.1	192.168.2.4	0x556c	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:36.409881115 CET	1.1.1.1	192.168.2.4	0x4c80	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:37.716871023 CET	1.1.1.1	192.168.2.4	0x417e	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Nov 19, 2024 20:46:37.717155933 CET	1.1.1.1	192.168.2.4	0x1bf5	No error (0)	static2.sharepointonline.com	static2.sharepointonline.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

outlook.office365.com

fs.microsoft.com

https:

slscr.update.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:16 UTC	1845	OUT	GET /Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg [TRUNCATED] Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-19 19:46:19 UTC	2828	IN	HTTP/1.1 302 Cache-Control: private Content-Length: 191 Content-Type: text/html; charset=utf-8 Location: /Encryption/default.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 Server: Microsoft-IIS/10.0 request-id: 837132be-b356-0a7f-a64e-8e79c8ca0878 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-OmeVersion=V2; path=/; secure; HttpOnly Set-Cookie: X-ConsumerEncryption=false; path=/; secure; HttpOnly Set-Cookie: X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; path=/; secure; HttpOnly Set-Cookie: E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; path=/; secure; HttpOnly Set-Cookie: X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; path=/; secure; HttpOnly Set-Cookie: X-SenderEmailAddress=dereke_tsao@huntsman.com; path=/; secure; HttpOnly Set-Cookie: X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; path=/; secure; HttpOnly Set-Cookie: X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; path=/; secure; HttpOnly Set-Cookie: X-StoreObjectId=; path=/; secure; HttpOnly Set-Cookie: X-RecipientPrimarySmtp=; path=/; secure; HttpOnly Set-Cookie: E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; path=/; secure; HttpOnly Set-Cookie: X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; path=/; secure; HttpOnly Set-Cookie: X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; path=/; secure; HttpOnly X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0174.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0174 Date: Tue, 19 Nov 2024 19:46:18 GMT Connection: close
2024-11-19 19:46:19 UTC	191	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 64 65 66 61 75 6c 74 2e 61 73 70 78 3f 69 74 65 6d 49 44 3d 45 34 45 5f 4d 5f 61 36 31 63 33 39 38 33 2d 31 37 33 35 2d 34 36 64 39 2d 38 37 63 38 2d 31 33 63 39 65 30 30 30 31 62 33 32 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/default.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:46:19 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75545 Date: Tue, 19 Nov 2024 19:46:19 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49736	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:19 UTC	2209	OUT	GET /Encryption/default.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:21 UTC	1313	IN	HTTP/1.1 302 Content-Length: 673 Content-Type: text/html; charset=utf-8 Location: /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Server: Microsoft-IIS/10.0 request-id: f69f99af-5beb-3981-92a9-f2b93125cdbc X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0167.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0167 Date: Tue, 19 Nov 2024 19:46:21 GMT Connection: close
2024-11-19 19:46:21 UTC	673	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 70 61 67 65 2e 61 73 70 78 3f 73 74 3d 4d 69 63 72 6f 73 6f 66 74 26 61 6d 70 3b 72 75 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 6f 75 74 6c 6f 6f 6b 2e 6f 66 66 69 63 65 33 36 35 2e 63 6f 6d 25 32 66 45 6e 63 72 79 70 74 69 6f 6e 25 32 66 64 65 66 61 75 6c 74 2e 61 73 70 78 25 33 66 69 74 65 6d 49 44 25 33 64 45 34 45 5f 4d 5f 61 36 31 63 33 39 38 33 2d 31 37 33 35 2d 34 36 64 39 2d 38 37 63 38 2d 31 33 63 39 65 30 30 30 31 62 33 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-19 19:46:20 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=75505 Date: Tue, 19 Nov 2024 19:46:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-19 19:46:20 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:22 UTC	2683	OUT	GET /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:24 UTC	924	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 8231 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: c83157c3-b90a-ee55-d82b-b43616627578 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0174.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0174 Date: Tue, 19 Nov 2024 19:46:23 GMT Connection: close
2024-11-19 19:46:24 UTC	8231	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:25 UTC	2610	OUT	GET /Encryption/authentication.css HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:25 UTC	873	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 3304 Content-Type: text/css Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: af5f2602-15be-8911-bbcd-1215a271ca0b X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0179.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0179 Date: Tue, 19 Nov 2024 19:46:25 GMT Connection: close
2024-11-19 19:46:25 UTC	3304	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 54 68 65 20 62 61 73 65 20 73 74 79 6c 65 73 20 69 73 20 75 73 65 64 20 6f 6e 6c 79 20 62 79 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 67 65 2e 0d 0a 20 20 20 20 54 68 65 20 63 73 73 20 73 74 79 6c 65 73 20 61 72 65 20 66 72 6f 6d 20 3c 6c 69 6e 6b 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 78 63 64 6e 2e 62 6f 6f 74 73 74 72 61 70 63 64 6e 2e 63 6f 6d 2f 62 6f 6f 74 73 74 72 61 70 2f 33 2e 33 2e 37 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2e 6d 69 6e 2e 63 73 73 22 3e 0d 0a 20 20 20 20 74 68 61 20 74 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 70 61 67 65 20 75 73 65 64 20 74 6f 20 72 65 66 65 72 65 6e 63 65 2e 20 48 6f 77 65 76 65 72 2c 20 69 74 27 73 20 63 61 75 Data Ascii: /* The base styles is used only by authentication page. The css styles are from <linkrel="stylesheet"href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css"> tha tauthentication page used to reference. However, it's cau

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49743	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:25 UTC	2646	OUT	GET /Encryption/lock.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:25 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1100 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 4f4a2fcd-43f6-c7ad-f35f-11c355eaeabf X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0173.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0173 Date: Tue, 19 Nov 2024 19:46:24 GMT Connection: close
2024-11-19 19:46:25 UTC	1100	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	40.99.220.50	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:26 UTC	1857	OUT	GET /Encryption/lock.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:27 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1100 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: c1867859-9687-02e3-2b6b-34ae1333a16a X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: CDG X-FEProxyInfo: PA7P264CA0108.FRAP264.PROD.OUTLOOK.COM X-FEEFZInfo: CDG X-Powered-By: ASP.NET X-FEServer: PA7P264CA0108 Date: Tue, 19 Nov 2024 19:46:26 GMT Connection: close
2024-11-19 19:46:27 UTC	1100	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49748	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:26 UTC	2648	OUT	GET /Encryption/liveid.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:27 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2955 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 3b42caef-af6c-6745-1721-d330ee03a071 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0168.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0168 Date: Tue, 19 Nov 2024 19:46:27 GMT Connection: close
2024-11-19 19:46:27 UTC	2955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRPPpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:26 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Eg47ZWAWCorGPSA&MD=rwNfsh2X HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-19 19:46:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 32b0959e-1cc3-4dfa-985c-71019f35a94a MS-RequestId: d7e7ef6d-0c95-4745-98ae-194f68299eee MS-CV: Kn2s4NIAbkygpjfM.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 19 Nov 2024 19:46:26 GMT Connection: close Content-Length: 24490
2024-11-19 19:46:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-19 19:46:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49754	40.99.220.50	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:28 UTC	1859	OUT	GET /Encryption/liveid.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:28 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2955 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 69531f90-c9e9-948c-df42-89940241c37a X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: CDG X-FEProxyInfo: PA7P264CA0109.FRAP264.PROD.OUTLOOK.COM X-FEEFZInfo: CDG X-Powered-By: ASP.NET X-FEServer: PA7P264CA0109 Date: Tue, 19 Nov 2024 19:46:28 GMT Connection: close
2024-11-19 19:46:28 UTC	2955	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRPPpHYs.#.#x?vOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49759	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:35 UTC	2843	OUT	GET /Encryption/OTPSend.ashx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPRef=SigninPage HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:36 UTC	1015	IN	HTTP/1.1 302 Cache-Control: private Content-Length: 322 Content-Type: text/html; charset=utf-8 Location: /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 Server: Microsoft-IIS/10.0 request-id: 4074b75c-5f88-82db-6e31-8c6663809ab8 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0176.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0176 Date: Tue, 19 Nov 2024 19:46:35 GMT Connection: close
2024-11-19 19:46:36 UTC	322	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 4f 54 50 53 69 67 6e 69 6e 50 61 67 65 2e 61 73 70 78 3f 69 74 65 6d 49 44 3d 45 34 45 5f 4d 5f 61 36 31 63 33 39 38 33 2d 31 37 33 35 2d 34 36 64 39 2d 38 37 63 38 2d 31 33 63 39 65 30 30 30 31 62 33 32 26 61 6d 70 3b 4f 54 50 4d 65 73 73 61 67 65 49 64 3d 36 65 62 35 32 66 35 32 2d 66 37 63 36 2d 34 34 66 64 2d 39 38 34 35 2d 61 66 63 30 30 35 35 33 39 64 31 37 25 34 30 50 41 58 50 52 30 31 4d 42 38 37 35 38 2e 65 75 72 70 72 64 30 31 2e 70 72 6f 64 2e 65 78 63 68 61 6e 67 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchang

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49760	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:36 UTC	2948	OUT	GET /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:36 UTC	935	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 11751 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: 30d6307a-2a7e-9b0c-c69e-1d28b2ae1ade X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0179.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0179 Date: Tue, 19 Nov 2024 19:46:35 GMT Connection: close
2024-11-19 19:46:36 UTC	11751	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 34 65 50 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 54 50 53 69 67 6e 69 6e 50 61 67 65 2e 61 73 70 78 22 2f 3e 0d 0a 20 20 20 20 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0d 0a 3c Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta name="e4ePage" content="OTPSigninPage.aspx"/> <meta http-equiv="X-UA-Compatible" content="IE=10" /><meta http-equiv="pragma" content="no-cache" /><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:37 UTC	2249	OUT	GET /Encryption/base.css HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:37 UTC	873	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 4449 Content-Type: text/css Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 299681df-cdea-7dd5-9c21-522d621216d8 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0170.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0170 Date: Tue, 19 Nov 2024 19:46:37 GMT Connection: close
2024-11-19 19:46:37 UTC	4449	IN	Data Raw: 2f 2a 0d 0a 20 20 20 20 54 68 65 20 62 61 73 65 20 73 74 79 6c 65 73 20 73 68 61 72 65 64 20 62 79 20 74 68 65 20 64 65 66 61 75 6c 74 2e 61 73 70 78 2c 20 65 72 72 6f 72 70 61 67 65 2e 61 73 70 78 20 61 6e 64 20 73 69 67 6e 75 70 70 61 67 65 2e 61 73 70 78 0d 0a 20 20 20 20 54 68 65 20 6f 6e 6c 79 20 74 68 69 6e 67 20 72 65 71 75 69 72 65 64 20 6f 6e 20 74 68 65 20 61 73 70 78 20 69 73 20 74 68 65 20 64 65 66 69 6e 69 74 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 6e 74 20 66 61 6d 69 6c 69 65 73 0d 0a 20 20 20 20 2a 2f 0d 0a 0d 0a 2a 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 20 7b 0d 0a 20 20 20 20 68 65 69 Data Ascii: /* The base styles shared by the default.aspx, errorpage.aspx and signuppage.aspx The only thing required on the aspx is the definition of the font families / { padding:0px; margin:0px; border:0px;}html { hei

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:37 UTC	2295	OUT	GET /Encryption/help.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:37 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1119 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: f4fc4489-2092-5ed1-f2a4-4d45d4cd062b X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0174.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0174 Date: Tue, 19 Nov 2024 19:46:36 GMT Connection: close
2024-11-19 19:46:37 UTC	1119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0b 00 00 00 0e 08 06 00 00 00 f9 61 e6 95 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49763	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:37 UTC	2296	OUT	GET /Encryption/arrow.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:37 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2212 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 4abae3ca-7839-6e3d-bb68-6912a8a8d25e X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0171.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0171 Date: Tue, 19 Nov 2024 19:46:36 GMT Connection: close
2024-11-19 19:46:37 UTC	2212	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1a 08 03 00 00 00 9e 94 bc fc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49768	40.99.220.50	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:38 UTC	1857	OUT	GET /Encryption/help.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:38 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 1119 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: 84cb9f61-2df6-5dd4-a478-8894b54ee0cc X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: CDG X-FEProxyInfo: PA7P264CA0118.FRAP264.PROD.OUTLOOK.COM X-FEEFZInfo: CDG X-Powered-By: ASP.NET X-FEServer: PA7P264CA0118 Date: Tue, 19 Nov 2024 19:46:37 GMT Connection: close
2024-11-19 19:46:38 UTC	1119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0b 00 00 00 0e 08 06 00 00 00 f9 61 e6 95 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRatEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49767	40.99.220.50	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:38 UTC	1858	OUT	GET /Encryption/arrow.png HTTP/1.1 Host: outlook.office365.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:38 UTC	874	IN	HTTP/1.1 200 OK Cache-Control: public,max-age=2592000 Content-Length: 2212 Content-Type: image/png Last-Modified: Sat, 16 Nov 2024 11:32:10 GMT Accept-Ranges: bytes ETag: "0d9882c1b38db1:0" Server: Microsoft-IIS/10.0 request-id: d4634424-36b8-7f4a-fb8e-14504b67c77c X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: CDG X-FEProxyInfo: PA7P264CA0117.FRAP264.PROD.OUTLOOK.COM X-FEEFZInfo: CDG X-Powered-By: ASP.NET X-FEServer: PA7P264CA0117 Date: Tue, 19 Nov 2024 19:46:38 GMT Connection: close
2024-11-19 19:46:38 UTC	2212	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 1a 08 03 00 00 00 9e 94 bc fc 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 20 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 30 20 36 31 2e 31 33 34 37 37 37 2c 20 32 30 31 30 2f 30 32 2f 31 32 2d 31 37 3a 33 32 3a 30 30 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe< iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49773	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:50 UTC	2616	OUT	POST /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Content-Length: 272 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://outlook.office365.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:50 UTC	272	OUT	Data Raw: 5f 5f 56 49 45 57 53 54 41 54 45 3d 25 32 46 77 45 50 44 77 55 4a 4d 7a 4d 32 4f 54 55 33 4d 44 4d 79 44 32 51 57 41 6d 59 50 46 67 49 65 42 6d 46 6a 64 47 6c 76 62 67 56 45 54 31 52 51 55 32 6c 6e 62 6d 6c 75 55 47 46 6e 5a 53 35 68 63 33 42 34 50 32 6c 30 5a 57 31 4a 52 44 31 46 4e 45 56 66 54 56 39 68 4e 6a 46 6a 4d 7a 6b 34 4d 79 30 78 4e 7a 4d 31 4c 54 51 32 5a 44 6b 74 4f 44 64 6a 4f 43 30 78 4d 32 4d 35 5a 54 41 77 4d 44 46 69 4d 7a 49 57 41 6d 59 50 44 78 59 43 48 67 52 55 5a 58 68 30 42 51 59 6d 62 6d 4a 7a 63 44 74 6b 5a 47 51 45 31 46 4d 30 39 61 4e 49 54 25 32 46 41 5a 48 53 34 58 75 6e 6a 62 64 65 72 4a 6e 49 55 50 62 55 69 37 77 6e 31 39 7a 31 51 69 79 51 25 33 44 25 33 44 26 5f 5f 56 49 45 57 53 54 41 54 45 47 45 4e 45 52 41 54 4f 52 3d 33 Data Ascii: __VIEWSTATE=%2FwEPDwUJMzM2OTU3MDMyD2QWAmYPFgIeBmFjdGlvbgVET1RQU2lnbmluUGFnZS5hc3B4P2l0ZW1JRD1FNEVfTV9hNjFjMzk4My0xNzM1LTQ2ZDktODdjOC0xM2M5ZTAwMDFiMzIWAmYPDxYCHgRUZXh0BQYmbmJzcDtkZGQE1FM09aNIT%2FAZHS4XunjbderJnIUPbUi7wn19z1QiyQ%3D%3D&__VIEWSTATEGENERATOR=3
2024-11-19 19:46:50 UTC	935	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 11867 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: 2a2c775a-859f-a38e-becb-7caa370974a3 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0180.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0180 Date: Tue, 19 Nov 2024 19:46:49 GMT Connection: close
2024-11-19 19:46:50 UTC	11867	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 34 65 50 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 54 50 53 69 67 6e 69 6e 50 61 67 65 2e 61 73 70 78 22 2f 3e 0d 0a 20 20 20 20 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0d 0a 3c Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta name="e4ePage" content="OTPSigninPage.aspx"/> <meta http-equiv="X-UA-Compatible" content="IE=10" /><meta http-equiv="pragma" content="no-cache" /><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49774	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:46:57 UTC	2499	OUT	POST /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Content-Length: 330 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://outlook.office365.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:46:57 UTC	330	OUT	Data Raw: 5f 5f 56 49 45 57 53 54 41 54 45 3d 25 32 46 77 45 50 44 77 55 4a 4d 7a 4d 32 4f 54 55 33 4d 44 4d 79 44 32 51 57 41 6d 59 50 46 67 49 65 42 6d 46 6a 64 47 6c 76 62 67 56 45 54 31 52 51 55 32 6c 6e 62 6d 6c 75 55 47 46 6e 5a 53 35 68 63 33 42 34 50 32 6c 30 5a 57 31 4a 52 44 31 46 4e 45 56 66 54 56 39 68 4e 6a 46 6a 4d 7a 6b 34 4d 79 30 78 4e 7a 4d 31 4c 54 51 32 5a 44 6b 74 4f 44 64 6a 4f 43 30 78 4d 32 4d 35 5a 54 41 77 4d 44 46 69 4d 7a 49 57 41 6d 59 50 44 78 59 47 48 67 52 55 5a 58 68 30 42 53 4e 55 61 47 55 67 62 32 35 6c 4c 58 52 70 62 57 55 67 63 47 46 7a 63 32 4e 76 5a 47 55 67 61 58 4d 67 61 57 35 6a 62 33 4a 79 5a 57 4e 30 4c 68 34 4a 52 6d 39 79 5a 55 4e 76 62 47 39 79 43 6a 73 65 42 46 38 68 55 30 49 43 42 47 52 6b 5a 4d 65 55 48 4f 77 36 36 Data Ascii: __VIEWSTATE=%2FwEPDwUJMzM2OTU3MDMyD2QWAmYPFgIeBmFjdGlvbgVET1RQU2lnbmluUGFnZS5hc3B4P2l0ZW1JRD1FNEVfTV9hNjFjMzk4My0xNzM1LTQ2ZDktODdjOC0xM2M5ZTAwMDFiMzIWAmYPDxYGHgRUZXh0BSNUaGUgb25lLXRpbWUgcGFzc2NvZGUgaXMgaW5jb3JyZWN0Lh4JRm9yZUNvbG9yCjseBF8hU0ICBGRkZMeUHOw66
2024-11-19 19:46:57 UTC	935	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 11867 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: 6a2caeb6-8af7-07c6-b254-24bbbf97b46d X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0176.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0176 Date: Tue, 19 Nov 2024 19:46:57 GMT Connection: close
2024-11-19 19:46:57 UTC	11867	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 34 65 50 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 54 50 53 69 67 6e 69 6e 50 61 67 65 2e 61 73 70 78 22 2f 3e 0d 0a 20 20 20 20 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0d 0a 3c Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta name="e4ePage" content="OTPSigninPage.aspx"/> <meta http-equiv="X-UA-Compatible" content="IE=10" /><meta http-equiv="pragma" content="no-cache" /><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49779	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:04 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Eg47ZWAWCorGPSA&MD=rwNfsh2X HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-19 19:47:05 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 3273396f-a40a-4a50-96da-ce9f67ac4678 MS-RequestId: d3376449-d529-4c4f-ad36-1bf21412c28f MS-CV: 6rOrRj6jOUGSoqL+.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Tue, 19 Nov 2024 19:47:04 GMT Connection: close Content-Length: 30005
2024-11-19 19:47:05 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-11-19 19:47:05 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49778	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:06 UTC	2499	OUT	POST /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Content-Length: 330 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://outlook.office365.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:47:06 UTC	330	OUT	Data Raw: 5f 5f 56 49 45 57 53 54 41 54 45 3d 25 32 46 77 45 50 44 77 55 4a 4d 7a 4d 32 4f 54 55 33 4d 44 4d 79 44 32 51 57 41 6d 59 50 46 67 49 65 42 6d 46 6a 64 47 6c 76 62 67 56 45 54 31 52 51 55 32 6c 6e 62 6d 6c 75 55 47 46 6e 5a 53 35 68 63 33 42 34 50 32 6c 30 5a 57 31 4a 52 44 31 46 4e 45 56 66 54 56 39 68 4e 6a 46 6a 4d 7a 6b 34 4d 79 30 78 4e 7a 4d 31 4c 54 51 32 5a 44 6b 74 4f 44 64 6a 4f 43 30 78 4d 32 4d 35 5a 54 41 77 4d 44 46 69 4d 7a 49 57 41 6d 59 50 44 78 59 47 48 67 52 55 5a 58 68 30 42 53 4e 55 61 47 55 67 62 32 35 6c 4c 58 52 70 62 57 55 67 63 47 46 7a 63 32 4e 76 5a 47 55 67 61 58 4d 67 61 57 35 6a 62 33 4a 79 5a 57 4e 30 4c 68 34 4a 52 6d 39 79 5a 55 4e 76 62 47 39 79 43 6a 73 65 42 46 38 68 55 30 49 43 42 47 52 6b 5a 4d 65 55 48 4f 77 36 36 Data Ascii: __VIEWSTATE=%2FwEPDwUJMzM2OTU3MDMyD2QWAmYPFgIeBmFjdGlvbgVET1RQU2lnbmluUGFnZS5hc3B4P2l0ZW1JRD1FNEVfTV9hNjFjMzk4My0xNzM1LTQ2ZDktODdjOC0xM2M5ZTAwMDFiMzIWAmYPDxYGHgRUZXh0BSNUaGUgb25lLXRpbWUgcGFzc2NvZGUgaXMgaW5jb3JyZWN0Lh4JRm9yZUNvbG9yCjseBF8hU0ICBGRkZMeUHOw66
2024-11-19 19:47:07 UTC	1051	IN	HTTP/1.1 302 Cache-Control: no-cache, no-store Pragma: no-cache Content-Length: 12041 Content-Type: text/html; charset=utf-8 Expires: -1 Location: /Encryption/ErrorPage.aspx?src=5&code=20&be=PAXPR01MB8758&fe=FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM&hrs=24 Server: Microsoft-IIS/10.0 request-id: e121bb2e-10d4-d17d-d4ad-e9fe71a46bc8 X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 302 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 302 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0177 Date: Tue, 19 Nov 2024 19:47:06 GMT Connection: close
2024-11-19 19:47:07 UTC	12041	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 45 6e 63 72 79 70 74 69 6f 6e 2f 45 72 72 6f 72 50 61 67 65 2e 61 73 70 78 3f 73 72 63 3d 35 26 61 6d 70 3b 63 6f 64 65 3d 32 30 26 61 6d 70 3b 62 65 3d 50 41 58 50 52 30 31 4d 42 38 37 35 38 26 61 6d 70 3b 66 65 3d 46 52 30 50 32 38 31 43 41 30 31 37 37 2e 44 45 55 50 32 38 31 2e 50 52 4f 44 2e 4f 55 54 4c 4f 4f 4b 2e 43 4f 4d 26 61 6d 70 3b 68 72 73 3d 32 34 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/Encryption/ErrorPage.aspx?src=5&code=20&be=PAXPR01MB8758&fe=FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM&hrs=24">here</a>.</h2></body></html><!DOCTYPE html

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49780	52.98.243.34	443	2188	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:08 UTC	2415	OUT	GET /Encryption/ErrorPage.aspx?src=5&code=20&be=PAXPR01MB8758&fe=FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM&hrs=24 HTTP/1.1 Host: outlook.office365.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtY [TRUNCATED]
2024-11-19 19:47:08 UTC	924	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Length: 8634 Content-Type: text/html; charset=utf-8 Expires: -1 Server: Microsoft-IIS/10.0 request-id: c17387f1-6350-561b-af1b-e1fec6fb8e3c X-CalculatedBETarget: PAXPR01MB8758.eurprd01.prod.exchangelabs.com X-BackEndHttpStatus: 200 Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-E4E-CorrelationId=; path=/ Set-Cookie: X-AnonResource=true; path=/ X-RUM-Validated: 1 X-RUM-NotUpdateQueriedPath: 1 X-RUM-NotUpdateQueriedDbCopy: 1 X-AspNet-Version: 4.0.30319 X-DiagInfo: PAXPR01MB8758 X-BEServer: PAXPR01MB8758 X-Proxy-RoutingCorrectness: 1 Alt-Svc: h3=":443";ma=2592000,h3-29=":443";ma=2592000 X-Proxy-BackendServerStatus: 200 X-FirstHopCafeEFZ: HHN X-FEProxyInfo: FR0P281CA0174.DEUP281.PROD.OUTLOOK.COM X-FEEFZInfo: HHN X-Powered-By: ASP.NET X-FEServer: FR0P281CA0174 Date: Tue, 19 Nov 2024 19:47:07 GMT Connection: close
2024-11-19 19:47:08 UTC	8634	IN	Data Raw: 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 65 34 65 50 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 72 72 6f 72 70 61 67 65 2e 61 73 70 78 22 2f 3e 0d 0a 20 20 20 20 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 31 30 22 20 2f 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 70 72 61 67 6d 61 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 2d 63 61 63 68 65 22 20 2f 3e 0d 0a 3c 6d 65 Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en-US"><head> <meta name="e4ePage" content="errorpage.aspx"/> <meta http-equiv="X-UA-Compatible" content="IE=10" /><meta http-equiv="pragma" content="no-cache" /><me

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:08 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:08 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:08 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 19 Nov 2024 13:10:03 GMT ETag: "0x8DD089B7B2F27B3" x-ms-request-id: 082f1a68-301e-005d-348c-3ae448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194708Z-185f5d8b95cdtclvhC1NYC4rmc00000009a000000000gm3r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:08 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-11-19 19:47:08 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:09 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:09 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 884d2a23-a01e-00ab-5b8c-3a9106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194709Z-1777c6cb754wcxkwhC1TEB3c6w00000008d000000000pwh5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:09 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:09 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:09 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: ac6669be-e01e-003c-668c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194709Z-r1d97b99577jlrkbhC1TEBq8d000000007mg00000000pwz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:09 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:09 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:09 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: f909c6c7-c01e-0049-518c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194709Z-1777c6cb7549j9hhhC1TEBzmcc00000008f000000000cur5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:09 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:09 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:09 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:09 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: e579fe48-a01e-001e-648c-3a49ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194709Z-r1d97b99577dd2gchC1TEBz5ys00000007rg0000000022ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:09 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:09 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:09 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:09 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 8753231e-501e-008f-038c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194709Z-r1d97b99577ndm4rhC1TEBf0ps00000007x000000000d6xc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:09 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3126d9de-f01e-0099-4d8c-3a9171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-185f5d8b95cqnkdjhC1NYCm8w8000000092g0000000093bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:10 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 70a275ef-201e-0051-048c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-1777c6cb754j47wfhC1TEB5wrw00000004ag00000000mcgh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:10 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1e988f1d-b01e-0070-1b8c-3a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-r1d97b995774n5h6hC1TEBvf8400000007vg000000003xd2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:10 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:10 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: bfe6cc7a-201e-006e-7e8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-185f5d8b95c96jn4hC1NYCbgp8000000097000000000ayw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:10 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:10 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 7f65a9a1-801e-0067-788c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-1777c6cb754xlpjshC1TEBv8cc00000008p000000000ggdf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:10 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 79148a84-101e-0017-578c-3a47c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-1777c6cb754n67brhC1TEBcp9c00000008k000000000myn3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: bdf962e5-c01e-0066-1b8c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-r1d97b99577sdxndhC1TEBec5n00000007v000000000nquf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49793	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:10 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: eb1ded04-b01e-0097-298c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194710Z-185f5d8b95crl6swhC1NYC3ueg000000096g000000014gqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:10 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: a1d80e42-301e-0096-338c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-1777c6cb754wcxkwhC1TEB3c6w00000008fg00000000b761 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: b82db720-b01e-0053-528c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-185f5d8b95cqnkdjhC1NYCm8w800000008y000000000xx1a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: 7511ce5b-801e-0083-468c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-1777c6cb7544nvmshC1TEBf7qc00000008eg0000000024pm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 76a157b4-e01e-00aa-258c-3aceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-185f5d8b95cjbkr4hC1NYCeu2400000008zg00000000qsuk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 302bdaed-601e-003e-338c-3a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-185f5d8b95cf7qddhC1NYC66an000000095g00000000upeh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:11 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b82db7f7-b01e-0053-188c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-1777c6cb754rz2pghC1TEBghen00000008hg000000001ffp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:11 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:11 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:12 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:11 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: a1cde93a-f01e-0020-638c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194711Z-185f5d8b95c9mqtvhC1NYCghtc000000095g00000000us8t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:12 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:12 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:12 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0f1ce2f4-701e-0001-5e8c-3ab110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194712Z-185f5d8b95cjbkr4hC1NYCeu24000000091000000000fq9n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:13 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:12 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:12 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 70a27cfc-201e-0051-268c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194712Z-185f5d8b95csd4bwhC1NYCq7dc000000094000000000bbxt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:13 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:12 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:12 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 70a27cfa-201e-0051-248c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194712Z-r1d97b99577kk29chC1TEBemmg00000007t000000000n151 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:13 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:12 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:13 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:12 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 107b228c-c01e-00a2-1f8c-3a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194712Z-r1d97b995777mdbwhC1TEBezag00000007p000000000trgt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:13 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:13 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:13 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:13 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 947c7cf8-001e-00a2-018c-3ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194713Z-185f5d8b95c4bhwphC1NYCs8gw000000097000000000xgth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:13 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:14 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:14 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 7f65af6f-801e-0067-5f8c-3afe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194714Z-185f5d8b95cjbkr4hC1NYCeu24000000090g00000000kwxu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:14 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:14 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:14 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: c6b0c23f-801e-0048-738c-3af3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194714Z-1777c6cb7549x5qchC1TEBggbg00000008k000000000m0cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:14 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:14 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:14 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 657669b3-a01e-0002-118c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194714Z-185f5d8b95cdcwrthC1NYCy5b8000000091000000000zfrb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:14 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:14 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:14 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:14 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: be70ec4e-301e-000c-088c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194714Z-185f5d8b95cdh56ghC1NYCk1x400000002yg00000000rp1k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:14 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:14 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:14 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:14 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 65766a7e-a01e-0002-4f8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194714Z-r1d97b99577n4dznhC1TEBc1qw00000007v000000000bcdn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:14 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 65766a9d-a01e-0002-6d8c-3a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-185f5d8b95c95vpshC1NYC759c000000094g00000000r611 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: fdab78a3-101e-005a-1d8c-3a882b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-185f5d8b95cx9g8lhC1NYCtgvc00000001eg00000000vgce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 538c974f-101e-0028-648c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-1777c6cb754gc8g6hC1TEB966c00000008h000000000dx4z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: ac667451-e01e-003c-3e8c-3ac70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-1777c6cb754xlpjshC1TEBv8cc00000008pg00000000f0da x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49817	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: f14fa7ac-201e-000c-4a8c-3a79c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-r1d97b99577656nchC1TEBk98c00000007yg000000001qxg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 70a27ff5-201e-0051-4e8c-3a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-1777c6cb7549x5qchC1TEBggbg00000008kg00000000fwne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49820	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:15 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: e83eb970-001e-0046-777e-3ada4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-185f5d8b95cdcwrthC1NYCy5b8000000095000000000fpht x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:15 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:15 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: feb02638-401e-0067-7b8c-3a09c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194715Z-1777c6cb754dqf99hC1TEB5nps00000008cg00000000dd0g x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: bfe6d614-201e-006e-7a8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95csd4bwhC1NYCq7dc000000093g00000000e7qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:15 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: a1d815ed-301e-0096-3f8c-3ae71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95cjbkr4hC1NYCeu240000000940000000001yuq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:16 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62f36519-501e-0016-468c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95c9mqtvhC1NYCghtc000000096g00000000r79d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:16 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 7511d71d-801e-0083-6e8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95cgrrn8hC1NYCgwh400000008yg00000000wyyr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:16 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: c1a1e3cb-901e-005b-1f8c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-r1d97b995774zjnrhC1TEBv1ww00000007w0000000000prb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:16 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: e456cfdf-c01e-0014-248c-3aa6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95csd4bwhC1NYCq7dc000000097000000000041t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:16 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:16 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:16 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 5b8b83f7-201e-0033-0b8c-3ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194716Z-185f5d8b95cdtclvhC1NYC4rmc00000009cg0000000059k4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:16 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49828	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:17 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:17 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: a1cdeef9-f01e-0020-348c-3a956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194717Z-185f5d8b95crwqd8hC1NYCps68000000098g000000002cyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:17 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49829	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:17 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:17 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0514cbb3-901e-00ac-0281-3ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194717Z-185f5d8b95cp7lkfhC1NYC7rpw000000097g00000000v0d7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:17 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49830	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:17 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:17 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b82dc135-b01e-0053-1a8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194717Z-185f5d8b95c68cvnhC1NYCfn7s00000009200000000107yc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:17 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49831	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:17 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:17 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 7511da03-801e-0083-3b8c-3af0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194717Z-1777c6cb754mrj2shC1TEB6k7w00000008n000000000ma2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:17 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:17 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:17 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:17 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bdf96f18-c01e-0066-808c-3aa1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194717Z-r1d97b99577gg97qhC1TEBcrf400000007mg00000000f33y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:17 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 7bd180c9-401e-008c-0e8c-3a86c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95c68cvnhC1NYCfn7s000000097g00000000779y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 2155a01d-401e-00a3-768c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95c96jn4hC1NYCbgp80000000980000000005k21 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:18 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:18 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: be70f01e-301e-000c-538c-3a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95c95vpshC1NYC759c000000095000000000nphc x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:18 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 8e68b2a4-701e-005c-1a8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95cgrrn8hC1NYCgwh4000000092g00000000a4dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:18 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:18 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 538c9d0d-101e-0028-1c8c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95c96jn4hC1NYCbgp8000000095g00000000h6q3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:18 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:18 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: f37cb76d-d01e-0017-2085-3ab035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194718Z-185f5d8b95c95vpshC1NYC759c000000093000000000x49p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: af4852c5-601e-000d-3a8c-3a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-185f5d8b95cx9g8lhC1NYCtgvc00000001e000000000zusg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:18 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 961908b5-401e-0016-178c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-185f5d8b95csd4bwhC1NYCq7dc000000094g00000000afv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 5c70d6ce-001e-00ad-368c-3a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-185f5d8b95cwtv72hC1NYC141w000000091g00000000phzt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 38897a0b-401e-000a-7a8c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-r1d97b99577lxltfhC1TEByw2s00000007u000000000g7m7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 733c43f5-901e-007b-0e8c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-185f5d8b95c95vpshC1NYC759c000000091g000000012wky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49845	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 0cd4e810-101e-0079-148c-3a5913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-r1d97b99577gg97qhC1TEBcrf400000007mg00000000f37w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 495def62-b01e-0098-458c-3acead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-1777c6cb754mqztshC1TEB4mkc00000008p0000000005077 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49846	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: d35eaebc-501e-0064-178c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-r1d97b99577ckpmjhC1TEBrzs000000007t000000000k4vb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:19 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:19 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:19 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 9cc78053-901e-008f-7b8c-3a67a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194719Z-r1d97b99577n5jhbhC1TEB74vn00000007w00000000021c8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:19 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:20 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:20 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 41283c59-801e-0015-058c-3af97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194720Z-1777c6cb754n67brhC1TEBcp9c00000008p00000000076z0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:20 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:20 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:20 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: bfe6dbcf-201e-006e-678c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194720Z-1777c6cb754gvvgfhC1TEBz4rg00000008qg000000001xea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:20 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:20 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:20 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 9cb1ed33-701e-0021-398c-3a3d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194720Z-185f5d8b95cwtv72hC1NYC141w000000090g00000000u3n5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:20 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:20 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:20 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:20 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 5c5a59ff-301e-003f-5b8c-3a266f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194720Z-185f5d8b95crwqd8hC1NYCps68000000093g00000000spzp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:20 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:20 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:20 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 4f8e9926-c01e-00ad-7c8c-3aa2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194720Z-1777c6cb754dqf99hC1TEB5nps00000008cg00000000dd6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:21 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 38897bff-401e-000a-368c-3a4a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194721Z-r1d97b99577d6qrbhC1TEBux5s00000007ug00000000t1wg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:21 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49854	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:21 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: cb785bac-301e-0000-6c8c-3aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194721Z-185f5d8b95crl6swhC1NYC3ueg00000009a000000000gaub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:21 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:21 UTC	491	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:21 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7880247-601e-0070-328c-3aa0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194721Z-r1d97b995774n5h6hC1TEBvf8400000007r000000000k1qf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:21 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:21 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 26217b89-b01e-001e-808c-3a0214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194721Z-1777c6cb754lvj6mhC1TEBke9400000008p0000000006qgg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:21 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:21 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:21 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 5a5a0c5e-c01e-0079-588c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194721Z-185f5d8b95cmd8vfhC1NYC0g40000000054g000000005fp6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:21 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 8e68b69a-701e-005c-5c8c-3abb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-r1d97b99577mrt4rhC1TEBftkc00000007pg00000000f7fp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:21 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 47e3bf54-c01e-0082-038c-3aaf72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-185f5d8b95c96jn4hC1NYCbgp8000000091g000000015xp9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	470	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 733c6689-901e-007b-288c-3aac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-185f5d8b95cdtclvhC1NYC4rmc0000000960000000013x00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 85babd8c-f01e-003f-4e8c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-r1d97b99577dd2gchC1TEBz5ys00000007rg00000000235q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49863	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: ff95cf15-b01e-0001-328c-3a46e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-185f5d8b95csp6jmhC1NYCwy6s00000009700000000021n1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: d35eb2be-501e-0064-3d8c-3a1f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-1777c6cb754g9zd5hC1TEBfvpw00000008m000000000rt04 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 6d4f85c2-e01e-0003-2b8c-3a0fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-185f5d8b95cqnkdjhC1NYCm8w800000008zg00000000r62y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:22 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:22 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:22 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: c1a1f15b-901e-005b-358c-3a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194722Z-r1d97b995778dpcthC1TEB4b5400000007qg00000000bcwy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:22 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:23 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:23 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 297afce4-701e-0053-438c-3a3a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194723Z-r1d97b99577sdxndhC1TEBec5n00000007ug00000000pefa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:23 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:23 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:23 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 96e0b134-501e-0035-148c-3ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194723Z-185f5d8b95cgrrn8hC1NYCgwh40000000940000000003sx7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:23 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:23 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: e045c2d1-201e-003c-718c-3a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194723Z-1777c6cb754lv4cqhC1TEB13us00000008m00000000062x2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:23 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:23 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:23 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 87533e62-501e-008f-028c-3a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194723Z-1777c6cb754gc8g6hC1TEB966c00000008mg0000000041zy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:23 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:23 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:23 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:23 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 96190df9-401e-0016-6a8c-3a53e0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194723Z-1777c6cb754lv4cqhC1TEB13us00000008n00000000027ab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:23 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: c363d3e9-d01e-0028-158c-3a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-1777c6cb754n67brhC1TEBcp9c00000008kg00000000fv5q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 07391e4c-a01e-0032-018c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-185f5d8b95cmd8vfhC1NYC0g40000000052000000000enuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49874	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 2767d90f-601e-005c-618c-3af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-185f5d8b95csp6jmhC1NYCwy6s000000093000000000m0wu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f909e935-c01e-0049-358c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-185f5d8b95csd4bwhC1NYCq7dc00000008zg00000000zzv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: df1e4bb0-c01e-0034-6f8a-3a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-r1d97b99577hc74hhC1TEBvbns00000007q0000000009kct x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: c9275c76-a01e-000d-7b8c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-185f5d8b95c96jn4hC1NYCbgp8000000097g000000007ce1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:24 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:24 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:24 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 07391f24-a01e-0032-508c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194724Z-185f5d8b95c4hl5whC1NYCeex0000000094g0000000097hb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:24 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	49879	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 5a5a1185-c01e-0079-408c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-185f5d8b95c5lcmhhC1NYCsnsw000000098g00000000d8zn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49881	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: eb1e057a-b01e-0097-688c-3a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-185f5d8b95cgrrn8hC1NYCgwh400000008y000000000zdyt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49880	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: b47886c8-201e-00aa-0c8c-3a3928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-185f5d8b95c4vwv8hC1NYCy4v400000009d00000000030u5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: e2992625-501e-005b-678c-3ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-185f5d8b95cgrrn8hC1NYCgwh400000008z000000000vq2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 073920b7-a01e-0032-4c8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-1777c6cb754wcxkwhC1TEB3c6w00000008e000000000hfba x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:25 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:25 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:25 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 6d560277-a01e-0050-158c-3adb6e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194725Z-185f5d8b95csd4bwhC1NYCq7dc000000092000000000pab1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:25 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:26 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: c9275fb5-a01e-000d-708c-3ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194726Z-185f5d8b95cmd8vfhC1NYC0g4000000004z000000000xa0w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:26 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49886	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:26 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 3044792c-001e-005a-088c-3ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194726Z-185f5d8b95cdh56ghC1NYCk1x40000000340000000001uzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:26 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49887	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:26 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 2155ac17-401e-00a3-238c-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194726Z-r1d97b99577jlrkbhC1TEBq8d000000007m000000000rts3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:26 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49888	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:26 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: c3eb962b-701e-003e-438c-3a79b3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194726Z-185f5d8b95ckwnflhC1NYCx9qs0000000940000000010qad x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:26 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:26 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:26 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: c0af4880-401e-00ac-328c-3a0a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194726Z-185f5d8b95c4hl5whC1NYCeex0000000096g000000000uq7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:26 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49890	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:26 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 7ca1e40b-601e-003d-2f8c-3a6f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-1777c6cb7549x5qchC1TEBggbg00000008n000000000asaz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49891	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 62f37542-501e-0016-6f8c-3a181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-185f5d8b95cdh56ghC1NYCk1x400000002xg00000000xevp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49892	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 5a5a14b6-c01e-0079-438c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-185f5d8b95cdcwrthC1NYCy5b8000000095000000000fqc8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 5c785bae-401e-0083-638c-3a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-185f5d8b95cx9g8lhC1NYCtgvc00000001fg00000000rh67 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 538caadb-101e-0028-028c-3a8f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-r1d97b99577mrt4rhC1TEBftkc00000007s0000000007aef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: f909f157-c01e-0049-018c-3aac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-r1d97b99577ckpmjhC1TEBrzs000000007u000000000fy6n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:27 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:27 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: fc6be6d3-301e-0033-058c-3afa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194727Z-r1d97b99577jlrkbhC1TEBq8d000000007kg00000000s3bd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:27 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49897	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:27 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 21476416-401e-00a3-1c88-3a8b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-1777c6cb7549j9hhhC1TEBzmcc00000008c000000000sxyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49898	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:28 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 8222e379-801e-008f-078c-3a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-1777c6cb754j8gqphC1TEB5bf800000008k0000000001s6g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49899	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:28 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: bfe6e8fa-201e-006e-3f8c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-185f5d8b95cx9g8lhC1NYCtgvc00000001ng000000000d2t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49900	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:28 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: b82dd3a8-b01e-0053-0e8c-3acdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-185f5d8b95c9mqtvhC1NYCghtc00000009a0000000006q50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49901	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:28 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 85bacdce-f01e-003f-758c-3ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-1777c6cb754lvj6mhC1TEBke9400000008qg000000001uq9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:28 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:28 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:28 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 270c2d5d-601e-00ab-2f8c-3a66f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194728Z-185f5d8b95csp6jmhC1NYCwy6s0000000900000000012593 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:28 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:29 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 5a5a1706-c01e-0079-6c8c-3ae51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194729Z-185f5d8b95cwtv72hC1NYC141w000000094000000000asqg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:29 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:29 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 073925de-a01e-0032-2d8c-3a1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194729Z-185f5d8b95csp6jmhC1NYCwy6s000000093000000000m16w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:29 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:29 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:29 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 0c3517a5-201e-0003-7a8c-3af85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194729Z-185f5d8b95c95vpshC1NYC759c000000092g0000000105hc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:29 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:29 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:29 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: d5dea27c-d01e-00ad-3c8c-3ae942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194729Z-185f5d8b95cdtclvhC1NYC4rmc000000097g00000000vv38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:29 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49907	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:29 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:29 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 1afac609-801e-00a3-2b8c-3a7cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194729Z-185f5d8b95cdh56ghC1NYCk1x4000000030000000000k0ar x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:29 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49908	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:29 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:30 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:30 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: bfe6eb71-201e-006e-168c-3abbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194730Z-r1d97b9957789g82hC1TEBstx000000007pg00000000pvzx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-11-19 19:47:30 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49909	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-11-19 19:47:30 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-11-19 19:47:30 UTC	494	IN	HTTP/1.1 200 OK Date: Tue, 19 Nov 2024 19:47:30 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: a16a2ddb-901e-0064-058c-3ae8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241119T194730Z-185f5d8b95c95vpshC1NYC759c000000096000000000e7f0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-11-19 19:47:30 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	14:46:07
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:46:11
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2240,i,11962410349638849435,3318013894265169833,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:46:14
Start date:	19/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218	HTTP Parser: Number of links: 0
Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	HTTP Parser: Number of links: 0

Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218	HTTP Parser: Title: Encrypted Message OTP Sign in does not match URL
Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	HTTP Parser: Title: Encrypted Message OTP Sign in does not match URL

Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218	HTTP Parser: No <meta name="author".. found
Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	HTTP Parser: No <meta name="author".. found

Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218	HTTP Parser: No <meta name="copyright".. found
Source: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	HTTP traffic detected: GET /Encryption/retrieve.ashx?recipientemailaddress=mboucher%40steptoe.com&senderemailaddress=dereke_tsao%40huntsman.com&senderorganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo%2b7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE%3d&messageid=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e&cfmRecipient=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com&consumerEncryption=false&senderorgid=b5477562-3f93-4544-8cb3-a772ec1d321a&urldecoded=1&e4e_sdata=dn6V8ynRC8bYW5qHPPdQ0L0GUZTuk1t50jBxyjq%2brOxHfZ6k8xmrg9bEV5MSwkpw37zDNdYPZlIqW9fR%2fwfYlu9rlD9wfFbfG3dTjjy0%2bVy2fcsQb0QckfksQH0JiZ%2fLJk8FDD2Fk7EpvJ4R%2f2TPe%2fPE5U8Mt6BDSwepOEsdXYr%2fpKy2PoqevtDqpHh3GbVhG6j9Fg5f3libxKupS%2fqEO76YMUGlVym9aiRZ%2bVwmM6qW%2bjV7gsk9%2fTymBMsqNW2fk0wiUprRjt6X9ovZIiP9h1uCzpSBb5XpfsBPbLGOC%2b7eRJMlDmJzGFcBkxHXqIYNs%2fGfD7XPnbwuDRFngZre6Q%3d%3d HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Encryption/default.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3d HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a
Source: global traffic	HTTP traffic detected: GET /Encryption/authentication.css HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/lock.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/lock.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/liveid.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Eg47ZWAWCorGPSA&MD=rwNfsh2X HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Encryption/liveid.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/OTPSend.ashx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPRef=SigninPage HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://outlook.office365.com/Encryption/authenticationpage.aspx?st=Microsoft&ru=https%3a%2f%2foutlook.office365.com%2fEncryption%2fdefault.aspx%3fitemID%3dE4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&e4e_sdata=Th2fvZ%2bmQVvlI8bF567qR5n%2bQmgm101F9JdiW4RnGhIH9yzZaboffc29zt0TRNfUrcsE00jWq7RkZfdDNNXWU5I1xlXgFkMHRZzmAUGSN5aSDOv0GkDVVvzX7jbao0EIKllmDwG9%2fHr%2bjuu3O16YRaXAioiKb7uVYPI5N9EDUJd3mpftyFT13qGwiMrYLLwFHy8dnikm3hwUa3hAU%2b%2fPp7jm83x%2fBKBMHQGVTxAbL37kKGUmVdErcilE757T6eG8PkiZCt9mErn92boP9JDCPG8XgiHysoTJDjNGvCQpvwIv9Uz%2f5c%2b2LhD9Gvh7yaQyr%2b8yoDqohaGcJq5P0wAFAg%3d%3dAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/base.css HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/help.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/arrow.png HTTP/1.1Host: outlook.office365.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32&OTPMessageId=6eb52f52-f7c6-44fd-9845-afc005539d17%40PAXPR01MB8758.eurprd01.prod.exchangelabs.com&OTPReferenceId=5218Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/help.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /Encryption/arrow.png HTTP/1.1Host: outlook.office365.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=Eg47ZWAWCorGPSA&MD=rwNfsh2X HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Encryption/ErrorPage.aspx?src=5&code=20&be=PAXPR01MB8758&fe=FR0P281CA0177.DEUP281.PROD.OUTLOOK.COM&hrs=24 HTTP/1.1Host: outlook.office365.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://outlook.office365.com/Encryption/OTPSigninPage.aspx?itemID=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: X-E4E-CorrelationId=; X-OmeVersion=V2; X-ConsumerEncryption=false; X-CfmRecipientAddress=SystemMailbox%7b2C41C89D-35A4-465B-B69B-6F1FC54D8B03%7d%40huntsmancorp.onmicrosoft.com; E4EAnchorMailbox=SystemMailbox{2C41C89D-35A4-465B-B69B-6F1FC54D8B03}@huntsmancorp.onmicrosoft.com; X-RecipientEmailAddress=mboucher@steptoe.com\|NfgAd%2bu%2fWeWbcVKJkkdjmzb1k0OyMYJIpHNUERG3W6em28Jy6q%2bPr08QiBDP4t3UqGnZnD3odl%2bublhDlcY1KxwmnT4c74860tqe7mVGOClNuosa40%2buwXhLtxzr6b8BEul8KxIvdtQ1G70F1tzgn7vZm89UqrZxZ%2fIdgDQydrIcoqeLqCIRygV%2b9Wk6jyhhkm%2fj8XhNmEJKie3VQ1y0iO3c1ZmsT%2fwU5BN8S2hUyjvv8XX%2beVt6FBr1Vj78FhxJPoJVIklQ6zCTuoI3pr9Ah6Y%2fKqoVwx23v21%2fxRkpbtnfuA2AuY4adxxhBG6kufi2FUNbByuplBycSuMF4EARTw%3d%3d; X-SenderEmailAddress=dereke_tsao@huntsman.com; X-SenderOrganization=AwGDAAAAAn8AAAADAQAAAPQatcJHlwdCptXo+7xVAphPVT1odW50c21hbmNvcnAub25taWNyb3NvZnQuY29tLE9VPU1pY3Jvc29mdCBFeGNoYW5nZSBIb3N0ZWQgT3JnYW5pemF0aW9ucyxEQz1FVVJQUjAxQTAwOSxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NyrJ2HfG4vEyrMrRAFDrBykNOPUNvbmZpZ3VyYXRpb24sQ049aHVudHNtYW5jb3JwLm9ubWljcm9zb2Z0LmNvbSxDTj1Db25maWd1cmF0aW9uVW5pdHMsREM9RVVSUFIwMUEwMDksREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTQE=; X-MessageId=%3cDU2PR01MB86075C61B8B92D853A1D5A4DED202%40DU2PR01MB8607.eurprd01.prod.exchangelabs.com%3e; X-StoreObjectId=; X-RecipientPrimarySmtp=; E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32=PAXPR01MB8758; X-OTPItemId=E4E_M_a61c3983-1735-46d9-87c8-13c9e0001b32; X-SenderExternalOrganizationId=b5477562-3f93-4544-8cb3-a772ec1d321a; X-AnonResource=true
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.36
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	DNS traffic detected: DNS query: outlook.office365.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ajax.aspnetcdn.com
Source: global traffic	DNS traffic detected: DNS query: r1.res.office365.com
Source: global traffic	DNS traffic detected: DNS query: static2.sharepointonline.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets