Edit tour

Windows Analysis Report
https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm

Overview

General Information

Sample URL:	https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm
Analysis ID:	1568192
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Suricata IDS alerts for network traffic

Yara detected HtmlPhish54

AI detected suspicious Javascript

Detected hidden input values containing email addresses (often used in phishing pages)

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5684 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 744 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2068,i,18296401730116906,11361231261382304205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2764 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.2.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
0.13.i.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.7.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.5.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
2.3.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T12:42:07.599234+0100	2028371	3	Unknown Traffic	192.168.2.5	49720	20.42.73.29	443	TCP

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-04T12:42:12.035750+0100	2857090	1	Successful Credential Theft Detected	138.197.161.216	443	192.168.2.5	49724	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain 'microsoft.com'., The domain 'wyr-law.com' does not have any known association with Microsoft., The presence of a UUID-like subdomain '8add78d1-59b1754a' is unusual and suspicious., The URL structure suggests a potential phishing attempt due to the mismatch with the legitimate domain. DOM: 3.8.pages.csv
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain 'microsoft.com'., The domain 'wyr-law.com' is not associated with Microsoft., The presence of a UUID-like subdomain '8add78d1-59b1754a' is suspicious and often used in phishing., The URL structure suggests a potential phishing attempt due to the unrelated domain and subdomain format. DOM: 3.10.pages.csv
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain for Microsoft., The URL contains a UUID-like string and a domain 'wyr-law.com', which is not associated with Microsoft., The presence of a UUID-like string and an unrelated domain is a common tactic in phishing attempts., The input fields 'Email or Username' and 'Enter the characters in the picture or the words in the audio' are typical for login pages, which are often targeted by phishing. DOM: 3.9.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 0.2.id.script.csv, type: HTML
Source: Yara match	File source: 0.13.i.script.csv, type: HTML
Source: Yara match	File source: 2.7.pages.csv, type: HTML
Source: Yara match	File source: 2.5.pages.csv, type: HTML
Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 2.3.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXN...High-risk indicators present: Script uses suspicious domains (wyr-law.com) masquerading as Microsoft login, contains obfuscated parameters, and shows signs of a phishing attack targeting Microsoft credentials. Multiple suspicious endpoints for data collection and redirects are present, along with telemetry collection to non-Microsoft domains.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXN...Script shows multiple high-risk indicators: heavy obfuscation (encoded strings, complex function names), DOM manipulation capabilities (querySelector usage), and suspicious behavior patterns (mutation observers, full-screen changes). Contains references to ad-blocking detection and tracking elements.
Source: 0.9.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXN...High risk due to multiple suspicious elements: 1) URL contains heavily obfuscated parameters and unusual domain 'wyr-law.com' instead of legitimate Microsoft domain for OAuth, 2) Contains authentication/login related parameters suggesting potential phishing, 3) Attempts to handle sensitive OAuth flows with suspicious redirect URIs. Pattern matches common phishing attempt structure masquerading as Microsoft login.
Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXN...This code shows multiple high-risk indicators: it contains heavily obfuscated strings in an array (NV), uses array-based deobfuscation functions (a0e5, a0e4), and includes suspicious functionality references like 'WebSocket', 'postMessage', and DOM manipulation. The obfuscation pattern is commonly used to hide malicious code.

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true

HTTP Parser: ryan.morris@lcatterton.com

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: Number of links: 0
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: Number of links: 0

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92

HTTP Parser: Base64 decoded: a[href="http://www.salidzini.lv/"][style="display: block; width: 120px; height: 40px; overflow: hidden; position: relative;"]

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: Title: Sign in to your account does not match URL
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: Title: Microsoft Online Password Reset does not match URL

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: Iframe src: https://dc7f6cce-59b1754a.wyr-law.com/Prefetch/Prefetch.aspx
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: Iframe src: https://dc7f6cce-59b1754a.wyr-law.com/Prefetch/Prefetch.aspx
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: Iframe src: https://dc7f6cce-59b1754a.wyr-law.com/Prefetch/Prefetch.aspx

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92	HTTP Parser: No favicon
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No favicon
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No favicon
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No favicon
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No favicon
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No favicon

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="author".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="author".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="author".. found

Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="copyright".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="copyright".. found
Source: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.231.128.66:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.73.29:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49935 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic

Suricata IDS: 2857090 - Severity 1 - ETPRO PHISHING JS/PsyduckPockeball Payload Inbound : 138.197.161.216:443 -> 192.168.2.5:49724

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: lcatterton.adobesign.gr.com to https://documents.wyr-law.com/?amp=cnlhbi5tb3jyaxnabgnhdhrlcnrvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92

Source: Network traffic

Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49720 -> 20.42.73.29:443

Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66
Source: unknown	TCP traffic detected without corresponding DNS query: 20.231.128.66

Source: global traffic	HTTP traffic detected: GET /ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm HTTP/1.1Host: lcatterton.adobesign.gr.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 HTTP/1.1Host: documents.wyr-law.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 HTTP/1.1Host: documents.wyr-law.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2S+VsBzpLc3SnZW&MD=f1444XW7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://documents.wyr-law.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1Host: documents.wyr-law.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://documents.wyr-law.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="Sec-WebSocket-Key: aObg8ZoMINw6jG4yT2VqXQ==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true HTTP/1.1Host: documents.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: documents.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://documents.wyr-law.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://documents.wyr-law.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://documents.wyr-law.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Me.htm?v=3 HTTP/1.1Host: l1ve.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1Host: documents.wyr-law.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://documents.wyr-law.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1Sec-WebSocket-Key: 4aydOtRqVcaBw28cVlbl+Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Prefetch/Prefetch.aspx HTTP/1.1Host: dc7f6cce-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1Host: documents.wyr-law.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://documents.wyr-law.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: 2CusilZusX03TDzwRoPYaw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /lcatterton.com/winauth/ssoprobe?client-request-id=997c4121-0f6a-4347-a457-2af89d69191a&_=1733312560783 HTTP/1.1Host: 67c8fb70-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1Host: documents.wyr-law.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://documents.wyr-law.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: VMYrNSwJBnZ7i3Wy6zyFsA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419 HTTP/1.1Host: 7aea1062-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179 HTTP/1.1Host: 7aea1062-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /common/instrumentation/dssostatus HTTP/1.1Host: documents.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2S+VsBzpLc3SnZW&MD=f1444XW7 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179 HTTP/1.1Host: 7aea1062-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419 HTTP/1.1Host: 7aea1062-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://documents.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1Host: documents.wyr-law.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://documents.wyr-law.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0Sec-WebSocket-Key: AmX6QEGgD+b7/SAYuFmFHw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/Common.js HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1Host: d40a4b89-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /css/Style.css?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /css/ltrStyle.css?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /js/Webtrends.js HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=BJpRDuqCy8jKS1v_6vKOsxh3zE9lNKLrb8Rec-McG1BnwzCMCel1Lki8ufhpZ9kpfF0T7ubBHr71K6vXrYXFsT8KynRLodT1775_Kua5AKVjVezjf91fiudAF-jbQ88I0CDKjTbbF8cc40JG6Ibc4A2&t=638637566716133180 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /ajax/jQuery/jquery-3.6.0.min.js HTTP/1.1Host: 8aa4dccd-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /js/Button.js?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=1RRuBCtn1pIwYcY2WZlNa4e_HloL4buZFH35qBoQ9gtTR3Bj98Ss70nEWS3THvHgsWAxzdPElF6u1PcwBxbjiWty2HGhUFLJUMOECOAeAh8V_KFol6xmO5pphI7DC_9CAfXnLz4OLdL0Qv84wgBB78KwjfVr1nz_qKKKGIXucZ4XfICk1aGXvA88ahj3MGtVoRC44jJBbo6DNP5GCHaEXQ2&t=64bd211b HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /js/Common.js HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=tTJUxd2-Xwg7Goikjksgas1CBbaMQW1SXLue4MyLo9hOSTFpkQKegmUZyWqYW3mCn19pIRQzwAzhFijSDowlcy21ZevxUeXfy7Wf40VwBuJpmPzYuhxx7I8_iZR-PGbFRv_dj-wIiIZHSpMNNsE7uKNMz84kKxHocyYAgb3m50X_eNq6_nwNNueWDbB7aY7UG7pu4C_ItRdwhJuCwEFhPrgIW4y6ym7GnXOBN7a-QXU1&t=ffffffffb201fd3f HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Q6KfLgtY_7Q5kOyfhAUzWE0vCdVQo3kZxqR3cTMo5Mg0tMsIc261SR70usehkeBRh0jTgwJ1BghiKqvZgOgWXpln99BuKR084eYdyobk7XfLz2NWx9ze3MSPCDADB4ZOij8skrm2NRSvzHex2vMzyN9Kql5T-kSDr1yu1Zl3memjTswFUk8hRTVibYv2aKMeMz4xJI7cbcNIk1WkD9hAcnpvHizua5ADZiqkCY7g_Zg1&t=ffffffffb201fd3f HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=BJpRDuqCy8jKS1v_6vKOsxh3zE9lNKLrb8Rec-McG1BnwzCMCel1Lki8ufhpZ9kpfF0T7ubBHr71K6vXrYXFsT8KynRLodT1775_Kua5AKVjVezjf91fiudAF-jbQ88I0CDKjTbbF8cc40JG6Ibc4A2&t=638637566716133180 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=noQ-NRy2ZIz1bUHme5MeuhamNa6C_BwqixBCCGo0wgmzbIebj3ZYEOeWoUytJr12gWPsDGW3S955m8mGkzQ5T5MX5DQRbCnh5mcNaiHzQHvTtvkFomZVHF4_KTNLClgSPdEEJwIJ_FIMQ4aWig1_1g2&t=638637566716133180 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /js/Webtrends.js HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /js/Button.js?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /ajax/jQuery/jquery-3.6.0.min.js HTTP/1.1Host: 8aa4dccd-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=1RRuBCtn1pIwYcY2WZlNa4e_HloL4buZFH35qBoQ9gtTR3Bj98Ss70nEWS3THvHgsWAxzdPElF6u1PcwBxbjiWty2HGhUFLJUMOECOAeAh8V_KFol6xmO5pphI7DC_9CAfXnLz4OLdL0Qv84wgBB78KwjfVr1nz_qKKKGIXucZ4XfICk1aGXvA88ahj3MGtVoRC44jJBbo6DNP5GCHaEXQ2&t=64bd211b HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=Q6KfLgtY_7Q5kOyfhAUzWE0vCdVQo3kZxqR3cTMo5Mg0tMsIc261SR70usehkeBRh0jTgwJ1BghiKqvZgOgWXpln99BuKR084eYdyobk7XfLz2NWx9ze3MSPCDADB4ZOij8skrm2NRSvzHex2vMzyN9Kql5T-kSDr1yu1Zl3memjTswFUk8hRTVibYv2aKMeMz4xJI7cbcNIk1WkD9hAcnpvHizua5ADZiqkCY7g_Zg1&t=ffffffffb201fd3f HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /Images/hipaudioplay.png?vv=100 HTTP/1.1Host: 098ace20-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/header_microsoft.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/wait_animation.gif HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/hip_speaker.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /ScriptResource.axd?d=tTJUxd2-Xwg7Goikjksgas1CBbaMQW1SXLue4MyLo9hOSTFpkQKegmUZyWqYW3mCn19pIRQzwAzhFijSDowlcy21ZevxUeXfy7Wf40VwBuJpmPzYuhxx7I8_iZR-PGbFRv_dj-wIiIZHSpMNNsE7uKNMz84kKxHocyYAgb3m50X_eNq6_nwNNueWDbB7aY7UG7pu4C_ItRdwhJuCwEFhPrgIW4y6ym7GnXOBN7a-QXU1&t=ffffffffb201fd3f HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/hip_text.gif HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/hip_reload.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /WebResource.axd?d=noQ-NRy2ZIz1bUHme5MeuhamNa6C_BwqixBCCGo0wgmzbIebj3ZYEOeWoUytJr12gWPsDGW3S955m8mGkzQ5T5MX5DQRbCnh5mcNaiHzQHvTtvkFomZVHF4_KTNLClgSPdEEJwIJ_FIMQ4aWig1_1g2&t=638637566716133180 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/footer_logo_grey_bg.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /Default.aspx/GetCaptchaChallenge HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/hip_speaker.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/header_microsoft.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/wait_animation.gif HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /Images/hipaudioplay.png?vv=100 HTTP/1.1Host: 098ace20-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/hip_text.gif HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/hip_reload.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/header_Microsoft.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.comAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /images/footer_logo_grey_bg.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /images/header_Microsoft.png HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=1342177280 HTTP/1.1Host: 8add78d1-59b1754a.wyr-law.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lcatterton.adobesign.gr.com
Source: global traffic	DNS traffic detected: DNS query: documents.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: d40a4b89-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 50bc8e2d-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: f09d56ac-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: l1ve.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: dc7f6cce-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 67c8fb70-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 7aea1062-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 8add78d1-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 8aa4dccd-59b1754a.wyr-law.com
Source: global traffic	DNS traffic detected: DNS query: 098ace20-59b1754a.wyr-law.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4775Host: login.live.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 96f86803-7610-4d3b-ae68-25f353245b00x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:26 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 9e43713e-f218-46af-b074-e48ad4bda200x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:37 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: no-store, no-cachex-ms-correlation-id: d165e3e7-4832-4e74-824d-9548ac44ee88x-ua-compatible: IE=Edgex-cache: CONFIG_NOCACHEx-msedge-ref: Ref A: 79917B9FDC884F0EA75DF0129C819F88 Ref B: BL2EDGE1821 Ref C: 2024-12-04T11:42:37Zaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:37 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 93664a27-93c0-456c-8a0a-99c8eff03501x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:43 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: 732a3ffc-a86b-4d8e-b29f-b92f73332d01x-ms-ests-server: 2.1.19492.3 - FRC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 04 Dec 2024 11:42:51 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-Encodingcache-control: privatep3p: CP="DSP CUR OTPi IND OTRi ONL FIN"x-ms-request-id: b3886d4c-cbfc-4154-a551-5f4ccc441f01x-ms-ests-server: 2.1.19492.3 - SEC ProdSlicesreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]}nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}x-ms-srs: 1.Preferrer-policy: strict-origin-when-cross-originaccess-control-allow-origin: access-control-allow-headers:

Source: chromecache_142.2.dr, chromecache_110.2.dr	String found in binary or memory: https://098ace20-59b1754a.wyr-law.com:443/Images/hipaudioplay.png?vv=100
Source: chromecache_142.2.dr	String found in binary or memory: https://2c18d84a-59b1754a.wyr-law.com/en-US/privacystatement
Source: chromecache_110.2.dr	String found in binary or memory: https://account.wyr-law.com/resetpassword.aspx
Source: chromecache_142.2.dr	String found in binary or memory: https://wwwms.wyr-law.com/en-US/servicesagreement/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443

Source: unknown	HTTPS traffic detected: 20.231.128.66:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.42.73.29:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.218.208.109:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.63:443 -> 192.168.2.5:49935 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@17/117@38/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2068,i,18296401730116906,11361231261382304205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2068,i,18296401730116906,11361231261382304205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg	0%	Avira URL Cloud	safe
https://documents.wyr-law.com/common/instrumentation/dssostatus	0%	Avira URL Cloud	safe
https://l1ve.wyr-law.com/Me.htm?v=3	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/wait_animation.gif	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/Default.aspx/GetCaptchaChallenge	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=tTJUxd2-Xwg7Goikjksgas1CBbaMQW1SXLue4MyLo9hOSTFpkQKegmUZyWqYW3mCn19pIRQzwAzhFijSDowlcy21ZevxUeXfy7Wf40VwBuJpmPzYuhxx7I8_iZR-PGbFRv_dj-wIiIZHSpMNNsE7uKNMz84kKxHocyYAgb3m50X_eNq6_nwNNueWDbB7aY7UG7pu4C_ItRdwhJuCwEFhPrgIW4y6ym7GnXOBN7a-QXU1&t=ffffffffb201fd3f	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=1RRuBCtn1pIwYcY2WZlNa4e_HloL4buZFH35qBoQ9gtTR3Bj98Ss70nEWS3THvHgsWAxzdPElF6u1PcwBxbjiWty2HGhUFLJUMOECOAeAh8V_KFol6xmO5pphI7DC_9CAfXnLz4OLdL0Qv84wgBB78KwjfVr1nz_qKKKGIXucZ4XfICk1aGXvA88ahj3MGtVoRC44jJBbo6DNP5GCHaEXQ2&t=64bd211b	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/footer_logo_grey_bg.png	0%	Avira URL Cloud	safe
https://documents.wyr-law.com/59b1754af7b14b369a166639ff7e80e8/	0%	Avira URL Cloud	safe
https://098ace20-59b1754a.wyr-law.com:443/Images/hipaudioplay.png?vv=100	0%	Avira URL Cloud	safe
https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/js/Common.js	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/favicon.ico?v=1342177280	0%	Avira URL Cloud	safe
https://098ace20-59b1754a.wyr-law.com/Images/hipaudioplay.png?vv=100	0%	Avira URL Cloud	safe
https://wwwms.wyr-law.com/en-US/servicesagreement/	0%	Avira URL Cloud	safe
https://2c18d84a-59b1754a.wyr-law.com/en-US/privacystatement	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=BJpRDuqCy8jKS1v_6vKOsxh3zE9lNKLrb8Rec-McG1BnwzCMCel1Lki8ufhpZ9kpfF0T7ubBHr71K6vXrYXFsT8KynRLodT1775_Kua5AKVjVezjf91fiudAF-jbQ88I0CDKjTbbF8cc40JG6Ibc4A2&t=638637566716133180	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	0%	Avira URL Cloud	safe
https://8aa4dccd-59b1754a.wyr-law.com/ajax/jQuery/jquery-3.6.0.min.js	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/hip_text.gif	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/css/Style.css?v=1342177280	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	0%	Avira URL Cloud	safe
https://documents.wyr-law.com/favicon.ico	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/js/Webtrends.js	0%	Avira URL Cloud	safe
https://67c8fb70-59b1754a.wyr-law.com/lcatterton.com/winauth/ssoprobe?client-request-id=997c4121-0f6a-4347-a457-2af89d69191a&_=1733312560783	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	0%	Avira URL Cloud	safe
https://dc7f6cce-59b1754a.wyr-law.com/Prefetch/Prefetch.aspx	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/js/Button.js?v=1342177280	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/hip_speaker.png	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/css/ltrStyle.css?v=1342177280	0%	Avira URL Cloud	safe
https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=noQ-NRy2ZIz1bUHme5MeuhamNa6C_BwqixBCCGo0wgmzbIebj3ZYEOeWoUytJr12gWPsDGW3S955m8mGkzQ5T5MX5DQRbCnh5mcNaiHzQHvTtvkFomZVHF4_KTNLClgSPdEEJwIJ_FIMQ4aWig1_1g2&t=638637566716133180	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/hip_reload.png	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	0%	Avira URL Cloud	safe
https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419	0%	Avira URL Cloud	safe
https://8add78d1-59b1754a.wyr-law.com/images/header_microsoft.png	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js	0%	Avira URL Cloud	safe
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	0%	Avira URL Cloud	safe
https://account.wyr-law.com/resetpassword.aspx	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
50bc8e2d-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
dc7f6cce-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
l1ve.wyr-law.com	138.197.161.216	true	true	unknown
f09d56ac-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
67c8fb70-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
8add78d1-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
8aa4dccd-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
d40a4b89-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
documents.wyr-law.com	138.197.161.216	true	true	unknown
7aea1062-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
www.google.com	142.250.181.68	true	false	high
098ace20-59b1754a.wyr-law.com	138.197.161.216	true	true	unknown
lcatterton.adobesign.gr.com	216.246.46.135	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://l1ve.wyr-law.com/Me.htm?v=3	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=1RRuBCtn1pIwYcY2WZlNa4e_HloL4buZFH35qBoQ9gtTR3Bj98Ss70nEWS3THvHgsWAxzdPElF6u1PcwBxbjiWty2HGhUFLJUMOECOAeAh8V_KFol6xmO5pphI7DC_9CAfXnLz4OLdL0Qv84wgBB78KwjfVr1nz_qKKKGIXucZ4XfICk1aGXvA88ahj3MGtVoRC44jJBbo6DNP5GCHaEXQ2&t=64bd211b	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg	true	Avira URL Cloud: safe	unknown
https://documents.wyr-law.com/common/instrumentation/dssostatus	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=tTJUxd2-Xwg7Goikjksgas1CBbaMQW1SXLue4MyLo9hOSTFpkQKegmUZyWqYW3mCn19pIRQzwAzhFijSDowlcy21ZevxUeXfy7Wf40VwBuJpmPzYuhxx7I8_iZR-PGbFRv_dj-wIiIZHSpMNNsE7uKNMz84kKxHocyYAgb3m50X_eNq6_nwNNueWDbB7aY7UG7pu4C_ItRdwhJuCwEFhPrgIW4y6ym7GnXOBN7a-QXU1&t=ffffffffb201fd3f	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/Default.aspx/GetCaptchaChallenge	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/images/wait_animation.gif	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/favicon.ico?v=1342177280	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/images/footer_logo_grey_bg.png	true	Avira URL Cloud: safe	unknown
https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92	false		unknown
https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc	true	Avira URL Cloud: safe	unknown
https://documents.wyr-law.com/59b1754af7b14b369a166639ff7e80e8/	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/js/Common.js	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=BJpRDuqCy8jKS1v_6vKOsxh3zE9lNKLrb8Rec-McG1BnwzCMCel1Lki8ufhpZ9kpfF0T7ubBHr71K6vXrYXFsT8KynRLodT1775_Kua5AKVjVezjf91fiudAF-jbQ88I0CDKjTbbF8cc40JG6Ibc4A2&t=638637566716133180	true	Avira URL Cloud: safe	unknown
https://098ace20-59b1754a.wyr-law.com/Images/hipaudioplay.png?vv=100	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js	true	Avira URL Cloud: safe	unknown
https://8aa4dccd-59b1754a.wyr-law.com/ajax/jQuery/jquery-3.6.0.min.js	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/images/hip_text.gif	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/css/Style.css?v=1342177280	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js	true	Avira URL Cloud: safe	unknown
https://67c8fb70-59b1754a.wyr-law.com/lcatterton.com/winauth/ssoprobe?client-request-id=997c4121-0f6a-4347-a457-2af89d69191a&_=1733312560783	true	Avira URL Cloud: safe	unknown
https://dc7f6cce-59b1754a.wyr-law.com/Prefetch/Prefetch.aspx	true	Avira URL Cloud: safe	unknown
https://documents.wyr-law.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/js/Webtrends.js	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/js/Button.js?v=1342177280	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/images/hip_speaker.png	true	Avira URL Cloud: safe	unknown
https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/css/ltrStyle.css?v=1342177280	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif	true	Avira URL Cloud: safe	unknown
https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true	false		unknown
https://8add78d1-59b1754a.wyr-law.com/images/hip_reload.png	true	Avira URL Cloud: safe	unknown
https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm	false		unknown
https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=noQ-NRy2ZIz1bUHme5MeuhamNa6C_BwqixBCCGo0wgmzbIebj3ZYEOeWoUytJr12gWPsDGW3S955m8mGkzQ5T5MX5DQRbCnh5mcNaiHzQHvTtvkFomZVHF4_KTNLClgSPdEEJwIJ_FIMQ4aWig1_1g2&t=638637566716133180	true	Avira URL Cloud: safe	unknown
https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com	true		unknown
https://8add78d1-59b1754a.wyr-law.com/images/header_microsoft.png	true	Avira URL Cloud: safe	unknown
https://8add78d1-59b1754a.wyr-law.com/images/header_Microsoft.png	true		unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js	true	Avira URL Cloud: safe	unknown
https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://098ace20-59b1754a.wyr-law.com:443/Images/hipaudioplay.png?vv=100	chromecache_142.2.dr, chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown
https://2c18d84a-59b1754a.wyr-law.com/en-US/privacystatement	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://wwwms.wyr-law.com/en-US/servicesagreement/	chromecache_142.2.dr	false	Avira URL Cloud: safe	unknown
https://account.wyr-law.com/resetpassword.aspx	chromecache_110.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
138.197.161.216	50bc8e2d-59b1754a.wyr-law.com	United States	14061	DIGITALOCEAN-ASNUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
216.246.46.135	lcatterton.adobesign.gr.com	United States	23352	SERVERCENTRALUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1568192
Start date and time:	2024-12-04 12:41:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@17/117@38/5

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 199.232.214.172, 172.217.21.35, 172.217.19.238, 64.233.165.84, 172.217.17.78, 142.250.181.138, 142.250.181.74, 172.217.17.42, 142.250.181.106, 172.217.17.74, 172.217.19.234, 216.58.208.234, 172.217.21.42, 172.217.19.202, 172.217.19.170, 172.217.17.35, 199.232.210.172
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, umwatson.events.data.microsoft.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm

Input	Output
URL: https://lcatterton.adobesign.gr.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://lcatterton.adobesign.gr.com
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This is a standard ASP.NET form submission helper script. It's a legitimate, well-known pattern used for postback functionality in ASP.NET web forms. The script only handles form submission through proper channels without any data exfiltration, external connections, or suspicious behavior." }
//<![CDATA[ var theForm = document.forms['form1']; if (!theForm) { theForm = document.form1; } function __doPostBack(eventTarget, eventArgument) { if (!theForm.onsubmit \|\| (theForm.onsubmit() != false)) { theForm.__EVENTTARGET.value = eventTarget; theForm.__EVENTARGUMENT.value = eventArgument; theForm.submit(); } } //
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be minified utility code implementing Promise and Iterator functionality. While minified code can be suspicious, this implementation matches standard JavaScript patterns for async operations and prototypal inheritance. No high-risk behaviors like eval(), external data transmission, or suspicious DOM manipulation are present." }
!function(){"use strict";var t=function(r,e){return t=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,r){t.__proto__=r}\|\|function(t,r){for(var e in r)Object.prototype.hasOwnProperty.call(r,e)&&(t[e]=r[e])},t(r,e)};function r(r,e){if("function"!=typeof e&&null!==e)throw new TypeError("Class extends value "+String(e)+" is not a constructor or null");function n(){this.constructor=r}t(r,e),r.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}function e(t,r,e,n){return new(e\|\|(e=Promise))((function(o,i){function u(t){try{s(n.next(t))}catch(t){i(t)}}function c(t){try{s(n.throw(t))}catch(t){i(t)}}function s(t){var r;t.done?o(t.value):(r=t.value,r instanceof e?r:new e((function(t){t(r)}))).then(u,c)}s((n=n.apply(t,r\|\|[])).next())}))}function n(t,r){var e,n,o,i,u={label:0,sent:function(){if(1&o[0])throw o[1];return o[1]},trys:[],ops:[]};return i={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(i[Symbol.iterator]=function(){return this}),i;function c(c){return function(s){return function(c){if(e)throw new TypeError("Generator is already executing.");for(;i&&(i=0,c[0]&&(u=0)),u;)try{if(e=1,n&&(o=2&c[0]?n.return:c[0]?n.throw\|\|((o=n.return)&&o.call(n),0):n.next)&&!(o=o.call(n,c[1])).done)return o;switch(n=0,o&&(c=[2&c[0],o.value]),c[0]){case 0:case 1:o=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,n=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(o=u.trys,(o=o.length>0&&o[o.length-1])\|\|6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!o\|\|c[1]>o[0]&&c[1]<o[3])){u.label=c[1];break}if(6===c[0]&&u.label<o[1]){u.label=o[1],o=c;break}if(o&&u.label<o[2]){u.label=o[2],u.ops.push(c);break}o[2]&&u.ops.pop(),u.trys.pop();continue}c=r.call(t,u)}catch(t){c=[6,t],n=0}finally{e=o=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,s])}}}Object.create;function o(t){var r="function"==typeof Symbol&&Symbol.iterator,e=r&&t[r],n=0;if(e)return e.call(t);if(t&&"number"==typeof t.length)return{next:function(){return t&&n>=t.length&&(t=void 0),{value:t&&t[n++],done:!t}}};throw new TypeError(r?"Object is not iterable.":"Symbol.iterator is not defined.")}function i(t,r){var e="function"==typeof Symbol&&t[Symbol.iterator];if(!e)return t;var n,o,i=e.call(t),u=[];try{for(;(void 0===r\|\|r-- >0)&&!(n=i.next()).done;)u.push(n.value)}catch(t){o={error:t}}finally{try{n&&!n.done&&(e=i.return)&&e.call(i)}finally{if(o)throw o.error}}return u}function u(t,r,e){if(e\|\|2===arguments.length)for(var n,o=0,i=r.length;o<i;o++)!n&&o in r\|\|(n\|\|(n=Array.prototype.slice.call(r,0,o)),n[o]=r[o]);return t.concat(n\|\|Array.prototype.slice.call(r))}function c(t){return this instanceof c?(this.v=t,this):new c(t)}function s(t,r,e){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var n,o=e.apply(t,r\|\|[]),i=[];return n={},u("next"),u("throw"),u("return",(function(t){return function(r){return Promise.resolve(r).then(t,l)}})),n[Symbol.asyncIterator]=function(){return this},n;function u(t,r){o[t]&&(n[t]=function(r){return new Promise((function(e,n){i.push([t,r,e,n])>1\|\|s(t,r)}))},r&&(n[t]=r(n[t])))}function s(t,r){try{(e=o[t](r)).value instanceof c?Promise.resolve(e.value.v).then(a,l):f(i[0][2],e)}catch(t){f(i[0][3],t)}var e}function a(t){s("next",t)}function l(t){s("throw",t)}function f(t,r){t(r),i.shift(),i.length&&s(i[0][0],i[0][1])}}function a(t){if(!Symbol.asyncIterator)throw new TypeError("Symbol.asyncIterator is not defined.");var r,e=t[Symbol.asyncIterator];return e?e.call(t):(t=o(t),r={},n("next"),n("throw"),n("return"),r[Symbol.asyncIterator]=function(){return this},r);function n(e){r[e]=t[e]&&function(r){return new Promise((function(n,o){(function(t,r,e,n){Promise.resolve(n).then((function(r){t({value:r,done:e})}),r)})(n,o,(r=t[e](r)).done,r.value)}))}}}Object.create;"function"==typeof SuppressedError&&SuppressedError;function l(t){return"function"==typeof t}var f,h=((f=function(t){return function(r){t(this),this.message=r?r.length+" errors oc
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "High-risk indicators present: Script uses suspicious domains (wyr-law.com) masquerading as Microsoft login, contains obfuscated parameters, and shows signs of a phishing attack targeting Microsoft credentials. Multiple suspicious endpoints for data collection and redirects are present, along with telemetry collection to non-Microsoft domains." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/","urlDefaultFavicon":"https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?timestamp=1733312528\u0026rand1=47\u0026rand2=mdfgluhkqswpzxa\u0026rand3=51\u0026rand4=38\u0026rand5=92\u0026username=ryan.morris%40lcatterton.com\u0026client-request-id=5c7b450b-59a9-4622-bfd9-46a5420103f9\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"urlReportPageLoad":"https://documents.wyr-law.com/common/instrumentation/reportpageload?mkt=en-US","dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://documents.wyr-law.com/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://67c8fb70-59b1754a.wyr-law.com/{0}/winauth/sso?client-request-id=5c7b450b-59a9-4622-bfd9-46a5420103f9","iwaSsoProbeUrlFormat":"https://67c8fb70-59b1754a.wyr-law.com/{0}/winauth/ssoprobe?client-request-id=5c7b450b-59a9-4622-bfd9-46a5420103f9","iwaIFrameUrlFormat":"https://67c8fb70-59b1754a.wyr-law.com/{0}/winauth/iframe?client-request-id=5c7b450b-59a9-4622-bfd9-46a5420103f9\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://67c8fb70-59b1754a.wyr-law.com/common/winauth/sso/edgeredirect?client-request-id=5c7b450b-59a9-4622-bfd9-46a5420103f9\u0026origin=login.microsoftonline.com\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeWRV9OeMbJh3VAqYNebsE8VmJ-ztRVwlj-ruFC0rKPNtw24JFlwoY2qX4_3QKkbgvmEoWUp9crkt5yz6YL1IpYmwagFN2dASyIJ69vVgJtZSanNletC7BE0N1RtWobUsM-UeZ_LJfeBtEHR78F-vB-p-_1pvZsePmaJCvNeyI-7CZi20Cfvj7le5bRD4qYh1hUPkaoXuNSc5tKu1zpxnR_SAA","canary":"rYn5rqV76kgSR63d20kgRyHCEavXqyF6r3Zw/1ZzVko=3:1:CANARY:eYj5j3/ndjqOkfUdprzNEfv6z6HMi3ib2XEcY6XTinU=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"5c7b450b-59a9-4622-bfd9-46a5420103f9","sessionId":"898ba4af-702f-4486-a9f7-92a60ecb2000","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://documents.wyr-law.com/common/instrumentation/reportpageload","dssostatus":"https://documents.wyr-law.com/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/watson.min_q5ptmu8aniymd4ftuqdkda2.js","sbundle":"https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/watsonsupportwithjquery.3.5.min_dc940oomz
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This is a common jQuery fallback pattern that checks if jQuery is loaded, and if not, adds a script tag to load it locally. While it uses document.write (which is generally discouraged), it's loading from a local source and follows a standard implementation pattern. The escaped script closing tag (\x3C) is a normal practice to avoid HTML parsing issues." }
window.jQuery \|\| document.write('<script type="text/javascript" src="js/jquery-3.6.0.min.js">\x3C/script>')
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "Script shows multiple high-risk indicators: heavy obfuscation (encoded strings, complex function names), DOM manipulation capabilities (querySelector usage), and suspicious behavior patterns (mutation observers, full-screen changes). Contains references to ad-blocking detection and tracking elements." }
function a0Q5(Q,s){var l=a0Q4();return a0Q5=function(x,w){x=x-0xac;var I=l[x];return I;},a0Q5(Q,s);}function a0Q4(){var r3=['availTop','toString','debug','zxBmq','#ff2','.newsletter_holder','console','BpnhQ','0.000','onmozfullscreenchange','head','availHeight','MutationObserver','AS_ENTRIES','tvFYG','__core-js_shared__','monospace','getAttribute','iOSnu','Univers\x20CE\x2055\x20Medium','JeDNX','abs','slice','keyFor','getContextAttributes','YmtJp','[data-cookie-number]','#inlineShare','data','open','fsOec','version','__generator','mNtUm','','toFixed','querySelector','ZKzKm','.wp_adblock_detect','round','lkHyG','DMNRn','pixelDepth','\x0a```','colorDepth','','','word','external','','ngjdY','method','tCRHi','MYRIAD\x20PRO','.revenue_unit_item.dable','ngdEj','reduce','','asinh','.cnt-publi','.bumq','filter','jUNpS','onmessage','QDppQ','iPad','RTCPeerConnectionIceEvent','segments','fillStyle','','wiPzy','knee','#f2f','5593936DGSiZV','groups','createEvent','close','','mozCancelFullScreen','trunc','CONSTRUCTOR','parentNode','(max-monochrome:\x20','create','.navigate-to-top','#f60','390QcuoUD','JBTgw','[id^=\x22bn_bottom_fixed_\x22]','clientHeight','enter','LMMAn','uedih','onorientationchange','utwET','shift','wocld','3801304348','NAByg','Math','foo','parse','isArray','length','hasIndices','SharedWorker','localStorage','appendChild','load','.sklik','sans-serif','now','hHUUt','SVGGeometryElement','Promise','hQAxl','getTimezoneOffset','fKusq','exit','pure','unscopables','getter','webkitRequestFullscreen','oqUzK','values','oncomplete','ltOWq','buffer','pdfViewerEnabled','SecurityError','msExitFullscreen','PrrbT','throw','reject','AsyncGeneratorFunction','#social_follow','aJXDb','value','sinkId','hOroB','\x22\x5cudead\x22','VERSION','context','','#top100counter','rect','','251461utKJAa','^(?:','about:blank','JdwXZ','','tail','fontSize','SCRIPTINA','OPmNu','PMingLiU','RiJCZ','beginPath','syypE','vinNJ','[object\x20Reflect]','random','riHVg','catch','cos','set\x20','wHuZN','sFWus','puffinDevice','__spreadArray','WEBGL_polygon_mode','enumerable','Notification','getParameter','iNAcX','Dispatch','oprt','838685TORMrU','InvalidAccessError','vECKY','result','textContent','function','NODE','HTMLElement','[null]','window','1000000000000000128','__yb','complete','add','get\x20','Vrinda','MacIntel','','.open.pushModal','#FollowUs','<!doctype\x20html><html><head><meta\x20name=\x22viewport\x22\x20content=\x22width=device-width,\x20initial-scale=1\x22>','defineProperty','QJftJ','span','setAttribute','buildID','sjflP','defineProperties','TABLE[width=\x22140px\x22]','propertyIsEnumerable','','undefined','attributionSourceId','unicodeSets','pointerLockElement','EXFvD','screen','nonWritable','/a/b','serif','CNxlV','removeChild','DIALOG','jhJCf','return\x20this','NVqfw','\x20is\x20not\x20a\x20function','.util-bar-module-firefly-visible','versions','rangeMin','gbyuU','#pavePub','sans-serif-thin','qnNFp','1px','browserLanguage','juUCY','vxhuo','permission','yAwYR','','reverse','','cBMMC','cookietest=1;\x20SameSite=Strict;','webkit','prompt','exp','','platform','VWJCb','get','webgl2','Event','language','#Kolom-Iklan-728','configurable','(prefers-reduced-transparency:\x20','BrqOM','parseInt','UpWtI','forced','postMessage','fromCharCode','JSON','1769112BMeSIC','test','lXKNh','tpfLu','Staccato222\x20BT','keys','TABLE.advright','top','ItldO','toDataURL','origin','SPzwt','iterator','webkitPersistentStorage','AsyncFunction','.article-sharer','BROWSER','ul.adsmodern','Microsoft\x20Uighur','Object\x20already\x20initialized','orientation','hasRegExpGroups','expoH','arity','1016305gzgirs','gxsfg','addEventListener','RangeError','setImmediate','Intl','','oDqvz','','#semilo-lrectangle','','DmVkZ','absolute','JNNRm','.yb-floorad','(dynamic-range:\x20','outerHeight','msWriteProfilerMark','#SidebarIklan-wrapper','port2','pow','srcdoc','from','raw','YVtocmVmPSJodHRwOi8vd3d3LnNhbGlkemluaS5sdi8iXVtzdHlsZT0iZGlzcGxheTogYmxvY2s7IHdpZHRoOiAxMjBweDsgaGVpZ2h0OiA0MHB4OyBvdmVyZmxvdzogaG
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate resource loader script, likely from Microsoft. It contains standard module loading patterns, debug logging, and document ready handlers. While it uses DOM manipulation and dynamic script loading, these are implemented with standard practices and safety checks. The code is minified but not maliciously obfuscated." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This appears to be a legitimate resource loader script, likely from Microsoft. It contains standard module loading patterns, error handling, and DOM manipulation for loading scripts/styles. While it uses some legacy practices and DOM manipulation (1 point), and contains error reporting to potentially external domains (1 point), the code is not obfuscated and follows expected patterns for a resource loader. The code appears to be from a trusted source and implements standard web functionality." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+h.length).toLowerCase()===h}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("name","")),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "Script attempts to modify top-level location with URL manipulation and contains iframe redirection logic. While it includes defensive programming (try-catch), the URL manipulation and frame-busting behavior could be used maliciously. However, it appears to be a legitimate session management script with standard iframe handling." }
//<![CDATA[ !function(){var e=window,s=e.document,i=e.$Config\|\|{};if(true){s&&s.body&&(s.body.style.display="block")}else if(false){var o,t,r,f,n,d;if(i.fAddTryCatchForIFrameRedirects){try{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&",o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}catch(e){}}else{o=e.self.location.href,t=o.indexOf("#"),r=-1!==t,f=o.indexOf("?"),n=r?t:o.length,d=-1===f\|\|r&&f>t?"?":"&", o=o.substr(0,n)+d+"iframe-request-id="+i.sessionId+o.substr(n),e.top.location=o}}}(); //
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "High risk due to multiple suspicious elements: 1) URL contains heavily obfuscated parameters and unusual domain 'wyr-law.com' instead of legitimate Microsoft domain for OAuth, 2) Contains authentication/login related parameters suggesting potential phishing, 3) Attempts to handle sensitive OAuth flows with suspicious redirect URIs. Pattern matches common phishing attempt structure masquerading as Microsoft login." }
//<![CDATA[ $Config={"fShowPersistentCookiesWarning":false,"urlMsaSignUp":"https://l1ve.wyr-law.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahYjZ3xOZhlY5SpGZcLG6V9gZHzByDiJSaqoMjFPLze_qCiz2CEnObGkJLUIqA6k5haToH9RumdKeLFbakpqUWJJZn7eI2Y8Gi6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFeje8xwnrgdzbHKdGyX10DZUkOEUq35RZJ5pUWGYuVl2enCQmXGKkUF2elClh7NrYllEYaWbWZFxVLm-YVRVWHa-rZGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvjPL_p_t7j76zuMVv453VnFEqHO6uaeru3FyWKBnpndBal5SpUVQSFRZRnlmbpGfR7FrZUpOUX627QYBhgcCDAA1\u0026login_hint=ryan.morris%40lcatterton.com\u0026estsfed=1\u0026uaid=997c41210f6a4347a4572af89d69191a\u0026signup=1\u0026lw=1\u0026fl=easi2\u0026fci=https%3a%2f%2f905bfb7e-59b1754a.wyr-law.com","urlMsaLogout":"https://l1ve.wyr-law.com/logout.srf?iframed_by=https%3a%2f%2fdocuments.wyr-law.com","urlOtherIdpForget":"https://l1ve.wyr-law.com/forgetme.srf?iframed_by=https%3a%2f%2fdocuments.wyr-law.com","showCantAccessAccountLink":true,"urlGitHubFed":"https://l1ve.wyr-law.com/oauth20_authorize.srf?scope=openid+profile+email+offline_access\u0026response_type=code\u0026client_id=51483342-085c-4d86-bf88-cf50c7252078\u0026response_mode=form_post\u0026redirect_uri=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2ffederation%2foauth2msa\u0026state=rQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahYjZ3xOZhlY5SpGZcLG6V9gZHzByDiJSaqoMjFPLze_qCiz2CEnObGkJLUIqA6k5haToH9RumdKeLFbakpqUWJJZn7eI2Y8Gi6wCLxi4TFgtuLg4BJgkGBQYPjBwriIFeje8xwnrgdzbHKdGyX10DZUkOEUq35RZJ5pUWGYuVl2enCQmXGKkUF2elClh7NrYllEYaWbWZFxVLm-YVRVWHa-rZGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAybiBh_EAL8MPvjPL_p_t7j76zuMVv453VnFEqHO6uaeru3FyWKBnpndBal5SpUVQSFRZRnlmbpGfR7FrZUpOUX627QYBhgcCDAA1\u0026login_hint=ryan.morris%40lcatterton.com\u0026estsfed=1\u0026uaid=997c41210f6a4347a4572af89d69191a\u0026fci=https%3a%2f%2f905bfb7e-59b1754a.wyr-law.com\u0026idp_hint=github.wyr-law.com","arrExternalTrustedRealmFederatedIdps":[],"fShowSignInWithGitHubOnlyOnCredPicker":true,"fEnableShowResendCode":true,"iShowResendCodeDelay":90000,"sSMSCtryPhoneData":"AF~Afghanistan~93!!!AX~land Islands~358!!!AL~Albania~355!!!DZ~Algeria~213!!!AS~American Samoa~1!!!AD~Andorra~376!!!AO~Angola~244!!!AI~Anguilla~1!!!AG~Antigua and Barbuda~1!!!AR~Argentina~54!!!AM~Armenia~374!!!AW~Aruba~297!!!AC~Ascension Island~247!!!AU~Australia~61!!!AT~Austria~43!!!AZ~Azerbaijan~994!!!BS~Bahamas~1!!!BH~Bahrain~973!!!BD~Bangladesh~880!!!BB~Barbados~1!!!BY~Belarus~375!!!BE~Belgium~32!!!BZ~Belize~501!!!BJ~Benin~229!!!BM~Bermuda~1!!!BT~Bhutan~975!!!BO~Bolivia~591!!!BQ~Bonaire~599!!!BA~Bosnia and Herzegovina~387!!!BW~Botswana~267!!!BR~Brazil~55!!!IO~British Indian Ocean Territory~246!!!VG~British Virgin Islands~1!!!BN~Brunei~673!!!BG~Bulgaria~359!!!BF~Burkina Faso~226!!!BI~Burundi~257!!!CV~Cabo Verde~238!!!KH~Cambodia~855!!!CM~Cameroon~237!!!CA~Canada~1!!!KY~Cayman Islands~1!!!CF~Central African Republic~236!!!TD~Chad~235!!!CL~Chile~56!!!CN~China~86!!!CX~Christmas Island~61!!!CC~Cocos (Keeling) Islands~61!!!CO~Colombia~57!!!KM~Comoros~269!!!CG~Congo~242!!!CD~Congo (DRC)~243!!!CK~Cook Islands~682!!!CR~Costa Rica~506!!!CI~Cte d\u0027Ivoire~225!!!HR~Croatia~385!!!CU~Cuba~53!!!CW~Curaao~599!!!CY~Cyprus~357!!!CZ~Czechia~420!!!DK~Denmark~45!!!DJ~Djibouti~253!!!DM~Dominica~1!!!DO~Dominican Republic~1!!!EC~Ecuador~593!!!EG~Egypt~20!!!SV~El Salvador~503!!!GQ~Equatorial Guinea~240!!!ER~Eritrea~291!!!EE~Estonia~372!!!ET~Ethiopia~251!!!FK~Falkland Islands~500!!!FO~Faroe Islands~298!!!FJ~Fiji~679!!!FI~Finland~358!!!FR~France~33!!!GF~French Guiana~594!!!PF~French Polynesia~689!!!GA~Gabon~241!!!GM~Gambia~220!!!GE~Georgia~995!!!DE~Germany~49!!!GH~Ghana~233!!!GI~Gibraltar~350!!!GR~Greece~30!!!GL~Greenland~299!!!GD~
URL: JavaScript Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This code shows multiple high-risk indicators: it contains heavily obfuscated strings in an array (NV), uses array-based deobfuscation functions (a0e5, a0e4), and includes suspicious functionality references like 'WebSocket', 'postMessage', and DOM manipulation. The obfuscation pattern is commonly used to hide malicious code." }
function a0e5(e,A){var b=a0e4();return a0e5=function(n,B){n=n-0x107;var y=b[n];return y;},a0e5(e,A);}function a0e4(){var NV=['GeneratorFunction','BROKEN_CARET','wSKUK','parentWindow','jvRXt','@@iterator','schedulerActionCtor','YOqFw','ByrAM','TcQAn','Accessors\x20not\x20supported','MMrfX','requestAsyncId','1179600PbBFlo','setImmediate','piltU','Symbol.asyncIterator\x20is\x20not\x20defined.','ueHnH','GQrRR','hRRmy','10NAOQjz','htmlfile','createElement','Generator\x20is\x20already\x20executing.','sticky','WWqal','parse','lleRF','hpevV','6SmwFfI','cmLzb','eBiIU','get','return\x20this','resolve','parent','_addParent','XzOIs','createEvent','errorThrown','exception','REST','recycleAsyncId','return\x20(function()\x20','AvgPM','warn','EMPTY','errors','now','PrLjM','stEZt','appendChild','zdexu','Math','read','9977pMVxgA','Incorrect\x20invocation','getReader','serializer','{}.constructor(\x22return\x20this\x22)(\x20)','NmgME','Not\x20enough\x20arguments','buruO','nextTick','xHCem','XyCVs','Object','filter:hue-rotate(','Undefined','FdxLk','mAvHY','Array','hKxFS','index','promise','code','default','toPromise','Bun/','write','aejTp','tfnEy','ownKeys','construct','Can\x27t\x20call\x20method\x20on\x20','1518938DNMSSl','NODE','toString','operator','delay','PromiseRejectionEvent','MessageChannel','apply','Deno','setPrototypeOf','_throwIfClosed','BPnLK','kElqn','onerror','_next','DiJvF','documentElement','bYRYF','RKeNj','rejectionHandled','isCao','GNxtX','Promise\x20can\x27t\x20be\x20resolved\x20itself','_config','exports','floor','SFGRI','RRyKr','charAt','Ydsnu','Can\x27t\x20convert\x20object\x20to\x20primitive\x20value','indexOf','XreNR','(((.+)+)+)+$','unscopables','xSzcs','IE_PROTO','wPiwW','assign','AsyncFunction','type','propertyIsEnumerable','IS_ITERATOR','complete','add','RGpWs','toPrimitive','keys','push','rejectionhandled','groups','emit','qbmso','1573663ldgBPL','\x20is\x20not\x20iterable','addEventListener','ORXAs','BUN','isPrototypeOf','FlPLg','PDyBN','_subscribe','HDlCj','6515020uVkjCx','SSgeX','script','wks','actions','ahbDW','idGJK','AUSVa','BROWSER','done','gSFUo','dnZJQ','pafmX','onStoppedNotification','observers','jQxUZ','_finalizers','tvhAL','xKxNw','AyhKq','_resetState','\x20is\x20not\x20a\x20constructor','open','Unable\x20to\x20lift\x20unknown\x20Observable\x20type','CFLkY','KktkX','tail','PRcjg','21kPdqNw','lhCTq','_active','qBUop','366940XpgfHe','_output','flush','schedule','BhrOl','uiuOv','random','next','createTextNode','querySelector','eUQPT','Promise','nonConfigurable','reason','sent','sham','CONSTRUCTOR','wWdQH','Function','qsrFQ','stopped','11512072KzwEgh','Provided\x20object\x20does\x20not\x20correctly\x20implement\x20Symbol.observable','all','OCxKj','then','PuBfG','IyoqE','cifQu','clearTimeout','VLfvy','port2','ZBpWx','set','OcCXA','MMTTr','close','replace','aamXX','_complete','delegate','29481507OyeYPl','qHtWb','LHvJr','url','throw','setTimeout','5ClhcCN','closingObserver','send','forEach','JlujC','dUTDm','VGlnB','yjHrT','Dbsit','yAWXo','_bufferSize','Muhfj','HKxWc','no\x20WebSocket\x20constructor\x20can\x20be\x20found','object','forced','isArray','result','jrnNk','Dphfn','facade','document.F=Object','SZKAi','OlWbW','div','hasIndices','toLocaleString','message','You\x20provided\x20','QxUAq','Cloudflare-Workers','ZDyJQ','JAzJB','execute','_removeParent','useDeprecatedSynchronousErrorHandling','_trimBuffer','VNzcd','create','stack','_checkFinalizedStatuses','HtHIz','Giruk','DpRMp','unicode','getterFor','pop','function','CbiTH','postMessage','KXImB','thpIa','raw','Symbol','closed','69VfgbNn','WWOTX','Unhandled\x20promise\x20rejection','570927lssBPq','reduce','PqVBH','ceil','normalize','finalize','bind','iXnuF','remove','toStringTag','observe','GJMiy','avgzH','callee','console','Symbol(','cWgdk','onmessage','getOwnPropertyNames','VGoSU','map','notified','dispatchEvent','_windowTime','input','WebSocketCtor','Symbol.iterator\x20is\x20not\x20defined.','shouldUnsubscribe','onreadystatechange','initialTeardown','gasnc','W
URL: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Trying to sign you in", "prominent_button_name": "Cancel", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true Model: Joe Sandbox AI	{ "brands": [] }
	{ "brands": [] }
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get back into your account", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or Username:", "Enter the characters in the picture or the words in the audio." ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get back into your account", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or Username", "Enter the characters in the picture or the words in the audio" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain 'microsoft.com'.", "The domain 'wyr-law.com' does not have any known association with Microsoft.", "The presence of a UUID-like subdomain '8add78d1-59b1754a' is unusual and suspicious.", "The URL structure suggests a potential phishing attempt due to the mismatch with the legitimate domain." ], "riskscore": 9} Google indexed: False
URL: 8add78d1-59b1754a.wyr-law.com Brands: Microsoft Input Fields: Email or Username:, Enter the characters in the picture or the words in the audio.
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Get back into your account", "prominent_button_name": "Next", "text_input_field_labels": [ "Email or Username", "Enter the characters in the picture or the words in the audio." ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is classified as 'wellknown'.", "The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain 'microsoft.com'.", "The domain 'wyr-law.com' is not associated with Microsoft.", "The presence of a UUID-like subdomain '8add78d1-59b1754a' is suspicious and often used in phishing.", "The URL structure suggests a potential phishing attempt due to the unrelated domain and subdomain format." ], "riskscore": 9} Google indexed: False
URL: 8add78d1-59b1754a.wyr-law.com Brands: Microsoft Input Fields: Email or Username, Enter the characters in the picture or the words in the audio.
URL: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdS Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL '8add78d1-59b1754a.wyr-law.com' does not match the legitimate domain for Microsoft.", "The URL contains a UUID-like string and a domain 'wyr-law.com', which is not associated with Microsoft.", "The presence of a UUID-like string and an unrelated domain is a common tactic in phishing attempts.", "The input fields 'Email or Username' and 'Enter the characters in the picture or the words in the audio' are typical for login pages, which are often targeted by phishing." ], "riskscore": 9} Google indexed: False
URL: 8add78d1-59b1754a.wyr-law.com Brands: Microsoft Input Fields: Email or Username, Enter the characters in the picture or the words in the audio

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 4 10:42:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9784502561779544
Encrypted:	false
SSDEEP:	48:8Nd/T3HH+HVidAKZdA19ehwiZUklqehTy+3:8/jwgy
MD5:	FB406F21246093A08F8D95185312C487
SHA1:	85F4DD3B7C0310184AE2B918DD3F7B210059B0FE
SHA-256:	56CD19373BFE7A320BF11155451CD5B83F0DF384FFFDCF4A9B1D80D66F09C42B
SHA-512:	BCFADD63F05BCA0FD671CA3913E60D3F0E1903D716EC09132FC9706B0C01EE4A4F891DF3E0B35CCC6D3013B235BF12D8C33B071072975A7479770CBA7EEFBDFD
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....S...AF..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YA]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 4 10:42:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.992952145367151
Encrypted:	false
SSDEEP:	48:8sd/T3HH+HVidAKZdA1weh/iZUkAQkqehQy+2:8AjK9Q5y
MD5:	3617D13BAE153D4798E60A4414B0AD9B
SHA1:	CC80F1E9017FB57BC08D5DF13B501889DA89A457
SHA-256:	C0F60863B25AD0169F6C5CCD42D407F6F9F6612308A646CC1445FEF13D17A1BE
SHA-512:	A4148CB67461E83200217DC566C893370E15E06C3697532BEB3F69D23E543DEC9CFE954590B8BC6B738FD7427814E0C0BFD1C3E6F7B1BD953FB00C42DD526AA6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....1w.AF..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YA]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.00783698980028
Encrypted:	false
SSDEEP:	48:8xYd/T3HsHVidAKZdA14tseh7sFiZUkmgqeh7suy+BX:8xcjUnsy
MD5:	B72EDE4BEC3F0687E2F0B2A4DC8203BA
SHA1:	9C42310B5765649EC8DE7B6BBB6FD475EA6DD5A4
SHA-256:	CF6D070798670F7E95FD6B4C29093891BDAFCAF179B2713DC2F00C49E62E1F28
SHA-512:	10E268719AE7C1D5781EA4BC07AC222D7BD84C38A3446950D1BA791E355BAE17DE90B63AFC78D68E9753992E5E5226E047FC40730E45E14C7EBC4710FFC316AC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 4 10:42:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.99241881201774
Encrypted:	false
SSDEEP:	48:8id/T3HH+HVidAKZdA1vehDiZUkwqehUy+R:8GjR2y
MD5:	5DCB1E49C57C624B1E3ED4A36B25AED1
SHA1:	D10965FC9A6FDEE540C08AA7A2704C82D9EE42E1
SHA-256:	2616DD2D895CAF3E7A49903BE18A5C495AF81DD378366A423060F5B76E0A18D4
SHA-512:	190696A98BCA2E14671A032F5ED89264308ABCD395FF7796075394710A425AF08511D552E113B75F238C57BE1C9448379769DA04CD6B0176108778646DD391D8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......p.AF..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YA]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 4 10:42:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9814425073700823
Encrypted:	false
SSDEEP:	48:8Bd/T3HH+HVidAKZdA1hehBiZUk1W1qehqy+C:8jjx9Ky
MD5:	9CCB42CC2F6AE26430F97FF7B6A8DB02
SHA1:	0716844DAC6EBA5B0AABA3EC4CBA6C96BD557033
SHA-256:	8A22046BE78B06F45F7FAEEB1ED70657728BE1D662ABA223389D0BD2A335CA3B
SHA-512:	11B10AAD8C4776BCA72AE8534CD0FFAC802CDD6A7CBB776643B1480230D608020D75D1B271517A37AD21FD79B2A3E793C2543CD33D5227552F253BA1AD416F16
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....5~.AF..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YA]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 4 10:42:01 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9903321073884364
Encrypted:	false
SSDEEP:	48:8xd/T3HH+HVidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbsy+yT+:8TjtT/TbxWOvTbsy7T
MD5:	5B00F5A81335718F2D57C6DDAAC191B3
SHA1:	B29D27CD07E5B8A2B516EC8FAB94748C30B7B48F
SHA-256:	21271D6C145D242C44E7958EF03841645701FF3A704AE5595814AB3A591A5D41
SHA-512:	F03C2F31EBB9B4E5671FB1F427D7C3E7E31F3AA758941EA28AEF7D408F8C10CCAB7BC2BA9404E5162D9E43A53E6D0E5B0705131EDDCE4537693575DC30D2E2C2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......h.AF..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y@]....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y@]....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y@]....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y@]..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.YA]...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 536, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7740
Entropy (8bit):	7.840143577473007
Encrypted:	false
SSDEEP:	96:/Ncmid7So+30qD+CxopRpYt0Zd0WqmAUkQZdfs+Kdzhmjzm/F7LUQnf00a7eN1oP:XAI3wZCWiQZdfko2tn80TprfDhFh/W
MD5:	5EA6046D4CE4687C311440BA472B050C
SHA1:	91316EC76D000B018EBE2E6C185C760E76CEFBEF
SHA-256:	5622C3CAC29FF41E71FEC259771379AA7D7E5DB641F40F939732EE19FFFB873C
SHA-512:	DCA2E602685E6E92E6C273780F7FAEE5EBF4598C0C043A45B280E227ED142DCD2B46F804DAD0BBC634A75B119A8A530BAE60D062D2E630B659AEC44DFD33B1A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............7.....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....Fr.`T...fn\|.,.....ei.w.Gp8.w.....-u..Y@6.DU..d.@...%.. .?..$.to......C......m...s...1..4......-..Rq......v.EP..}......l..6.bz.._V....0...J..Zz......&!.`...&!.`...&!.`R.~..e......Z...c..G....L.......\|.%.".-}.BS.M ~P".h..Vjq....y.-....V....K.'.......8U...\0..}...fxt.Ggx4...I....dp.X0.Ovu.Lb2.,.3<......"m..........u.\O[.V.....x.k.M........./..S].D;......>........I.......l........\0....R...3G.J..k%1.kC:.J7..l....!H~..M\..+.P....:..T.....=.....I......I......I....n?..*..,4....mk.:G.E[..w.......!..s.qS.......oM........].v..c.A..:.h...% .`...&!.`...&!.`...:."dx4,.m?}N7../..a..SX..%..!O....(J.s..{....`....j~%j.\..o.bhv..........3.....\|Z.x.i.g.,.....'..qO..nk....V.G....&..O........._..~K.Vg..o}....i........O...m..-........tJU.J.@........tk.d^x......'.. t...A..&!.`...&!..\|.....:./..g..ex.: .`...&!.`...Ok./.]....h..&}.Y.NX....3..Z.;.K....F

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 102818
Category:	downloaded
Size (bytes):	25626
Entropy (8bit):	7.992266956848819
Encrypted:	true
SSDEEP:	768:syeyUN/gpQeWqCnVUxPc7JDyO9fCPXiTz:sy5G/gpHOnaGFDyf8
MD5:	85411657AF1273C63B0E46FA9CD40DE7
SHA1:	697049BAE5007877256A35D9041B08D44256F498
SHA-256:	D8F8D88016CFFB4D47B5C362874197B50F0C37AB519B631B82B3EE5721A57510
SHA-512:	53A801C07568487A7C475CA8F1433970FF63377DD193271F9705673C87F8C40F8F0C27B715FF9B8B80FE6A76274E5C575D1584455FD9FDCF289E40929C6EC7B3
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=tTJUxd2-Xwg7Goikjksgas1CBbaMQW1SXLue4MyLo9hOSTFpkQKegmUZyWqYW3mCn19pIRQzwAzhFijSDowlcy21ZevxUeXfy7Wf40VwBuJpmPzYuhxx7I8_iZR-PGbFRv_dj-wIiIZHSpMNNsE7uKNMz84kKxHocyYAgb3m50X_eNq6_nwNNueWDbB7aY7UG7pu4C_ItRdwhJuCwEFhPrgIW4y6ym7GnXOBN7a-QXU1&t=ffffffffb201fd3f
Preview:	............v.I. ....?..J.Q....YY.(..Z.jm#)..d... H..D..X..l..'._......(e..9.../.......f..................'.....O.;.'..2.Wu5Z@....'....v.M.;T...u1.T.=...m....%_zg.....YFM~....,^'.E...`hdg........H..d:M..<...N.%..X\.g;1....w.8.......M..x1...N...y\|\|:.U......0{P..n7..S].~....R.....\^N.;.IYGy.R...S.p.r.....c.W.=.R_.f.H..Z\\....N~U,&U..@....i.CG.&s..E1.u.,2....S.b.L...8..(c.'Q..r&.8[..... ?...Y^..Y...$n...}R]...,.'.6.]V...@..P'.3.....q?*.l=}P.S.j..(.._%.I.Dz.....h..z3..M.z...G.yr.N.qp.t;.~.=...i0,.u..ew....a..)L....t...i4.&[.DR..j:m....Y.G..?L[...DE\|f.....FJ."...<H..D.8..S,;.U..<...c.7..........DM..W<.V8......\xP\|...!!t...=M.g.y5...4.......h...&..L.q...h.i..........~...i..5......q...........f..4:...5...a.+..z.......)R^..q.`}.2....V...& R..:.r.;.y.g&..b....T.Z...&5..I..%....8?...3X.gQ.+...,....V._$...d...h..\..1.&......u..-..I.5Jf............[B.i....P.{i1...o....CZZ.....Go."[...'.!...c...F.;o..W.....W.....^.S...2.)g;...8..Bzj.....+.O......;.....-.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	46392
Entropy (8bit):	4.762345340421926
Encrypted:	false
SSDEEP:	768:igRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:X1d/5edgVrlH
MD5:	B09B80BC2215832010A4805DAE724E1F
SHA1:	C97B30D77294026903A4E2FC18D8AE936E5A298A
SHA-256:	67ED4E5B4DD71404432D34CFD86F9A43656E1447E47C4106A8B8F69F38E2840E
SHA-512:	FE9CB5070AD1626846F22489706F1960AE42945EE5920A5E06BBF7EFA8E21EC1E989C7071FECDC46BDDA7A10C836DD118E46A76AB6C2FD57981E759E43A1AA8B
Malicious:	false
Reputation:	low
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/e4bf284a-59b1754a.wyr-law.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5402
Entropy (8bit):	7.959008972985399
Encrypted:	false
SSDEEP:	96:SIPPKqXzgPrV+UGjhYvCrHe5Bp1IjtLZueegKDE2DUDx5uwp4kXqAbza:bPKqXcPVGSCrHeVyLZxSNax59Xre
MD5:	DDFD354B841B84AAF631066BD1CDB5CD
SHA1:	C1C355D37D7EFB94DDB4C15BB4D2E7F6FF2840C0
SHA-256:	E49D1D0114AF7A20E7F7099B25DF2246AD03863870FCDEF058EA42A0AD910048
SHA-512:	D77CAA599F7E04687613F3850B53F81C7621DC9BB6F99DB8C2583C84332F12E2EB6530F1BD7E513B734F1C7819BC26741FDDEA56071BCC921ECAF3884F21DBEA
Malicious:	false
Reputation:	low
URL:	https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179
Preview:	.PNG........IHDR.......#.......?.....sRGB.........gAMA......a.....pHYs..........(J.....IDATx^..\|T......NB.H.!@BO..... ...&..(._.DDDE@A#.oyh..EAiR.. -H....H..M.....l...c..}..5..;..9s..U%.PPP.o....}......P.IA.JX.3... ...v..+{.ez.6.........E.....;a)4..r..T...;>D.G;.!....X.jT..z}..I.,.(..R.p.............X$L66..M-.;.....+..<DAa.KGay:R;e..m.../{.<`.RA...Ef.7?..3S..<... ?...+.Z5AQI)b.SPT\..Hx.}.P.....\..M..zU5..n6.F.D.n....x=......7S.......u.BD..r.....L...Eh....F.A.M.<.M\.7b....g.T..... LVb.+.......x......m..!-#.._....P5...$..n....rN.......)...Z..M.;z......~l22....P9....T.Vb,.L..%...'.b.......3.e.4Cd.L_....^.............p..=..k..z@`.rA.......m[....W.......6._\|...o..o.(H.goL...H.......`-....E.....Ga.k.D..a..h..%......y.....)....O..U..1....sX.....3P........`<...'.Tf....o.....ZmX.!.....4..=_)........../.%..........{....y..HHJ.^-.Ac...T....\|(.3$*.J\"t....HM]PX.7.G.........b..6z>.4k.......N..q.iT...M-".^.>..3.>....2V<w.........f.pvr$WX.....L..........v..

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15763
Category:	dropped
Size (bytes):	5536
Entropy (8bit):	7.959094228191166
Encrypted:	false
SSDEEP:	96:tFjlhOnJWS538ALIBfz0cYcY+33j9B9gJebV/w2Xa+4n0dph2hHl4eemHxsU+mYM:zjmpsSIBfz36e/91mj0xUK+xvYM
MD5:	51C02168E1F272B84E459A1471F5C274
SHA1:	573C3B3E23248BF2C08030FAA8EF490F734E0F6C
SHA-256:	13017163268CAE11A16D64EAD053D574DC23AEF06B218B6E51F77A3CDA869B3E
SHA-512:	B7F1D2E8381781FA1E6CED14647EC37289B2A2598D6384145B69E6A634F6EF995B358578BC3F812954F444B1AF991ACD094CAA49A86C99CAA1E8627EB45824B7
Malicious:	false
Reputation:	low
Preview:	...........[.w.F...?...!.f,.M.rU..pBk...f...@.(...........HH..N..I-k..;w..+............:...vu.u.o..5.>h..F..xhS..;..6.....w...(.D..A..Q.\h..L\|7.I4..1..$......_.X..A4...K<..M..6-........Q<...T....p..=.-.K(.6.=.h..?.k.. .D4L......M....[0.M.&x...$.+:,.C..V!.Q;.....}...........OqhZ......BF.....6.....y.p..o.!.....H..Z;...=...Z..D...D...b..`...7$......Q....)..\.k.$.!.dL."...t........@..(..."4......;8:6..8Mca....t<.[.yr..3k.M..h:.\.#..pH....../B-.P<...i..h.h..a..u...k.p....n!.....z.z...j....?...z.........pv.....M+...............4....B&..{.......Ex..,...d>....P...X..{.V.^w.s6u".)O.4.t.. ..).....'....1OX........7\L..M0.....i....H...j..+.B....\|..F.0Y.pK.h.tS..s+..6D1q....M....s.I..5.t.N8N.-..q....{.&C..y....r.....nt+8....>..._....Z...k..=.y.K.X.:...C......\|...r.$;...b3....M......4.p.X....>.9~.&.E.n..^..<%.h......v.....`M..I..q.?.n3........D..7....,.E....GE....\|..{....)....u......<!....^~.v...\|.Cj....V..p..M.9.i7....8I..8}8%...O.c..X.vd.4.z

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 15763
Category:	downloaded
Size (bytes):	5536
Entropy (8bit):	7.959094228191166
Encrypted:	false
SSDEEP:	96:tFjlhOnJWS538ALIBfz0cYcY+33j9B9gJebV/w2Xa+4n0dph2hHl4eemHxsU+mYM:zjmpsSIBfz36e/91mj0xUK+xvYM
MD5:	51C02168E1F272B84E459A1471F5C274
SHA1:	573C3B3E23248BF2C08030FAA8EF490F734E0F6C
SHA-256:	13017163268CAE11A16D64EAD053D574DC23AEF06B218B6E51F77A3CDA869B3E
SHA-512:	B7F1D2E8381781FA1E6CED14647EC37289B2A2598D6384145B69E6A634F6EF995B358578BC3F812954F444B1AF991ACD094CAA49A86C99CAA1E8627EB45824B7
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js
Preview:	...........[.w.F...?...!.f,.M.rU..pBk...f...@.(...........HH..N..I-k..;w..+............:...vu.u.o..5.>h..F..xhS..;..6.....w...(.D..A..Q.\h..L\|7.I4..1..$......_.X..A4...K<..M..6-........Q<...T....p..=.-.K(.6.=.h..?.k.. .D4L......M....[0.M.&x...$.+:,.C..V!.Q;.....}...........OqhZ......BF.....6.....y.p..o.!.....H..Z;...=...Z..D...D...b..`...7$......Q....)..\.k.$.!.dL."...t........@..(..."4......;8:6..8Mca....t<.[.yr..3k.M..h:.\.#..pH....../B-.P<...i..h.h..a..u...k.p....n!.....z.z...j....?...z.........pv.....M+...............4....B&..{.......Ex..,...d>....P...X..{.V.^w.s6u".)O.4.t.. ..).....'....1OX........7\L..M0.....i....H...j..+.B....\|..F.0Y.pK.h.tS..s+..6D1q....M....s.I..5.t.N8N.-..q....{.&C..y....r.....nt+8....>..._....Z...k..=.y.K.X.:...C......\|...r.$;...b3....M......4.p.X....>.9~.&.E.n..^..<%.h......v.....`M..I..q.?.n3........D..7....,.E....GE....\|..{....)....u......<!....^~.v...\|.Cj....V..p..M.9.i7....8I..8}8%...O.c..X.vd.4.z

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
URL:	https://098ace20-59b1754a.wyr-law.com/Images/hipaudioplay.png?vv=100
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26954
Category:	dropped
Size (bytes):	5479
Entropy (8bit):	7.9638991457717045
Encrypted:	false
SSDEEP:	96:eOSPL1NSViGgCSypYDjpSGDCtK/Gh0SqyGyA/ztK/Rs0/XPeKHa/u1sCfoN+f5jX:az17GLtpq7/9uGZqZ/XWca/gHzfCzh0L
MD5:	AA2C434CD228F2F66475A3DE6563810C
SHA1:	D973E6EA552AD17B5379CB44A0AEE3EBFBCA0EE7
SHA-256:	F86E52667175BF496752323AE014CAAA4DF7C6982727815BDAD5633CFF68BCA2
SHA-512:	17901669B003EB648488EFA820787D6F4D10FF90D72C6C3A2CB5BEBC0E74E5D96F3005C2957EB0B037856FEB5BD0F3DFBFA1BCEF3BFB6CA4ED207D618E140D05
Malicious:	false
Reputation:	low
Preview:	...........=.r.F...?.....l.H...b..e3F...n....]$1B.m.M.G...~...f.:..n9....#D4.2+.........mZE..k...i.M.&+..Y..E..g/.;.~.;...45..-.y9.t2..f..^.ym5....xX.MU...{S..5CT.<....9].X.mO..7..a...]YM....=.,..7.....U...i.?...%.....f..2/....5..).~.p.....o6..4O.<...y1F.DR.e...v\|..<]..F.}........ ......D{ .....z....FG..}Y0..^.k.U..>\|...zQ..l.#.u..Y.?.j..h?..HA...."..vg9R.[..Ez.]..F....5+.QVL....x..E.^F.[I.?.xz.N.......C.$..y...e.g...M6.....w.9..%.9.k.....5..jN.x.8....mg...s..k....v....P...8.\!VQf.....8..7w.,.Z.Q.......{.$..}..%Y.kkJ.9.M.!..0..j..,?.g......n..f..!.G.U..AU..r.........5G9........k.ai}q...h.9.`.&..h...];m...)......[....}b.5...t.z..E.kqPp...?..t.r.ZO.....OG...N......V.....&.'.......2......L...]...6<.....9.. ...]....3IQJ..L..........\......l(<..b.g.On.y...A.`.w..._a..8.....4....74......vN.Y........T..8...3..D.. ...E..9Ck.c...K)<,..N.F...K..).^I\|b.Y....A.r...m..............F...<(.?..f...W2.....qZ.Y~0.....G"..}..Yz..$".. %+f.EzR.#.^..:..I

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407064
Category:	downloaded
Size (bytes):	116416
Entropy (8bit):	7.997530339007143
Encrypted:	true
SSDEEP:	3072:gP2vtg2M61BDqGe6KEUCROHn7jHZiL3Gwby/jSOkztG5M8:gO1g2L1BjaExRYnfHAPbybpkMM8
MD5:	765DB8EF60E3EC8BA5183143C62829FF
SHA1:	CBB4CD00EF53EE2A7ACF23A5F7EFB1AB5A358BBB
SHA-256:	44FFFFCD1818EEE9D3BF509584AFE886F29B5C88BEFC1232F159A9E366FDC332
SHA-512:	F0365BFF98D51ECC234E552A4BDD8649659DBC40A8A41397E61258D54EAF51E299CD5E635305B879E3C6D7626E1669406288F255B28E58DAD1E2F5B9465FBF3D
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Zw....k...Q.^O...0....m.......X\|.^.S;M..'.......S}....p.V..VA.....sr....=%xL6.....;~5....35s+.....5K.yy.7`.Q.=.;[[..U..a^..`.c4..Yd=.zQ-p#.c.......b..X.?v...\AMT)..~.<.`..Iaao..h.N.k~<.%-.-p.b7oO..]./,r..m..xl..3...6.O"..QP[....x...?.I.0..{..'..$nE...i....b...X,jK....y.).:...J`'_<....w-.d.......u.:..Z?.%.................+X"G.{.....{.4.xE....}.7].a..._..Lyd...]0.M....P\|..=]laY.(...h..2..X.(.X...2.VL.....}..~..6..[C..obz.#.....37h.W......P{..7!@...b..\R.]U....."...4.o....7S.piCG../.px..j.%r2.....r...m

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	downloaded
Size (bytes):	51797
Entropy (8bit):	4.670508013327262
Encrypted:	false
SSDEEP:	768:3V1BTA/VcvlPRQL5IBRe7RMCb98lQfWGfAlB2sYXzrSSl:3V0kBRXBRe7eC+lQfWGfAlB2sYX6Sl
MD5:	CF500A7ABF2F91BDCFF89F6F33AC9799
SHA1:	63BA79675AED9FE16E8B9771B3BD354FFF4CE511
SHA-256:	14B694113B674C51E8A85902144E43DDCB5DCB213A39FAF4831048DF1B0C4139
SHA-512:	F3342681275C63E7C21AAB4F3246C2DF9E0E6F27641C016BBC75F63E8D7B0071AB7D8A17223E26A7C7AC73E4140703E45E7E805583FD97B827E11B1C8ACE76B4
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="favicon.ico?v=1342177280" />.... <script src="//8aa4dccd-59b1754a.wyr-law.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="js/jquery-3.6.0.min.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.568752791305041
Encrypted:	false
SSDEEP:	3:IngyQPSunm9imR6Y:R13pY
MD5:	83ECEDC097388E43F538879B44917021
SHA1:	02D6D59675B34BD0AD4221DDA65DCBD0BAE4B975
SHA-256:	8F62A87918F858544CF63EDA2A7DF74179757D72864C299785CD1D1FF04ED6E1
SHA-512:	7E4CAC353005822211CE46A0BD21D25AB667BF973C156C63C5285C017D0DC0CA0E832B7E9CC076EEC8BCCC0EA23ECCB9F1DF58C12CA434A53E28399BB2769831
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAl5a9hSL9fGRhIFDURbFPwSBQ2L4FIoEgUNxK_d4xIFDW1rCkoSBQ2VKJT-?alt=proto
Preview:	Ci0KBw1EWxT8GgAKBw2L4FIoGgAKBw3Er93jGgAKBw1tawpKGgAKBw2VKJT+GgA=

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 232 x 536, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7740
Entropy (8bit):	7.840143577473007
Encrypted:	false
SSDEEP:	96:/Ncmid7So+30qD+CxopRpYt0Zd0WqmAUkQZdfs+Kdzhmjzm/F7LUQnf00a7eN1oP:XAI3wZCWiQZdfko2tn80TprfDhFh/W
MD5:	5EA6046D4CE4687C311440BA472B050C
SHA1:	91316EC76D000B018EBE2E6C185C760E76CEFBEF
SHA-256:	5622C3CAC29FF41E71FEC259771379AA7D7E5DB641F40F939732EE19FFFB873C
SHA-512:	DCA2E602685E6E92E6C273780F7FAEE5EBF4598C0C043A45B280E227ED142DCD2B46F804DAD0BBC634A75B119A8A530BAE60D062D2E630B659AEC44DFD33B1A9
Malicious:	false
Reputation:	low
URL:	https://7aea1062-59b1754a.wyr-law.com/dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419
Preview:	.PNG........IHDR...............7.....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....Fr.`T...fn\|.,.....ei.w.Gp8.w.....-u..Y@6.DU..d.@...%.. .?..$.to......C......m...s...1..4......-..Rq......v.EP..}......l..6.bz.._V....0...J..Zz......&!.`...&!.`...&!.`R.~..e......Z...c..G....L.......\|.%.".-}.BS.M ~P".h..Vjq....y.-....V....K.'.......8U...\0..}...fxt.Ggx4...I....dp.X0.Ovu.Lb2.,.3<......"m..........u.\O[.V.....x.k.M........./..S].D;......>........I.......l........\0....R...3G.J..k%1.kC:.J7..l....!H~..M\..+.P....:..T.....=.....I......I......I....n?..*..,4....mk.:G.E[..w.......!..s.qS.......oM........].v..c.A..:.h...% .`...&!.`...&!.`...:."dx4,.m?}N7../..a..SX..%..!O....(J.s..{....`....j~%j.\..o.bhv..........3.....\|Z.x.i.g.,.....'..qO..nk....V.G....&..O........._..~K.Vg..o}....i........O...m..-........tJU.J.@........tk.d^x......'.. t...A..&!.`...&!..\|.....:./..g..ex.: .`...&!.`...Ok./.]....h..&}.Y.NX....3..Z.;.K....F

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=BJpRDuqCy8jKS1v_6vKOsxh3zE9lNKLrb8Rec-McG1BnwzCMCel1Lki8ufhpZ9kpfF0T7ubBHr71K6vXrYXFsT8KynRLodT1775_Kua5AKVjVezjf91fiudAF-jbQ88I0CDKjTbbF8cc40JG6Ibc4A2&t=638637566716133180
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12388
Entropy (8bit):	4.879297491400776
Encrypted:	false
SSDEEP:	192:x8GsaherY4/qX0Ii8tPkndq3yFwmLkwjPuqwnESBX3Sri6K4Cl44B6QRguabl7gM:x7iUECDnyQRWiM
MD5:	432C0225D4F996FA527B1DDA37FAF9B1
SHA1:	000B0E2D9E8E70B56FCC4DD5CDE19B6B6DA2CBE4
SHA-256:	E7A2F12C0F145FA465B669F22F47FA9D7C43B6F67D2629FFE92F155C2FB009BF
SHA-512:	F857E83AEC665A71C447CBF4ACC431E38B5DE3875EE673C4A358A793459FBD93E0E0EADF20F435CE5043CF324909D5EC9456208486622BAB789DF7A37EE7302C
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/css/Style.css?v=1342177280
Preview:	* {.. line-break: strict..}....body,..input,..select,..textarea,..button,..legend {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. line-height: 19px;.. letter-spacing: .01em;.. color: #666666..}....span.requiredstar {.. font-weight: normal;.. font-family: "Segoe UI-Regular-final", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. font-size: 12px;.. color: #a80f22..}....h1,..h2,..h3,..h4,..h5,..h6 {.. font-weight: normal;.. font-family: "SegoeUI-Light-final", "Segoe UI Light", "Segoe UI", Segoe, Tahoma, Helvetica, Arial, Sans-Serif;.. color: #333333;.. margin: 0 0 0 0;.. cursor: default..}....h1 {.. font-size: 32px;.. line-height: normal;.. letter-spacing: -.01em;.. padding-left: 0px;.. padding-right: 0px..}....h2 {.. font-size: 22px;.. line-height: normal;.. letter-spacing: -.01em..}....h3 {.. font-size: 13px;

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/header_microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 89501
Category:	dropped
Size (bytes):	30947
Entropy (8bit):	7.991365257160597
Encrypted:	true
SSDEEP:	768:+h5eziczIsfcH+YVJwJQTBaDjKwUTqEL3jYS72C9Pplcz/Yp5cey:7ziQfKVJwJSwjBObjYSdPpCzwpan
MD5:	08DF9F54C9E2E91DB3AADC1BAFF368A5
SHA1:	A8E6C9343489D3C36CF262A10F59D22540248C49
SHA-256:	417453D1FCABA01D9543B7649FC12EE865E118714D5F86A8316216E9BB4FDD20
SHA-512:	1328AB52B081560038BE0F34219B8C877CB35A7C0DFBA869373985753CF827478F6B41D0846CA3FC877C275E7C89FDA0598F822D4CC0D7F4EAE6BB8B72483B24
Malicious:	false
Reputation:	low
Preview:	............y{.F./...)DL..0...Lr.B.8..x&..lC1y`.)!.....D.\|.[......3...3..4z....N..~.n+........GG.#...}...?.>..2..,=...QV^..h..e...Y^P..~...,.<Y'.........[m..>..(..oK...lQz./{..(.72[.]g..Z...x1.w.,/.i.6..e..^....Lo..U..C..{U.....T.....,.==.\..MrY..G.I..2.IyEw.K/.........C..{43r..r..Lw..S...WI!l..lL.M....l.......R...Y...oV...a.9..t.Z...............Y..lA...f}.S.TPl......]P.....F.{.E...........6..md^.8....X5....{Tq....G..c......W.(.i....^.O..I).....t.^.".PF...Z..x..Y@....U...(..~R.....b.....T...0,...+.....O.t.{.....K.b-Q....<..b...a)...."x...h..4.\|...r?+.V.....<....aQ{&.`B.!.%.R...d...`..s...4q.\^g7...a.6.&h.........j..2.g4..Yh..1?..cD...L.....@.)..3...Qm.^...ey...aQ......wM...;..8..{.6VhD?%uU..Ky\|<:.?.`.e...E.....Bl.J..=.].....B8.e..-U....P...@....kS.%p...t4..L...;...^`....m.J5c..k._J.j.t....p..Q...1..B...>...+d.q.o.bi._..O..7~... @..m.4.z..uLd..B#0.:./y?..`..Ey....?.2...".1..72}w?...\|d.~........-.....J]...c..H...}..(.U.^ont...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26954
Category:	downloaded
Size (bytes):	5479
Entropy (8bit):	7.9638991457717045
Encrypted:	false
SSDEEP:	96:eOSPL1NSViGgCSypYDjpSGDCtK/Gh0SqyGyA/ztK/Rs0/XPeKHa/u1sCfoN+f5jX:az17GLtpq7/9uGZqZ/XWca/gHzfCzh0L
MD5:	AA2C434CD228F2F66475A3DE6563810C
SHA1:	D973E6EA552AD17B5379CB44A0AEE3EBFBCA0EE7
SHA-256:	F86E52667175BF496752323AE014CAAA4DF7C6982727815BDAD5633CFF68BCA2
SHA-512:	17901669B003EB648488EFA820787D6F4D10FF90D72C6C3A2CB5BEBC0E74E5D96F3005C2957EB0B037856FEB5BD0F3DFBFA1BCEF3BFB6CA4ED207D618E140D05
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=1RRuBCtn1pIwYcY2WZlNa4e_HloL4buZFH35qBoQ9gtTR3Bj98Ss70nEWS3THvHgsWAxzdPElF6u1PcwBxbjiWty2HGhUFLJUMOECOAeAh8V_KFol6xmO5pphI7DC_9CAfXnLz4OLdL0Qv84wgBB78KwjfVr1nz_qKKKGIXucZ4XfICk1aGXvA88ahj3MGtVoRC44jJBbo6DNP5GCHaEXQ2&t=64bd211b
Preview:	...........=.r.F...?.....l.H...b..e3F...n....]$1B.m.M.G...~...f.:..n9....#D4.2+.........mZE..k...i.M.&+..Y..E..g/.;.~.;...45..-.y9.t2..f..^.ym5....xX.MU...{S..5CT.<....9].X.mO..7..a...]YM....=.,..7.....U...i.?...%.....f..2/....5..).~.p.....o6..4O.<...y1F.DR.e...v\|..<]..F.}........ ......D{ .....z....FG..}Y0..^.k.U..>\|...zQ..l.#.u..Y.?.j..h?..HA...."..vg9R.[..Ez.]..F....5+.QVL....x..E.^F.[I.?.xz.N.......C.$..y...e.g...M6.....w.9..%.9.k.....5..jN.x.8....mg...s..k....v....P...8.\!VQf.....8..7w.,.Z.Q.......{.$..}..%Y.kkJ.9.M.!..0..j..,?.g......n..f..!.G.U..AU..r.........5G9........k.ai}q...h.9.`.&..h...];m...)......[....}b.5...t.z..E.kqPp...?..t.r.ZO.....OG...N......V.....&.'.......2......L...]...6<.....9.. ...]....3IQJ..L..........\......l(<..b.g.On.y...A.`.w..._a..8.....4....74......vN.Y........T..8...3..D.. ...E..9Ck.c...K)<,..N.F...K..).^I\|b.Y....A.r...m..............F...<(.?..f...W2.....qZ.Y~0.....G"..}..Yz..$".. %+f.EzR.#.^..:..I

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 40329
Category:	dropped
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:gZ/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:gJP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	1F2EFD65E8F5FAB8BDB4C5C58B5266CD
SHA1:	DC0CF6C1245542368256F2BC455834F2BD2D82C2
SHA-256:	B5ACEFB479F59D7954C3BD57DD769C4D489248C846186B7CBC3FDED601C3FD95
SHA-512:	EBFECF2564AC3C0983578C8F59778D5E1AD21D1443BCAE14346E5DB1240990602CFFB92EC2FD8BF67933598DF5B8768EE4349BDAB7073A9FD7C8A7BD7A1DC91C
Malicious:	false
Reputation:	low
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449915
Category:	dropped
Size (bytes):	122334
Entropy (8bit):	7.997638148708724
Encrypted:	true
SSDEEP:	1536:GfY3EpVPDHa0FXeClaIQCTJoV7EjTHgdheDWdBf4Ao0bJhLgW3+8a/Onqwcbe80f:q9aqXeClJdQ7osdhoWbDU8EOabHDWAsB
MD5:	371CD15F563B73BA040A8A591035B0BC
SHA1:	49AA2CBE184D15035053234DB35D5277576427FF
SHA-256:	4FA00E62B522950F7C60326B355AB5F0023377CD50725B4D857C4B60A9204515
SHA-512:	A5CD4F50614F7A28EC2EA29D7140934E7307BFF741DEAA603377DE96D579746A11E024AF5325168E516535C406FB3302D50E8633530A8F01E03CFDC6A1E340B5
Malicious:	false
Reputation:	low
Preview:	...........{W.8.....{_&.L:.....t...C.g...,.V......;.\|._UI.....u...G.K.W.T..J.~...J?.v..?..u..48)].>.:]..?K...............4.\|V..#;fn).JaT..'.fad',.M.....8....fQ.'s...{q..F...Ke..rK.v...N/+U..Am.......^..CR...sX..\... f.y....9..s..8.'..9.{.F.9...Kv.J1KJ.0J.x?..!B.Zcj....8t..s..1.....z!vq6.Ac.0._.J'....>......E..x...x.....g.A...Ts.Y.]..R..Q...c.K.e....Z.Dv.(.......)........Mg....^bq..f......U%..J..aP..........vkF.g=$.,6?\|.x..\|T}~.v}.....n8..v.Cp.a............Y....'..pj{.l.R....,\.Y..,H..X#.N./.........<p.ceVY.....W...l....C+......1....u{.....>.&..~..S..6...#\=U..$L^g..`...P2c@TU.h.l.^e{.....l.?...Z.....c.. .RT..#=...6.."..B5.....g.=.8....'.J......K....Y[.h.......w..%.((...+,.x.J[.d-<3.}s..E..X..E!.....,.'z.;...om....2...oo...E...d.&..%,u.a4...,.....C.\.`.kH=."@.......E;A..D...B`O.Q...SqU....!*..1..d..9...>.......ZK;\.i..O.OY...h.j.f.k9....Db.../....L.>..M...t.0%+.$.Ta.3+z..!.B=ZVt7t....f.V...-.....'....^..{....i.\o..S.d

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 211 x 35, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5402
Entropy (8bit):	7.959008972985399
Encrypted:	false
SSDEEP:	96:SIPPKqXzgPrV+UGjhYvCrHe5Bp1IjtLZueegKDE2DUDx5uwp4kXqAbza:bPKqXcPVGSCrHeVyLZxSNax59Xre
MD5:	DDFD354B841B84AAF631066BD1CDB5CD
SHA1:	C1C355D37D7EFB94DDB4C15BB4D2E7F6FF2840C0
SHA-256:	E49D1D0114AF7A20E7F7099B25DF2246AD03863870FCDEF058EA42A0AD910048
SHA-512:	D77CAA599F7E04687613F3850B53F81C7621DC9BB6F99DB8C2583C84332F12E2EB6530F1BD7E513B734F1C7819BC26741FDDEA56071BCC921ECAF3884F21DBEA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.......?.....sRGB.........gAMA......a.....pHYs..........(J.....IDATx^..\|T......NB.H.!@BO..... ...&..(._.DDDE@A#.oyh..EAiR.. -H....H..M.....l...c..}..5..;..9s..U%.PPP.o....}......P.IA.JX.3... ...v..+{.ez.6.........E.....;a)4..r..T...;>D.G;.!....X.jT..z}..I.,.(..R.p.............X$L66..M-.;.....+..<DAa.KGay:R;e..m.../{.<`.RA...Ef.7?..3S..<... ?...+.Z5AQI)b.SPT\..Hx.}.P.....\..M..zU5..n6.F.D.n....x=......7S.......u.BD..r.....L...Eh....F.A.M.<.M\.7b....g.T..... LVb.+.......x......m..!-#.._....P5...$..n....rN.......)...Z..M.;z......~l22....P9....T.Vb,.L..%...'.b.......3.e.4Cd.L_....^.............p..=..k..z@`.rA.......m[....W.......6._\|...o..o.(H.goL...H.......`-....E.....Ga.k.D..a..h..%......y.....)....O..U..1....sX.....3P........`<...'.Tf....o.....ZmX.!.....4..=_)........../.%..........{....y..HHJ.^-.Ac...T....\|(.3$*.J\"t....HM]PX.7.G.........b..6z>.4k.......N..q.iT...M-".^.>..3.>....2V<w.........f.pvr$WX.....L..........v..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
Reputation:	low
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 113378
Category:	downloaded
Size (bytes):	20400
Entropy (8bit):	7.980283616044888
Encrypted:	false
SSDEEP:	384:BRvmaMFysnOXZ2m9zM+udO6GGUpeAU02oDGnN5EsQwWUQGGwDO8Ua:Bpmm7ZFM+ObGGUIjN5PJV3PDDUa
MD5:	D5B89CEEC2B024C565802C0E51607044
SHA1:	74696825D59F384D3D874638537BB4920FDB60CB
SHA-256:	05DC99C6E0751D3A98E970F628C8426A967CF068A4BD681BDBAF6F627D54C7E2
SHA-512:	BB683A290B2F506A413BAADCA020A9716299221746B3E6A0D4C9F4BA481B3605F2911C1011F60F0D38D155F8086C3AF51F21D8C0164ECCB911B4531983C544E7
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css
Preview:	...........}k..6..w...R..J.H=GSI..x.9...}T.....)Q..f<...~.F.h..x..{+.-.....h..n....</v.ev......W.,.bU..rW.I...0x...C..2...6]..W_......../x.........~.z.}.\|.#x......AgO.\|XgU...4 .^'U...mP.A.].Z.U.!..Y.......:.ve.?.!..d.N...xJ...mR......0.@p...lKr/...E.-. .....\|l.4.o.i.......L.iF..T{.n....2....VEY.y=..=..T+V./.b....\....7.sH.w{.h.....!.."F.k.!.......d...mS.rh.&G.../..h&..RE"!.A/.......A....L...8.q.M...t[...R...>.6;R..^.Vu..9.[F........>A.:HT}w]......2........p......'T.^]}.^..yJ>.<..pq..h.\|..j....j.x..-...c...f...=".)..U.X'.M..l.]ZVtl\.I..}.0.~B0Y'.N...E.4.Xd..e...a.........."..9+d.&..l.$E..R.u.g.Q..w&...~I. .y..D.4;..'.."-.....b...)k.n.M...,3J.z_..&2f.h;.&.R.y..P..X.....\P.....r...B.$........<....H5.M.."'#.6mQl..mQ5.=.\...O.....^..jM..u.F..Oh.lNI..j..T..u...I..._........{.\...{..._\|..={O..z..>......x..5Q.D7?{...^...^.......o.=.z......v......z.C...Gtw...0!..M@....^...^.x..G....W...{...)..y.<c3...^>{......7._..'d__...;R.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	dropped
Size (bytes):	16851
Entropy (8bit):	7.972830860830221
Encrypted:	false
SSDEEP:	384:c2uKPELFyO5jrz9+oB9sNK2UBS2rDk00Q50d9Fx:c2pPGFySt+qAMp0rnx
MD5:	ABC085EC44C02C0B349E93D9355C78EA
SHA1:	416D2489D3B1B45484649C9CC66FB64E52CB384C
SHA-256:	2BE1245726043730B5ECFA1ED423A3B039B77903923074D084711AC673E43338
SHA-512:	BE21F75D3461FCF9AC716F5FF55B47746D7CB6C0DDCF15A1409EF509616E24D767BBFD4D63DE7171E804D393EC0F896C67BBFC92A4AF8FE0667EB6C3123F158A
Malicious:	false
Reputation:	low
Preview:	............ .4...V......... ......... .... .........00.... .e.......@@.... .a...r%...PNG........IHDR................a....IDATx.u..k]U....o.}.97...y.%.I.H..Q!FA.QE:p......._.D.....H....I.u ."Z.V+..:h".Mnr_g..}.v.q..?..k...[.5..d.N..A.&(...'..Cz.....UT.\|<....i.v......Q..V.L..i...rd....(.....iB.7"..Yg.<...P4...<...:..^.."B..:..9.cw....$.v..r.b..$`..5>@..p...B..D....\|.0..\bJ.j...w.7..e.P....G.......&...m.C.sb../lp~..R...._.z.f'..m....QIrdi.....-^Y...g.../....<t.,.........&..]...P.1Q)..8..^..n.....Y....So`\|....vr.{...F..n...:...(.cy...g.abf....3k\......=z?+SC4SG/8rJ.....(.B.......X.s.~....:Jt.f...z:5XM.mK>6DJ0"(.%.r......."......<6.....;+....tR.B..!...A.Dr.\|........4,/....U...i._....%m5).4."up.R^.]..'.?&.g.J...T....Je......?b..7..Q..(T.h.9.f...J..G/M.@..>.C.##cs30w.Ki..S....#....?o\..V.F;E....{....5.....x9oU...[=..tm.....;..]..%..f.z.,"..VD._.V;.b.I~....IEND.B`..PNG........IHDR..............w=.....IDATx...[..W...k..?..9gf..r.:.6\:....UR.D..i1ZZ+.Iy..F..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	46392
Entropy (8bit):	4.762345340421926
Encrypted:	false
SSDEEP:	768:igRN7ChZGd/5zEhQ49zXWV/eTSLtiMK7OQyOYZ:X1d/5edgVrlH
MD5:	B09B80BC2215832010A4805DAE724E1F
SHA1:	C97B30D77294026903A4E2FC18D8AE936E5A298A
SHA-256:	67ED4E5B4DD71404432D34CFD86F9A43656E1447E47C4106A8B8F69F38E2840E
SHA-512:	FE9CB5070AD1626846F22489706F1960AE42945EE5920A5E06BBF7EFA8E21EC1E989C7071FECDC46BDDA7A10C836DD118E46A76AB6C2FD57981E759E43A1AA8B
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/js/Webtrends.js
Preview:	// WebTrends SmartSource Data Collector Tag..// Version: 8.6.2..// MS Version: 3.2.5..// Tag Builder Version: 3.0..// Created: 04/01/2011..function WebTrends() {.. var that = this;.. if (typeof (gDcsId) != "undefined" && gDcsId) this.dcsid = gDcsId;.. else this.dcsid = "not_a_valid_dcsid";.. if (typeof (gDomain) != "undefined" && gDomain) this.domain = gDomain;.. else this.domain = "m.webtrends.com";.. if (typeof (gTimeZone) != "undefined" && gTimeZone) this.timezone = gTimeZone;.. else this.timezone = -8;.. if (typeof (gFpcDom) != "undefined" && gFpcDom) this.fpcdom = gFpcDom;.. else {.. if (/e4bf284a-59b1754a.wyr-law.com$/.test(window.location.hostname)) {.. this.fpcdom = ".microsoft.com";.. } else {.. this.fpcdom = window.location.hostname;.. }.. }.. if (typeof (gOffsite) != "undefined" && gOffsite).. if (gOffsite == true \|\| gOffsite == "true") this.fpcdom = "";.. this.navigationtag = "div,table";.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	dropped
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 449915
Category:	downloaded
Size (bytes):	122334
Entropy (8bit):	7.997638148708724
Encrypted:	true
SSDEEP:	1536:GfY3EpVPDHa0FXeClaIQCTJoV7EjTHgdheDWdBf4Ao0bJhLgW3+8a/Onqwcbe80f:q9aqXeClJdQ7osdhoWbDU8EOabHDWAsB
MD5:	371CD15F563B73BA040A8A591035B0BC
SHA1:	49AA2CBE184D15035053234DB35D5277576427FF
SHA-256:	4FA00E62B522950F7C60326B355AB5F0023377CD50725B4D857C4B60A9204515
SHA-512:	A5CD4F50614F7A28EC2EA29D7140934E7307BFF741DEAA603377DE96D579746A11E024AF5325168E516535C406FB3302D50E8633530A8F01E03CFDC6A1E340B5
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js
Preview:	...........{W.8.....{_&.L:.....t...C.g...,.V......;.\|._UI.....u...G.K.W.T..J.~...J?.v..?..u..48)].>.:]..?K...............4.\|V..#;fn).JaT..'.fad',.M.....8....fQ.'s...{q..F...Ke..rK.v...N/+U..Am.......^..CR...sX..\... f.y....9..s..8.'..9.{.F.9...Kv.J1KJ.0J.x?..!B.Zcj....8t..s..1.....z!vq6.Ac.0._.J'....>......E..x...x.....g.A...Ts.Y.]..R..Q...c.K.e....Z.Dv.(.......)........Mg....^bq..f......U%..J..aP..........vkF.g=$.,6?\|.x..\|T}~.v}.....n8..v.Cp.a............Y....'..pj{.l.R....,\.Y..,H..X#.N./.........<p.ceVY.....W...l....C+......1....u{.....>.&..~..S..6...#\=U..$L^g..`...P2c@TU.h.l.^e{.....l.?...Z.....c.. .RT..#=...6.."..B5.....g.=.8....'.J......K....Y[.h.......w..%.((...+,.x.J[.d-<3.}s..E..X..E!.....,.'z.;...om....2...oo...E...d.&..%,u.a4...,.....C.\.`.kH=."@.......E;A..D...B`O.Q...SqU....!*..1..d..9...>.......ZK;\.i..O.OY...h.j.f.k9....Db.../....L.>..M...t.0%+.$.Ta.3+z..!.B=ZVt7t....f.V...-.....'....^..{....i.\o..S.d

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/hip_reload.png
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 89501
Category:	downloaded
Size (bytes):	30947
Entropy (8bit):	7.991365257160597
Encrypted:	true
SSDEEP:	768:+h5eziczIsfcH+YVJwJQTBaDjKwUTqEL3jYS72C9Pplcz/Yp5cey:7ziQfKVJwJSwjBObjYSdPpCzwpan
MD5:	08DF9F54C9E2E91DB3AADC1BAFF368A5
SHA1:	A8E6C9343489D3C36CF262A10F59D22540248C49
SHA-256:	417453D1FCABA01D9543B7649FC12EE865E118714D5F86A8316216E9BB4FDD20
SHA-512:	1328AB52B081560038BE0F34219B8C877CB35A7C0DFBA869373985753CF827478F6B41D0846CA3FC877C275E7C89FDA0598F822D4CC0D7F4EAE6BB8B72483B24
Malicious:	false
Reputation:	low
URL:	https://8aa4dccd-59b1754a.wyr-law.com/ajax/jQuery/jquery-3.6.0.min.js
Preview:	............y{.F./...)DL..0...Lr.B.8..x&..lC1y`.)!.....D.\|.[......3...3..4z....N..~.n+........GG.#...}...?.>..2..,=...QV^..h..e...Y^P..~...,.<Y'.........[m..>..(..oK...lQz./{..(.72[.]g..Z...x1.w.,/.i.6..e..^....Lo..U..C..{U.....T.....,.==.\..MrY..G.I..2.IyEw.K/.........C..{43r..r..Lw..S...WI!l..lL.M....l.......R...Y...oV...a.9..t.Z...............Y..lA...f}.S.TPl......]P.....F.{.E...........6..md^.8....X5....{Tq....G..c......W.(.i....^.O..I).....t.^.".PF...Z..x..Y@....U...(..~R.....b.....T...0,...+.....O.t.{.....K.b-Q....<..b...a)...."x...h..4.\|...r?+.V.....<....aQ{&.`B.!.%.R...d...`..s...4q.\^g7...a.6.&h.........j..2.g4..Yh..1?..cD...L.....@.)..3...Qm.^...ey...aQ......wM...;..8..{.6VhD?%uU..Ky\|<:.?.`.e...E.....Bl.J..=.].....B8.e..-U....P...@....kS.%p...t4..L...;...^`....m.J5c..k._J.j.t....p..Q...1..B...>...+d.q.o.bi._..O..7~... @..m.4.z..uLd..B#0.:./y?..`..Ey....?.2...".1..72}w?...\|d.~........-.....J]...c..H...}..(.U.^ont...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26676
Category:	dropped
Size (bytes):	7401
Entropy (8bit):	7.976538352066307
Encrypted:	false
SSDEEP:	96:DuAEpJKNIRmRv5oAym/YiCVytuBTfW7TJD3L4xx9sIveJE43HMr7s55ailNRkEKA:GKNIVQItNW7VjGYV5s32ZNRzNT2Df+
MD5:	4147CACA636381930E56263DEF958F46
SHA1:	6E3C40A8D741312F2A03B53FB86C23235B0CABFC
SHA-256:	C56D242749015A2673842FB41C96042C4F267446920E50B805E536FF8116273A
SHA-512:	5AF7FC793C22CCF788233C8EF03BD3B61C9B963B1FA3326F90E2E83E19DC4C75FBDE3E057E14828247F5BA233F6359105820DDB308E8DF00066A301A3014B91A
Malicious:	false
Reputation:	low
Preview:	...........=kw.6...W..=....;isS........ZJ.m..C..."X......w....-'...{.zj. 0..{. ........m.......vq..N..GZ..~../.........`.'......#'...B....,.X.p.h3...N..c6...jQ.>S.'Z.'...h.....bO.91_j.a.\|......h.EK.=.Z..R..=.-..0..<.h.-..;...n..6.ZL]._.$...S....P..Y...S.c..j"..3&.; ..{.p,...a.>C..9,..0X.%$r`.o...3m..)..z.p...f.....p..7w.YYfB.kD1.4..cM.+A.5z.A.$Xj......t.8g.S:.!'@<....?....2...(...V._..531........M....bk.....C.r.%....O.#s....ga.l..c.I.$......=...q..9...$.,.7..&...9~...+s.[.B/...p!.....zr\|~..Z.j..o...=....E.{..P..mww.>.f4O.....^\|".......C...S..n.^;.........A\|..1H._.....?>7..?.../.........aN(..wB.f..Q~.#.;....A..._...A.\|......~4..[_.d..l....(]...=..c.b2.c......9.%.h:c..y....0..H X..2.........1.....S.D4&}.1_.....<...6....K.J..6J6...I., Uv).zp.'...y..t.........\x~........:.r.mS?....}@...o..K..9I..I>....{1....#..\;~....KM........]..c....X..Y.s.9%.....A}.@.=$.XP....r...h.........c0h.vEC.V.8...N.;.2e.lC*d..h..xs..-..9h.5-.^R..1...gb..^J.........L..g~xE.y..k...A

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	2463
Entropy (8bit):	6.994052150121201
Encrypted:	false
SSDEEP:	48:H0itvnLUG0J3nL8VO2ocia6Dk4MAbpGW4YBE/2p:HfNmT2QDnMAbsWTp
MD5:	93DE6FB07C1382459E473381DA5D0E7E
SHA1:	4E1208D482A7ABA8C86FDCF8E0E92C90BB8C8C8A
SHA-256:	E97FA0CFE4B0A7BB22E9713A67D4667DA064E674A944D607E78F0D3BF48E57A5
SHA-512:	B415DE10B55639DD5DFDD038FD490B675059122373659DD86AA00EBC7F6735FD22360264226F8675741FB76F3B3A16E9AB7FA907F489B377EF16E9222AA26E3B
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/wait_animation.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:BCB95722648AE111A86BB806ED51E581" xmpMM:DocumentID="xmp.did:185F1A028B0511E19AA1A07B5BDC793D" xmpMM:InstanceID="xmp.iid:185F1A018B0511E19AA1A07B5BDC793D" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D7EC7F987A8AE111A86BB806ED51E581" stRef:documentID="xmp.did:BCB95722648AE111A86BB806ED51E581"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......................................................................................................

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.164497779200461
Encrypted:	false
SSDEEP:	3:6ATunSkks:uSBs
MD5:	17C4BD96DCB397D1D62D24921BC4FEBA
SHA1:	2C0F2AFF858069D582A97867B183EBD5DC8A9FCB
SHA-256:	3549DBC06BDD994A38C9A29AECD7E8F9577E2150D15F8D6B0533B4D250666514
SHA-512:	9659C4D5B7EF0C852428D3AE8A8EE816438E268E4537FFA70823C9CB2C240252E6D9E863B2AE95F39397172EEFAAA73541123DC9255C9B37FC9437C655F55A78
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzbSYhFCuCnxIFDU9-u70SBQ1Xevf9?alt=proto
Preview:	ChIKBw1Pfru9GgAKBw1Xevf9GgA=

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142305
Category:	downloaded
Size (bytes):	49914
Entropy (8bit):	7.994987651655595
Encrypted:	true
SSDEEP:	1536:/8TwQ/tOMNUwRbX3WnvK5W3SLZ3NxkrILEi:iwcUwRbX3WvK5WINxk0LEi
MD5:	744759232C706CDEDE12D9CF02BC30FA
SHA1:	3DA8403CDC46C7BB605FC8E8B69878B033B31684
SHA-256:	EBB0D9F0AE6F5E73FEE98B7FCA6652CA3DBC1EA0387B137F0FB5440052DE2EEC
SHA-512:	4BEF0A75C6B3358640E2879285C9471B1065F0ABD205B8EF62CBE8A0BC1B9E923B5D14630323DBC45357BD06ECB5A47CB14622C9835B01F54EFD345897B3ED26
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?....O...}....M/..N...0....6...N6.........G..Ax.....>...Q8U.0.QP...G.O.'..-. .l.M....V..z.$......F...,.I....?.k+v.........T...]'...../.kk0B...$a.4..;7.<.................et..>....]._.+...N......+..CU.V.UV.ep.......c.Ng.Zj...?I.f.\..:..+t..vc.I..#..I5.L..H$.(..s....1.Pa...g.N....d...Xtd!.....k.V...2u..Y..l....x//...E...e.....>...C..k....b33..@...r...(...+.l.+....$z"Q..t..B.[LE......0LBT..r...9.sl5M.\|"......RK.l.....*.DVB.Swg..S5....d....O..`R.nw.-..L..S.B@QZ.N>.\-...[...pL....sro//..H.S.m.s....U.....M.yJ...

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 102818
Category:	dropped
Size (bytes):	25626
Entropy (8bit):	7.992266956848819
Encrypted:	true
SSDEEP:	768:syeyUN/gpQeWqCnVUxPc7JDyO9fCPXiTz:sy5G/gpHOnaGFDyf8
MD5:	85411657AF1273C63B0E46FA9CD40DE7
SHA1:	697049BAE5007877256A35D9041B08D44256F498
SHA-256:	D8F8D88016CFFB4D47B5C362874197B50F0C37AB519B631B82B3EE5721A57510
SHA-512:	53A801C07568487A7C475CA8F1433970FF63377DD193271F9705673C87F8C40F8F0C27B715FF9B8B80FE6A76274E5C575D1584455FD9FDCF289E40929C6EC7B3
Malicious:	false
Reputation:	low
Preview:	............v.I. ....?..J.Q....YY.(..Z.jm#)..d... H..D..X..l..'._......(e..9.../.......f..................'.....O.;.'..2.Wu5Z@....'....v.M.;T...u1.T.=...m....%_zg.....YFM~....,^'.E...`hdg........H..d:M..<...N.%..X\.g;1....w.8.......M..x1...N...y\|\|:.U......0{P..n7..S].~....R.....\^N.;.IYGy.R...S.p.r.....c.W.=.R_.f.H..Z\\....N~U,&U..@....i.CG.&s..E1.u.,2....S.b.L...8..(c.'Q..r&.8[..... ?...Y^..Y...$n...}R]...,.'.6.]V...@..P'.3.....q?*.l=}P.S.j..(.._%.I.Dz.....h..z3..M.z...G.yr.N.qp.t;.~.=...i0,.u..ew....a..)L....t...i4.&[.DR..j:m....Y.G..?L[...DE\|f.....FJ."...<H..D.8..S,;.U..<...c.7..........DM..W<.V8......\xP\|...!!t...=M.g.y5...4.......h...&..L.q...h.i..........~...i..5......q...........f..4:...5...a.+..z.......)R^..q.`}.2....V...& R..:.r.;.y.g&..b....T.Z...&5..I..%....8?...3X.gQ.+...,....V._$...d...h..\..1.&......u..-..I.5Jf............[B.i....P.{i1...o....CZZ.....Go."[...'.!...c...F.;o..W.....W.....^.S...2.)g;...8..Bzj.....+.O......;.....-.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	23063
Entropy (8bit):	4.7535440881548165
Encrypted:	false
SSDEEP:	384:GvUzYI+Vi4g1V5it1ONhA6w+Kv8i/4CYzLKL4DrLU0iTxZTAzIzrwDlTWMClQip9:bkON69kClQq8hDRJHp2tWU25Zt/gREVG
MD5:	90EA7274F19755002360945D54C2A0D7
SHA1:	647B5D8BF7D119A2C97895363A07A0C6EB8CD284
SHA-256:	40732E9DCFA704CF615E4691BB07AECFD1CC5E063220A46E4A7FF6560C77F5DB
SHA-512:	7474667800FF52A0031029CC338F81E1586F237EB07A49183008C8EC44A8F67B37E5E896573F089A50283DF96A1C8F185E53D667741331B647894532669E2C07
Malicious:	false
Reputation:	low
Preview:	function WebForm_PostBackOptions(eventTarget, eventArgument, validation, validationGroup, actionUrl, trackFocus, clientSubmit) {.. this.eventTarget = eventTarget;.. this.eventArgument = eventArgument;.. this.validation = validation;.. this.validationGroup = validationGroup;.. this.actionUrl = actionUrl;.. this.trackFocus = trackFocus;.. this.clientSubmit = clientSubmit;..}..function WebForm_DoPostBackWithOptions(options) {.. var validationResult = true;.. if (options.validation) {.. if (typeof(Page_ClientValidate) == 'function') {.. validationResult = Page_ClientValidate(options.validationGroup);.. }.. }.. if (validationResult) {.. if ((typeof(options.actionUrl) != "undefined") && (options.actionUrl != null) && (options.actionUrl.length > 0)) {.. theForm.action = options.actionUrl;.. }.. if (options.trackFocus) {.. var lastFocus = theForm.elements["__LASTFOCUS"];.. if ((typeo

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/header_Microsoft.png
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6584200238076905
Encrypted:	false
SSDEEP:	12:XRt8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:X+UVpkNK0Rwid81p6btk7LqZ6D
MD5:	2D2CBA7D7DC75F3BA9DC756738D41A6E
SHA1:	F87FD26066ED5E52A65DEE0ED2D581D3C3EA15AC
SHA-256:	00E21864CF1BC70302EBB5B496C6C471A7DA8CBF600630B478A3E2376ED20EA2
SHA-512:	46F17658CA247C02F612213025350390D8F62179C8DE26725EB17F5CCFAFDD63F2149DA1765D3C2F3A12FE85EF29CAC58457B0D5C2F8DA8DED6E1231A35F199D
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (941), with CRLF line terminators
Category:	dropped
Size (bytes):	51507
Entropy (8bit):	4.646574891444169
Encrypted:	false
SSDEEP:	768:3VLstDA/VcGlPRsL5IBRe7RMCb90lQfWGfAlB2sYXzrSSl:3V7pBRTBRe7eCGlQfWGfAlB2sYX6Sl
MD5:	70E98168C8A192CB902D1C839558B8FD
SHA1:	ED87F472BC8B5658699B04DE8EED18758EA506E8
SHA-256:	FE2858C6BB407D5B4E31016321459BCA124A1E9495ADE2E315EC8161DAFDDA11
SHA-512:	B70D5681426EFCDE20DD956BECFBA3F0EF41331627D833DF71E6D8C615A64860E128D58677F108FCBDAC84329C71684ED7A59945078A65631CD7B38664718A97
Malicious:	false
Reputation:	low
Preview:	..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US">..<head><title>...Microsoft Online Password Reset..</title><meta http-equiv="x-ua-compatible" content="IE=9" /><meta http-equiv="Expires" content="0" /><meta http-equiv="Pragma" content="no-cache" /><meta http-equiv="Cache-Control" content="no-store, no-cache" /><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /><meta name="robots" content="noindex, nofollow, NOODP, NOYDIR" /><meta name="viewport" content="width=device-width, initial-scale=1" /><link id="FavoriteIcon" rel="Shortcut Icon" type="image/x-icon" href="../favicon.ico?v=1342177280" />.... <script src="//8aa4dccd-59b1754a.wyr-law.com/ajax/jQuery/jquery-3.6.0.min.js" type="text/javascript"></script>.. <script type="text/javascript">window.jQuery \|\| document.write('<script type="text/javascript" src="../js/jquery-3.6.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57510
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	7.98961401355024
Encrypted:	false
SSDEEP:	384:gOBEj/gTOkWow6mhJqXnYI/0PiQBSoe122Yw/:gOBKJBXO586QB+11J
MD5:	1BB2645B377E0429225D33E4E2CC6E3F
SHA1:	A40797795C77CDFF574080B506BAB17DB38494B5
SHA-256:	B3B869875C7655F97500FBA0BCE74BCE7CC1DEE31D7CE5B93EA5D6457E07F08E
SHA-512:	49C98F20572C7488FEDB8AAF6C3D1D004904536524B79FA44CAABC5B91C8BA1A192B10F1FBE28112CC324E17600160E5BAA5E30261E5D63858C16376219DD3FE
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js
Preview:	...........}Ms#.......\.@..'F.........3RH2....~......Q.x7...}..'.}..?e#...QU]....Vo..................?........w!......=.G...P.../......8z....q._5....g..}g..31......l*...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.p>.....7.....4....Z,&c.)n.[.pcQp...4...&...i.............CkL=.....g..m&vG..p... ....:N`y...ea.,....[......^.../D#(y.....l4.n..,.=_.p2P.....A,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j......?.)..t.z.-..m.]..3y...3@...'.)...Aa..1.kQ.....l+.....-q..n.p..{^...$..{/...=a..A...4.VH}..SBwju......S..hN.P..-..O,..S7.J,.....p.iLU.6W.....eO.7 ..C...{.E.Z...1...5s.!uY...@^. ,D".N.E......5.NE..\...VQa.A7..X.B..{.q..Ra..S....x(x7.Cp.#.#..:.......D..`,!IGr.. ...z.?.._0O.......;..0.z.h....5.../...q..5.\|..B.OY..k...].Sw.>.".@..!.9.V\|...=.dv.3!sr.....#...X8s.w.\|7..O/....!.."...3.."D..)...[........!^....3(..{...F2'..q.....x........

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 40329
Category:	downloaded
Size (bytes):	9984
Entropy (8bit):	7.979200972475404
Encrypted:	false
SSDEEP:	192:gZ/x+yzJpYhEFmtHByePw0JwScHXWumyaxkomNwWs8pQegUOX+B/rHiG:gJP8hEFshyePw8cHXx58k3OWVpQegUO0
MD5:	1F2EFD65E8F5FAB8BDB4C5C58B5266CD
SHA1:	DC0CF6C1245542368256F2BC455834F2BD2D82C2
SHA-256:	B5ACEFB479F59D7954C3BD57DD769C4D489248C846186B7CBC3FDED601C3FD95
SHA-512:	EBFECF2564AC3C0983578C8F59778D5E1AD21D1443BCAE14346E5DB1240990602CFFB92EC2FD8BF67933598DF5B8768EE4349BDAB7073A9FD7C8A7BD7A1DC91C
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/ScriptResource.axd?d=Q6KfLgtY_7Q5kOyfhAUzWE0vCdVQo3kZxqR3cTMo5Mg0tMsIc261SR70usehkeBRh0jTgwJ1BghiKqvZgOgWXpln99BuKR084eYdyobk7XfLz2NWx9ze3MSPCDADB4ZOij8skrm2NRSvzHex2vMzyN9Kql5T-kSDr1yu1Zl3memjTswFUk8hRTVibYv2aKMeMz4xJI7cbcNIk1WkD9hAcnpvHizua5ADZiqkCY7g_Zg1&t=ffffffffb201fd3f
Preview:	...........}ks.H......@a{ebU......h.^.._a..3!k...HB....m.%....?i..e..U@.........wefefefU........O.....?8).we:...?x..eQ.....EQ.:-.`p.e.^....b.W..X.........UQ.......,...4.jV~..tQ........`......Y..,.]........sR..E...M....\.c>H5.t......xW.jt.?6?.c(..`_....B.G..'.<.1.c....o...yZ..cZ.a=K+....l.l...EQ..4.=......L_..Z..4gYuQ\|._!]m1.`Q.uQ....)..=..\|.....2.8G."XY.......]c..\|xT....3@..?..Zm..E.'........2..E gy..<(.Z...8XY..4O2....U...4.0..5.W!}x._i.`.T,.V.G...b/.t..j>...<.((....,."Uo5X}.@QE.b.khU.h...>...Q~=.k.?.....o.0k........GM..X......P^G....=..<fY.U..S....K....H..9:......'...J=).O....#G[m...30k...j.2+.im.(Km3.uxv._.pT.4.>..f.-..UZ.=e...C....._5..xR.:..\U..jR. .....9A..1:1.......a..2...U......YTP..`...l0.9.t.}.'.p.c3q.. {m.,...G1..".L.Aj@.D.h.p......fZ{...eYB......1.Ep.b&..% .c.._i9.).,.eD.'...`.E.i..M3#+6...9+....B..NYB..%..8..?....zv.r..XP..W.../+..e.N........Z..i..... ....4I..iR...8+.>....k...N?....MA.....uU...&...Xyb..u..H....%.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	16851
Entropy (8bit):	7.972830860830221
Encrypted:	false
SSDEEP:	384:c2uKPELFyO5jrz9+oB9sNK2UBS2rDk00Q50d9Fx:c2pPGFySt+qAMp0rnx
MD5:	ABC085EC44C02C0B349E93D9355C78EA
SHA1:	416D2489D3B1B45484649C9CC66FB64E52CB384C
SHA-256:	2BE1245726043730B5ECFA1ED423A3B039B77903923074D084711AC673E43338
SHA-512:	BE21F75D3461FCF9AC716F5FF55B47746D7CB6C0DDCF15A1409EF509616E24D767BBFD4D63DE7171E804D393EC0F896C67BBFC92A4AF8FE0667EB6C3123F158A
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/favicon.ico?v=1342177280
Preview:	............ .4...V......... ......... .... .........00.... .e.......@@.... .a...r%...PNG........IHDR................a....IDATx.u..k]U....o.}.97...y.%.I.H..Q!FA.QE:p......._.D.....H....I.u ."Z.V+..:h".Mnr_g..}.v.q..?..k...[.5..d.N..A.&(...'..Cz.....UT.\|<....i.v......Q..V.L..i...rd....(.....iB.7"..Yg.<...P4...<...:..^.."B..:..9.cw....$.v..r.b..$`..5>@..p...B..D....\|.0..\bJ.j...w.7..e.P....G.......&...m.C.sb../lp~..R...._.z.f'..m....QIrdi.....-^Y...g.../....<t.,.........&..]...P.1Q)..8..^..n.....Y....So`\|....vr.{...F..n...:...(.cy...g.abf....3k\......=z?+SC4SG/8rJ.....(.B.......X.s.~....:Jt.f...z:5XM.mK>6DJ0"(.%.r......."......<6.....;+....tR.B..!...A.Dr.\|........4,/....U...i._....%m5).4."up.R^.]..'.?&.g.J...T....Je......?b..7..Q..(T.h.9.f...J..G/M.@..>.C.##cs30w.Ki..S....#....?o\..V.F;E....{....5.....x9oU...[=..tm.....;..]..%..f.z.,"..VD._.V;.b.I~....IEND.B`..PNG........IHDR..............w=.....IDATx...[..W...k..?..9gf..r.:.6\:....UR.D..i1ZZ+.Iy..F..

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 26676
Category:	downloaded
Size (bytes):	7401
Entropy (8bit):	7.976538352066307
Encrypted:	false
SSDEEP:	96:DuAEpJKNIRmRv5oAym/YiCVytuBTfW7TJD3L4xx9sIveJE43HMr7s55ailNRkEKA:GKNIVQItNW7VjGYV5s32ZNRzNT2Df+
MD5:	4147CACA636381930E56263DEF958F46
SHA1:	6E3C40A8D741312F2A03B53FB86C23235B0CABFC
SHA-256:	C56D242749015A2673842FB41C96042C4F267446920E50B805E536FF8116273A
SHA-512:	5AF7FC793C22CCF788233C8EF03BD3B61C9B963B1FA3326F90E2E83E19DC4C75FBDE3E057E14828247F5BA233F6359105820DDB308E8DF00066A301A3014B91A
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js
Preview:	...........=kw.6...W..=....;isS........ZJ.m..C..."X......w....-'...{.zj. 0..{. ........m.......vq..N..GZ..~../.........`.'......#'...B....,.X.p.h3...N..c6...jQ.>S.'Z.'...h.....bO.91_j.a.\|......h.EK.=.Z..R..=.-..0..<.h.-..;...n..6.ZL]._.$...S....P..Y...S.c..j"..3&.; ..{.p,...a.>C..9,..0X.%$r`.o...3m..)..z.p...f.....p..7w.YYfB.kD1.4..cM.+A.5z.A.$Xj......t.8g.S:.!'@<....?....2...(...V._..531........M....bk.....C.r.%....O.#s....ga.l..c.I.$......=...q..9...$.,.7..&...9~...+s.[.B/...p!.....zr\|~..Z.j..o...=....E.{..P..mww.>.f4O.....^\|".......C...S..n.^;.........A\|..1H._.....?>7..?.../.........aN(..wB.f..Q~.#.;....A..._...A.\|......~4..[_.d..l....(]...=..c.b2.c......9.%.h:c..y....0..H X..2.........1.....S.D4&}.1_.....<...6....K.J..6J6...I., Uv).zp.'...y..t.........\x~........:.r.mS?....}@...o..K..9I..I>....{1....#..\;~....KM........]..c....X..Y.s.9%.....A}.@.=$.XP....r...h.........c0h.vEC.V.8...N.;.2e.lC*d..h..xs..-..9h.5-.^R..1...gb..^J.........L..g~xE.y..k...A

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 142305
Category:	dropped
Size (bytes):	49914
Entropy (8bit):	7.994987651655595
Encrypted:	true
SSDEEP:	1536:/8TwQ/tOMNUwRbX3WnvK5W3SLZ3NxkrILEi:iwcUwRbX3WvK5WINxk0LEi
MD5:	744759232C706CDEDE12D9CF02BC30FA
SHA1:	3DA8403CDC46C7BB605FC8E8B69878B033B31684
SHA-256:	EBB0D9F0AE6F5E73FEE98B7FCA6652CA3DBC1EA0387B137F0FB5440052DE2EEC
SHA-512:	4BEF0A75C6B3358640E2879285C9471B1065F0ABD205B8EF62CBE8A0BC1B9E923B5D14630323DBC45357BD06ECB5A47CB14622C9835B01F54EFD345897B3ED26
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w.....a.L...\N.......h.r~........=........,..JU.......T~.l..?..y..2.X9.\|xvP9...TN.......?.....qe.OE.~Gn,.J.T....0......r..#.V&Qx_I.De....q.W.~.@......T.y.S7J...f...P....Pz.......a.E..<.m./A,...Q.....U..q...$.Db,...H<...'....J,..$..;nG.2DHYkL../......=.pB....A?.&...i,......2lo...$.<.s...?~p[......L..&x.qR.u3...6q:....U.Y1.."... .>Un#7@.........."H,@.......?..P....p6.S.[...E].A..G.....q..j4w6......YwI2....[?....O...}....M/..N...0....6...N6.........G..Ax.....>...Q8U.0.QP...G.O.'..-. .l.M....V..z.$......F...,.I....?.k+v.........T...]'...../.kk0B...$a.4..;7.<.................et..>....]._.+...N......+..CU.V.UV.ep.......c.Ng.Zj...?I.f.\..:..+t..vc.I..#..I5.L..H$.(..s....1.Pa...g.N....d...Xtd!.....k.V...2u..Y..l....x//...E...e.....>...C..k....b33..@...r...(...+.l.+....$z"Q..t..B.[LE......0LBT..r...9.sl5M.\|"......RK.l.....*.DVB.Swg..S5....d....O..`R.nw.-..L..S.B@QZ.N>.\-...[...pL....sro//..H.S.m.s....U.....M.yJ...

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/hip_text.gif
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/js/Button.js?v=1342177280
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/WebResource.axd?d=noQ-NRy2ZIz1bUHme5MeuhamNa6C_BwqixBCCGo0wgmzbIebj3ZYEOeWoUytJr12gWPsDGW3S955m8mGkzQ5T5MX5DQRbCnh5mcNaiHzQHvTtvkFomZVHF4_KTNLClgSPdEEJwIJ_FIMQ4aWig1_1g2&t=638637566716133180
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3005
Entropy (8bit):	4.3348196756520005
Encrypted:	false
SSDEEP:	48:ITWNX9q7aVxyFGwvqNTTswh11KdA/IMUitKhyWirt+NG/BC0/PTfhyr1+18:IiNX9oFG4qTJb0a/IMNURkt6GJZ/7fU7
MD5:	A870B45AC5D6B0D4E18C4829C7B660B4
SHA1:	2D3CA0E1F19EFDEB9B2DD3DCFFB17F8ABA118AA0
SHA-256:	144524233F795D6A425B76F7AE5C0BB622B5F67E2E6AE73532AD526528CA07CF
SHA-512:	295A21307D452F4BF51C62770C6A6B43CDB8B5A6BFA3617E068C8550285252B88F8BBF93A81C39E4BD7F73645EE094EDE0E2733DAFA5094E3EBAE20033363270
Malicious:	false
Reputation:	low
Preview:	function WebForm_FindFirstFocusableChild(control) {.. if (!control \|\| !(control.tagName)) {.. return null;.. }.. var tagName = control.tagName.toLowerCase();.. if (tagName == "undefined") {.. return null;.. }.. var children = control.childNodes;.. if (children) {.. for (var i = 0; i < children.length; i++) {.. try {.. if (WebForm_CanFocus(children[i])) {.. return children[i];.. }.. else {.. var focused = WebForm_FindFirstFocusableChild(children[i]);.. if (WebForm_CanFocus(focused)) {.. return focused;.. }.. }.. } catch (e) {.. }.. }.. }.. return null;..}..function WebForm_AutoFocus(focusId) {.. var targetControl;.. if (__nonMSDOMBrowser) {.. targetControl = document.getElementById(focusId);.. }.. else {.. targetContro

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	downloaded
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1498
Entropy (8bit):	4.81759827491068
Encrypted:	false
SSDEEP:	24:UhvVovixQcvUvED/frfnQYRKYKvZiANncisDmZu7SECywEZS9Y6f:U7ZM8vbA3smgm89CywYkV
MD5:	11FE4E6509513DB245F1F97E37C5D3AB
SHA1:	05322C35B6BFAE84CE8C626BD7B1F8C4A6F15A6D
SHA-256:	78D437B40A85299F96ED9D02E35F23FD3D3EF63D844D8D2523A15516F7E1D09C
SHA-512:	E8A7C3B06C54B671FF6772D6A360DD0B4A65888B4DBD32AE04D14E4971343A71E1B4EC1E58BD45898744A1B0DF4EDE24141FF47E2C0393E18AACFC97E6F10D76
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/css/ltrStyle.css?v=1342177280
Preview:	.paddingright { padding-right: 20px; }...paddingleft { padding-left: 20px; }...paddingright7 { padding-right: 7px; }...paddingleft7 { padding-left: 7px; }...paddingleft10 {padding-left: 10px; }...alignright { text-align: right; }...alignleft { text-align: left; }...leftalign {text-align: left; margin-left:0px;}.....borderRight {border-right: 1px solid black; padding: 0px;}.....userTypeRadioButtonMargin{margin-left: 10px; margin-top:50px;}...userVerificationInputLabel {text-align:left;padding-right: 10px;}...radioButtonMoreInformation { padding-left: 20px }.....header .logo{float:left; padding-left:30px;}.....HelpCallout td.PosRight{padding: 8px 0px 0px 0px; margin: 0px; vertical-align: top; font-size: 1px; border: none !important; background-color: transparent !important;}...HelpCallout td.PosRight > div{font-size: 1px; position: relative; left: 1px; border-bottom: none !important; border-right: none !important; border-left: none !important; width: 15px; background-color: transparent !

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 16x16 with PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 24x24 with PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
Category:	downloaded
Size (bytes):	2279
Entropy (8bit):	7.354295352983905
Encrypted:	false
SSDEEP:	24:sb8IQUm7Ar/pPwZRbiHGIc+CozPPdv4CA0H+9dCjnmLr7laO+If7xkLLVP:sbvmiRwZUmD+CoTU0HbEXRzxkLBP
MD5:	7E0D59593F3377B72C29435C4B43954A
SHA1:	B4C5C39A6DFB460BBD2EACCEB09EC8079FB6A8E2
SHA-256:	62D706019A0D80173113EF70FBBEE12F286E8E221534BE788448AADA4B14C8E8
SHA-512:	397416A6A96A39F46F22E906A60E56067E5B7B11FB0597A733F862FC077C88D5ED31F51A82709A56F6082FB1F2F72F9A0FE0849E3DD493BB4240C265B546AAD3
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	............ .....f......... .$...\|... .... .5.......00.... .j.......@@.... .....?......... .....2....PNG........IHDR................a....IDATx..1NCA.C..D@."-en.!.h..8@..9h..".....5M....h..-..l..L..P.Y.^luw...r.(.........w...B({....&.F......N.f%..........^&.x}Zu........g..7m......n?..U`....@.M8.g.-..\|..S.K.!....].%.I......&.I..`...F \|o;....{S....\|..VL...E....IEND.B`..PNG........IHDR..............w=.....IDATx..AJ.A.E_.5...D..$'....<.g.\...!.].!..Y....4...B.......4U...Q..J(...y....%..[t;..>\...~....O....r......e...F....8.d9....4.x.xW..e...c...~W..P2.........[.....r<..,..>....q.\...U...v.'......!.1.....9..:8............I.I.d.......IEND.B`..PNG........IHDR... ... .....szz.....IDATx..AJC1.E.{..... .;..>\..q+.. ..N.j....."8k.P..IF...M..{.8..F..Z.q...~.y}...0.f..U....Z...@yd...4......DT.B..)......v.8.....)..Lq.[....]_jrG$...3.%......i.vU...C...h0.....rz^.].....9..5.....mU~.E..GMF.X....?..Y.U..\|.c.k.v>..@.h..........Nh.u......IEND.B`..PNG........IHDR...

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1561
Entropy (8bit):	7.762338770217686
Encrypted:	false
SSDEEP:	48:c/CeK/fE+XoVldIkPdTWbuf173xX964boBdIhLE:ntcx/Iksbuf17f64borIK
MD5:	8DC34013E911C5F68FC2BCA0400CB06F
SHA1:	16BAFA91AF100D65C4945F04E0C6E1643B98CF00
SHA-256:	795029D360C3D16233FCE96F1BFF13C261535C0885FAE806CFF766F32D96BCEE
SHA-512:	83ACA42A30BFD629BC1E88D3ED154475E7949C1B154D19E6C9EF1DE825BA7967C0B6DA9EE79E7B420668242CCE5931DF344C97278A254F0A72C3D09EABED6051
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....sBIT....\|.d.....pHYs...........S.....tEXtCreation Time.05/06/16...o....tEXtSoftware.Adobe Fireworks CS6.....qIDATh..=l.E.....H..H*.\|... ...&.D..).@....&...N....)_.E ...(.p...p(H...Ht... ..0............i.}s.....{`ss....;.......:...u..."....Az.r.%.9.\|....wU.j...o....N4...~....g.u.=`.;..9.7.%....Ad#......9....~7.....&.a........`]x^D....&,"..kv.l..K.S+!....#{.xm.;..%.+F<.\..#...bN...2...\.".I..U]..#.dWy$."r.2;Z...w)oD..H..u..M.'.k70.<4aG..`'~......k31W.2!Ue.A"..j....X..C...dNUd.... .j.\|c."..../..P.MXD......C`>7Y.K...n.....U..#..^4....Uu...Q.);.`9q.53..n.@.......A6.E,6.-d; ........nl.>..."..N7..9\6.....p^a..4aG...3...gUu#..j...2............f.....^.)...Udo'&..G.C.Z...L).....".t...pCD..n..a.....E....F...o.k.Y+b...[...gT..... ...]....V..m.!\..SCwh8w..J^.3N........\.W.....3.....lP.Da........-..........@_...i......r..%..)E.Q...3..M..o.$...`...".......-/EHIDZ.q.MC.......D.Q..".. ..#...................1...p.x?dKP.=...{u\.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 407064
Category:	dropped
Size (bytes):	116418
Entropy (8bit):	7.9973039891232585
Encrypted:	true
SSDEEP:	3072:gP2vtVWTAPNwLAcAIQH7VRT0JY2NlRHGU02X7cCwtOk50J:gO1VsAFwMtIQbVV4+mr8C
MD5:	8D7EA189CA6C1479C1FDFD16F0B4CC90
SHA1:	563DCBB7E57D5E1FB9DB2E4E22ED2E6CC0E0A934
SHA-256:	DC7E4EB6A0D6730A544A37C3D096B9C014B75CAE566FF4BA3CADDFB3BF3789C0
SHA-512:	B92B7F35487070A1E830AF0992FD517B002E02AB3DFB993ADBB5289E07921815189CDBA55BF75E52880C453B61EF54FCC342BCD16892B749FE27AE66478B22B4
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Zw....k...Q.^O...0....m.......X\|.^.S;M..'.......S}....p.V..VA.....sr....=%xL6.....;~5....35s+.....5K.yy.7`.Q.=.;[[..U..a^..`.c4..Yd=.zQ-p#.c.......b..X.?v...\AMT)..~.<.`..Iaao..h.N.k~<.%-.-p.b7oO..]./,r..m..xl..3...6.O"..QP[....x...?.I.0..{..'..$nE...i....b...X,jK....y.).:...J`'_<....w-.d.......u.:..Z?.%.................+X"G.{.....{.4.xE....}.7].a..._..Lyd...]0.M....P\|..=]laY.(...h..2..X.(.X...2.VL.....}..~..6..[C..obz.#.....37h.W......P{..7!@...b..\R.]U....."...4.o....7S.piCG../.px..j.%r2.....r...m

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 513
Category:	downloaded
Size (bytes):	276
Entropy (8bit):	7.319344972980597
Encrypted:	false
SSDEEP:	6:XtrDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XBD34sMDaXI0demb/
MD5:	44D8807C223B5C6DEF6E75A602F314EF
SHA1:	E061C196D771661D6C47336C50EAFE2B3BA14130
SHA-256:	BA9816D7AF3E3B0EA5B6B34BAA0C99FE5EDCF4CA9BE30307AAA2956F994A8B1E
SHA-512:	E71B16643B2AC3DC315D1EEF21B9054A71F35E9E2E1DC0D36ABC08F4BDF1A9D3C3D6E9D35D06217966647367DCDD7709EA92B558CE407422FC13B4C33E12E3E4
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.860223690068481
Encrypted:	false
SSDEEP:	24:XvstSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcN:Xv7DkpyVCGca4b//9z5oPXdbl9688qRU
MD5:	DF6A7721C242813411CC6950DF40F9B3
SHA1:	B2068C4A65C183AAD6FC22A44CC1FA449CD355B4
SHA-256:	AA53B6DC744357B392FC57C34E516BAE465D4A6837775C137A176D599C8EA948
SHA-512:	CDCFB686649F2061FE13A58841EB6A4E17F40951BA0C440C568B248E6128B6E0C4E79F95DC3EAB81286C103ED2A966F7058D22066466ADED482BF9ECAA6EA3CB
Malicious:	false
Reputation:	low
URL:	https://d40a4b89-59b1754a.wyr-law.com/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 3500
Category:	downloaded
Size (bytes):	1422
Entropy (8bit):	7.867895761484846
Encrypted:	false
SSDEEP:	24:Xc4UY4K5gWPpMCpyOwIKELNQb8wb8BAtR9gR0vGQizQw9xvAcWroVHDmLzSVge6n:Xc4XV5gSugwLELN+8CpRe7z7ks1DmyVG
MD5:	E69FFFBB0157238E93979626A6A6F460
SHA1:	08E42CA06A032C9A844EEC8BD19889C96B26E5C6
SHA-256:	D5C9DE33D9003C6D88437091C2F8FC4C0AD6A0BE3FB3BF8EAE0DB1873A7A8CF1
SHA-512:	017C7C8DDD09EE0905DAD7B74FB6D89E48749C570A1284A6BB962AAD5BAD28046AA5084E5A50C94B3837D8DF720348FF07C3A1DA330456B625B39EB439C41285
Malicious:	false
Reputation:	low
URL:	https://l1ve.wyr-law.com/Me.htm?v=3
Preview:	...........W.n.8.}.W.D...V.%v.9LPt....-.......D...@.N.G....e.m.>.!.<...3.9..L.ej;.!..Y....7....g.n.V.........7\wLG.. vn\|&._..R..8.k...X.....+.ha.Zu.gG\|K.m.4O(Ynb...n3CW.8...n?.V.6..x.cYg..6...2.u{.BV.f.]"...r..AN.....H..-.5.S. X4.\|jX.&.X..]N......t.0.lE......E...[{u.:......1...I.^.e. I.J.4...)".;.d.F...T...m...Uu.Hc..\|......r.J.....E.......1.........0..T....(..&w...X-....I...(.RS.....I.@B.<.r....+...%..t.s..}.....K.rm.LY.9f)#...]Y..Z-f^....._n...K..{~...>>.y. QV....lk.B..{..n....he8..x. .r..,+...P.DR...T..>..........r^"..7..4dQ...x.Nb.B..f)...F@cT.....^...>..tY.h .%Tk.._?'.>>>.m.??...L..O=S....@.$..3..u....3..:.E.k..k\.....X%V...../....&...5.P...s.W..0.k....f.....a.I.4!......;......uBn9..a[..[..{.........\[.r+.[.."............K.......\...=4I),..s.....f..P.I(..4{...D.........R..Fo.70B.z...I.\|.m...HH.C..(\.....x6...e..)....m...]~+^..:..M.#Q.... .;....0eR.M...Jl....4.y.e.)3I.Z...+..{..I....J..A.@.5....h@9m.l@...k...j.n.........JI...t{...G.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1525
Entropy (8bit):	4.80220321270831
Encrypted:	false
SSDEEP:	24:jQB6rLbbhhye8jDjpfj/MALSj0eajoq0MgV05SkuVTgEbwe/sT5wiMa3sr6sHr3H:j8eLrynvlwIeyoJMluVEE0B7srH
MD5:	ACA0F1B02DC406E76DDC5F2BDEBEC6CE
SHA1:	594C930BE86B8843377565E349D2A10F1755A13A
SHA-256:	0446C6FD9AEB7DCD7CC089FA25323B1AE9AFA77B4CF8D4449F7D2D1B2467393A
SHA-512:	06887860F73D38799FFF8BF5B2972160B68C303EC904813861190E9A8A6477E4D300882994D661FDFC118C408625C537D8B28287DC9941D50302BD91C88ED98F
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/js/Common.js
Preview:	.....function GetCookieValue(cookieName)..{.. if (document.cookie == undefined \|\| document.cookie == "").. return "";.... var name = cookieName + "=";.. var cookieArray = document.cookie.split(';');.. for (var i = 0; i < cookieArray.length; i++).. {.. var clientCookie = cookieArray[i].trim();.. if (clientCookie.indexOf(name) == 0).. {.. return clientCookie.substring(name.length, clientCookie.length);.. }.. }.. return "";..}....function DeleteCookie(name)..{.. if (GetCookieValue(name).length > 0).. {.. document.cookie = name + "=" + ";expires=Thu, 01 Jan 2000 00:00:01 GMT";.. }..}....function GetUserSessionData(key) {.. var sessionStorage = window.sessionStorage;.. if (sessionStorage[key] == null) {.. return "";.. }.. return sessionStorage.getItem(key);..}....function SetUserSessionData(key, value) {.. var sessionStorage = window.sessionStorage;.. sessionStorage.setItem(key, val

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 22 x 22
Category:	dropped
Size (bytes):	478
Entropy (8bit):	7.072122642964318
Encrypted:	false
SSDEEP:	12:d44xCq3nQQ5Q36sd0Tc/ET4Io9yjPy00EjNF8:d40CqXQQ5E69qEkI4Wy0lNF8
MD5:	309B41EE7A44BD51E5D1B52CCC620E5B
SHA1:	B162CE55DE01BF7C005F8CE4D4D7C32E7AEACA08
SHA-256:	F213507641FD02EC43981535823474ECFDE973D1B33A6CD385F1F0827FD4B528
SHA-512:	9279138126F8FEDD3AEF32BA4BCD78D3D26BBD4E7DE6F3B21014B96C34D7E69BC4C6471CC94772346CB6C7F9020EB5FE1A3A96686A5B250F5CCDEE54A0936F4D
Malicious:	false
Reputation:	low
Preview:	GIF89a.....;....333..........ZZY.........fff.........ssr...........................................................................................MML.........@@@....................................!.....;.,.............p.+.....9.P'..D.`..........t..pB\C.k..n...[..x7hRt..x7-}.92....}%p5.+..8..9552...n2...#.3//...3../33..."..3+.../9..22....3....+./.9.2......9.........3.....}(.).....5..........7......`...........,"J....D>Dlh...F4D(..I..I..@...!..0]B..d%..w...;

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	3620
Entropy (8bit):	6.867828878374734
Encrypted:	false
SSDEEP:	48:ZumKaT5ezv47j2/ZiRDlq16x8XvEUcg777shHdpHVGJqFd:Eal647jPDlL8XvEUcg77kVGyd
MD5:	B540A8E518037192E32C4FE58BF2DBAB
SHA1:	3047C1DB97B86F6981E0AD2F96AF40CDF43511AF
SHA-256:	8737D721808655F37B333F08A90185699E7E8B9BDAAA15CDB63C8448B426F95D
SHA-512:	E3612D9E6809EC192F6E2D035290B730871C269A267115E4A5515CADB7E6E14E3DD4290A35ABAA8D14CF1FA3924DC76E11926AC341E0F6F372E9FC5434B546E5
Malicious:	false
Reputation:	low
Preview:	GIF89a`.........iii!.......!.&Edited with ezgif.com online GIF maker.!..NETSCAPE2.0.....,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....`.....9..i....Q4......H..j.=.k9-5_..........j7..({.........!.......,....`.....9.......trV.......H....`.[.q6......>.. .CZ.&!.....M...!.......,....`.....8..........:......H..jJ..U..6_....../.el...q.).....!.......,....`.....9.....i..l.go.....H..".U...f......._......5......n..!.......,....`.....:..i......./.....H...5%.kE/5.........In.a..@&3.....J...!.......,....`.....9.......kr.j.....H...-.{Im5c..............@&.........!.......,....`.....9.........j..q....H...].&..\.5.........8..S..........!.......,....`.....9.......3q.g..5....H...:u..............Al..x.q.........!.......,....`.....9......\.F....z....H...zX...ov.........h3N.x4......j..!.......,....`.....9........Q.:......H....y..^...1.........n.!.F......E...!.......,....`.....8.........i,......H....*_.21.I.........%...

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 338 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4020
Entropy (8bit):	7.929907559552797
Encrypted:	false
SSDEEP:	96:1X+Yg6Iet+ZpBmQKEuhA/4oJqNoCkQV+CX8h:Fg69t+YfPhEBPnC+t
MD5:	36AFB641BECFAD75FED5F4E6E8C39268
SHA1:	2495652F017B7A06D796AFE9C4A06ECD54F9CCFE
SHA-256:	5C2192A3932CB78B431A1AC0F3F3D73414A31C63D5CB279F2687E58C72694200
SHA-512:	08C27020CF80A181B941EE144090FFBDD12ED34BA8CBEC037ACECE63F850FF8A69BE6DDB0EC24F7141C46F27779ED59AF84A55FB367C1B6F8893B444F44C5AF5
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/footer_logo_grey_bg.png
Preview:	.PNG........IHDR...R...H.......}.....pHYs..!8..!8.E.1`....sRGB.........gAMA......a....IIDATx...r....[ZZ..V.'0......].......z....M..U.%........C.....}...s...mIV.O5...... ...U.Hq@b......Y..../)..hy.._S......KzK...O\5EQ...(....B.(......(J ...(.......B.(......(J ...(.......B.(..H..EQ.C...V...7.//...~...?.....h4:.@TH.E....}........k.v....L./.@TH...pGN.;.....'.(s...k.......4GTH...'O.~...g[..o.."....l..>.G...;..~...&.....d..u.^F.........M.h.....>.}>..........[......E.b..?.u..{.B........M._.iAh.>~.<S...=.@`e..e....R....._ViA.E....R.@...@..vm.'Ei.v..\>QD..e..R......;o.p{......./^d..TH;.,F>..6...1?..E.p.}..J.p...XD.........7.^b..../.w...........n0.+R.V).J.a..^.X.S..B(..W+++..W. ..e%"Z.[.{,....JQ.iG`....(5..e..`u.*.=.)J...........C.!.@..;$.i.F...W.[....#............k.(J.z....`.dB..)..-H...R.H..O.#V..%......W.4>.'..aJ9.2Q..+.R..id`.x..1.. .../.(J%..>2d.QJ..7.\|.S`..10>..}.M#.....4......<f}..OWO..m.;C[;u.\|P!......L...S.Egr.....3.k.......i.........O...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12980
Entropy (8bit):	4.656952280411437
Encrypted:	false
SSDEEP:	384:QjJmcs01WskN59g1+VW1aEV4xvbw94l1R5SUcZEWajJIcjqTqxBojafes0OPUE9h:t4i7l1rSVajJWjs0O8E9h
MD5:	8EDFCD3F7A179CFF6B123DFF50F29770
SHA1:	7A2D9BB4B9F6072AB3049E6421021A5BA0A3DADF
SHA-256:	D0B747C7F7414A08B0D5107832B2F4BB44A9BB4A3AAD28390F58EDE8BBEA6AE1
SHA-512:	169D1C71078DCB1C65B3CBAFBA3379B94718D6C1E472990666430A6B2C0483CC9B27E13820A29D2DCA2364D3CD3F7D2ECDED48B9ACF406BF74CB505489FB9503
Malicious:	false
Reputation:	low
Preview:	.//------------------------------------------------------------..// Copyright (c) Microsoft Corporation. All rights reserved...//------------------------------------------------------------....var Button = new Object();....Button.ActiveButton = null;..Button.FocusButton = null;..Button.DefaultButton = null;..Button.CancelButton = null;..Button.ActivatedButtonID = null;..Button.Groups = {};....Button.SetText = function(id, text) {.. var button = document.getElementById(id);.. if (button != null) {.. for (var i = 0; i < button.children.length; i++) {.. var ch = button.children[i];.. if (ch.tagName.toLowerCase() == 'span') {.. ch.innerHTML = text; //// TODO: this causes the text wrapped with an <a> tag to get inserted in Firefox, which needs to get fixed... break;.. }.. }.. }.. var span = document.getElementById(id + '_disabled');.. if (span != null) {.. for (var i = 0; i < span.childr

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 513
Category:	dropped
Size (bytes):	276
Entropy (8bit):	7.319344972980597
Encrypted:	false
SSDEEP:	6:XtrDFR4m68lkQfanvbEzXI0iP427cnLPw6/aqqmb/:XBD34sMDaXI0demb/
MD5:	44D8807C223B5C6DEF6E75A602F314EF
SHA1:	E061C196D771661D6C47336C50EAFE2B3BA14130
SHA-256:	BA9816D7AF3E3B0EA5B6B34BAA0C99FE5EDCF4CA9BE30307AAA2956F994A8B1E
SHA-512:	E71B16643B2AC3DC315D1EEF21B9054A71F35E9E2E1DC0D36ABC08F4BDF1A9D3C3D6E9D35D06217966647367DCDD7709EA92B558CE407422FC13B4C33E12E3E4
Malicious:	false
Reputation:	low
Preview:	...........Q=o. ..+.......=t....E.k["...../g;n.,....{.......2....e.......J).8..).5.....>,.ih...^s...&M.Ta..m........C.N5.G.!.-...}.9.~........u.3..@i..qK.U.......E.........S.......A.....6...G..g...,f3g.5F..I...G@<..L.:`.N&.?R....d..(.7._....z.L.......s....

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	471
Entropy (8bit):	7.197252382638843
Encrypted:	false
SSDEEP:	12:6v/7eM/H/HTOlHAbsnwpncDR1pxInjqrrgRRIEw6Jz:qHTO0Gwpnc7pOnjqngRR1nJz
MD5:	C651D60A08FF0F579E2EB9BE6043A3C6
SHA1:	E7BCBB896EEA20A4DC68EDD2EF5B336E92690A55
SHA-256:	7B4B6ADAA1DDA648143A18A52B51DFAAB54775BDB6284DFF5C869235CD385230
SHA-512:	017C29423F096A45AD5D1002B2F14E27A8298F144A962B78F46A96626A1027D5E4EC57468CD8F8C5B9E97461FA651452A1786CD9F5F76264652D03F55D516138
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............>.....sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<...GIDAT8O...@...;Wa.`.X....b....... A.F....K...a..t*{3.e...K.....C..0.....)~;.eYvP....L}.KAEQP.4..WYd....mV]..m....$M...`...C.$R.......`..dM.T....,RU..TU..`.'0.!...D[`p..W)D8,dv]Wt....\^v.$.s..`.i...!...D..e$......$.8../..8....;..\6,...f\|....n.....e..M...g.O.9....q..&........0.w...k...z....\.iZ..c.;.F...Uq7.'Y....X ....IEND.B`.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 352 x 3
Category:	dropped
Size (bytes):	2672
Entropy (8bit):	6.640973516071413
Encrypted:	false
SSDEEP:	48:ZaOdwduTYPpS9pZy9vDNi1miicsvrJkafMiS+MGQ09DU/X9/4Xp6m5Z9SQcq:4CIuTYPpSTc9vcPZX9/2gzQ/
MD5:	166DE53471265253AB3A456DEFE6DA23
SHA1:	17C6DF4D7CCF1FA2C9EFD716FBAE0FC2C71C8D6D
SHA-256:	A46201581A7C7C667FD42787CD1E9ADF2F6BF809EFB7596E61A03E8DBA9ADA13
SHA-512:	80978C1D262BC225A8BA1758DF546E27B5BE8D84CBCF7E6044910E5E05E04AFFEFEC3C0DA0818145EB8A917E1A8D90F4BAC833B64A1F6DE97AD3D5FC80A02308
Malicious:	false
Reputation:	low
Preview:	GIF89a`............!..NETSCAPE2.0.....!.......,....`.....6......P.l.......H....I..:qJ......k....`BY..L..&...!.......,....0.............<....[.\K8j.tr.g..!.......,....3............^;...\UK.]\.%.V.c...!.......,....7........`....lo...[.a..*Rw~i...!.......,....;........h.....l.G-.[K.,_XA]..'g..!.......,....?........i.....g....Z.}..)..u...F..!.......,....C...............P.,nt^.i....Xq...i..!.......,....F...........{^b....n.y..i...\C.-...!.......,....H..............R...o....h.xV!.z#...!.......,"...L.............r.jY..w~aP(.......[i...!.......,(...N.............r....w.aP.j.'.)Y..S..!.......,....H.........`......hew..9`.%z.xVeS..!.......,5...A.........`...\m.Vmtzw.}.d.%...Q..!.......,9...=.........h......3S..s.-W8m...Q..!.......,A...5.........h.....N...:..!..U..!.......,H.............h....M.x...f.i.4..!.......,O...'.........i...tp......(..!.......,X.............j...@.x....!.......,].............j..L..3em..!.......,e.............`......!.......,n..............{i..!..

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	405
Entropy (8bit):	6.927238031773719
Encrypted:	false
SSDEEP:	6:6v/lhPGtyR8R/Chm+jnDs9cCXz6fXIpvI+WOcy0f11VTaENo+7PfW3e37zt1afwp:6v/7SyG/HYfXJOvU1zTa8o+W8
MD5:	D4FFE61373F6AA32EEB8CA7CD41AB980
SHA1:	4925FAC4BC73EFB7C7BBC32B11C435ECF1D61674
SHA-256:	D5C54FFC6B8BD44D932BE8F37B1CD5B666205C7574F9D56EF68E56F83E08FFAD
SHA-512:	0F7EDE96F20BB3C053C246FFE1EF8CE739CEF7757FAAED031A365299B88664A046557C2C7FDB3BADED070BA4EBA1A14950D7E3A066B4976BF07142CEFA48BEEB
Malicious:	false
Reputation:	low
URL:	https://8add78d1-59b1754a.wyr-law.com/images/hip_speaker.png
Preview:	.PNG........IHDR.............8.......sRGB.........gAMA......a.....pHYs..........+......tEXtSoftware.Adobe ImageReadyq.e<....IDAT8O...0...nf..y.,X4.g.I.h4..H.`.b.bA..f.n....%.=.iS.?N....^....A.(...~.i..m[.Qyz..iB..(...8...<G.........y..$.8....EQ.u]..I..(R.l...a...=..?t...CUU.......-..7.!..@.u0\..y.@..[a...p@.J.......e..>.Y..i..>A...+.,[. X9..z....B.4..+)..`n/..Q..>...y....e<....IEND.B`.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 89 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1805
Entropy (8bit):	7.265265285391204
Encrypted:	false
SSDEEP:	24:oV1hpunQWwjx82lY2T32HEV8KJyJ3VAyKOGpxbAKJcyIXRP6VEBxX4pAE60KKAU9:4itNn2VMJ3R6breHDBBThFtYeD5B2
MD5:	BC89C1FBFBC227DC5A7ED9B2797E240D
SHA1:	8A9390297FDD0963C466CF2FD35D5B1F88A46B6A
SHA-256:	744A8CD0A4D15DFCF4A5D2E832FF556D950F8AF24D7B66104AB2EF4FE2605D9A
SHA-512:	C18F6B22F4AC5040E3FEBE8034AD3A3A3EF32CF3384BE6C3144B2EB04080F03111743D5B30AF3A1343AFD68A20AAE5972422C724107243D00CD9CF263DDC10C7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...Y.........0.r.....sRGB.........gAMA......a.....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:BABFACAF901511E2BD4FDE5C526470CF" xmpMM:DocumentID="xmp.did:BABFACB0901511E2BD4FDE5C526470CF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BABFACAD901511E2BD4FDE5C526470CF" stRef:documentID="xmp.did:BABFACAE901511E2BD4FDE5C526470CF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R....fIDATXG.mq[1.E.!...3&...P.................3..~L..q.O..t..{...v?..n.....b#.-.i..

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-04T12:42:07.599234+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49720	20.42.73.29	443	TCP
2024-12-04T12:42:12.035750+0100	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	138.197.161.216	443	192.168.2.5	49724	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 12:41:51.302014112 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.302624941 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:51.302654982 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:51.422665119 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.422686100 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.422768116 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.422806025 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.848261118 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.848371983 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:51.848428011 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:53.488228083 CET	49675	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:41:53.488310099 CET	49674	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:41:53.597609997 CET	49673	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:41:55.802783966 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.803045034 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.803059101 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.803101063 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.803488970 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.803531885 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.811511040 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.811659098 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.811702013 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.819554090 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.819700003 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.819741964 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.827961922 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.828211069 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.828249931 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.836488008 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.836627960 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.836666107 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:55.844784975 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.844913960 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:55.844955921 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:56.003874063 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:56.004004955 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:56.004059076 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:58.551271915 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:58.551306963 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:58.671104908 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:58.671118975 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:58.671225071 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:58.671235085 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.768080950 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.768165112 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.768227100 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.770462036 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.770718098 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.770766020 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.778624058 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.778789043 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.778897047 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.786778927 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.786925077 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.786997080 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.794883966 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.795017004 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.795089960 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.802973986 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.831690073 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.831792116 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.873930931 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:41:59.951378107 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.951517105 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.951666117 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:41:59.951680899 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.412223101 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.412355900 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.412369013 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.412403107 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.412919044 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.413011074 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.420625925 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.420758963 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.420806885 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.429075003 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.429212093 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.429256916 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.437546968 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.437661886 CET	443	49708	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.437720060 CET	49708	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.455425978 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.455480099 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:00.575198889 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.575212002 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.575299978 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.575310946 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:00.575325966 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.078277111 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.078327894 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.078380108 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.082303047 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.106609106 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.106647015 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.110172987 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.110229015 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.110300064 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.110491037 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.110503912 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.226434946 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.226458073 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.226589918 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.226629019 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.226712942 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.779269934 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.779417992 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.779493093 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:01.783318043 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:01.837044954 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:03.014130116 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:03.014194965 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:03.035401106 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:03.035410881 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:03.035631895 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:03.036272049 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:03.036370039 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:03.036387920 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:03.088058949 CET	49674	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:42:03.103705883 CET	49675	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:42:03.213058949 CET	49673	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:42:04.133869886 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.133902073 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.133940935 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.133985996 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.134005070 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.134028912 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.134325981 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.134341955 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.134475946 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.134510994 CET	443	49716	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.136519909 CET	49716	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.155060053 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.155101061 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.217356920 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:04.217407942 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:04.217489958 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:04.217715025 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:04.217731953 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:04.243525982 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:04.243575096 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:04.243674040 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:04.245464087 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:04.245479107 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:04.274908066 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.274923086 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.275015116 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.275027037 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.275108099 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.972426891 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.972732067 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.972803116 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.976476908 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.976632118 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.976680994 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.984586000 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.984744072 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.984787941 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:04.992697954 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.992863894 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:04.992909908 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.000845909 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.001030922 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.001096964 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.030601025 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.030630112 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.150691032 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.150913000 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.150923967 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.150933981 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.150954008 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.628611088 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:05.628739119 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:05.638046026 CET	443	49704	23.1.237.91	192.168.2.5
Dec 4, 2024 12:42:05.638794899 CET	49704	443	192.168.2.5	23.1.237.91
Dec 4, 2024 12:42:05.662878036 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.663360119 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.663448095 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.666733980 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.666922092 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.666979074 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.671318054 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:05.671331882 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:05.671715021 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:05.674848080 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.675013065 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.675132036 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.683140993 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.683574915 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.683640957 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.691842079 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.692003012 CET	443	49703	20.231.128.66	192.168.2.5
Dec 4, 2024 12:42:05.692164898 CET	49703	443	192.168.2.5	20.231.128.66
Dec 4, 2024 12:42:05.713155985 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:05.725842953 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:05.767343998 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:05.958863020 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:05.959249973 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:05.959260941 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:05.960376978 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:05.960434914 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:05.965564966 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:05.965642929 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:06.007814884 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:06.007826090 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:06.051362038 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:06.051400900 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:06.052105904 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:06.052743912 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:06.052756071 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:06.054579020 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:06.137844086 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.137887955 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:06.138115883 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.138500929 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.138546944 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:06.138691902 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.138843060 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.138864040 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:06.139130116 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:06.139142990 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:06.141488075 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:06.141557932 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:06.141640902 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.141782999 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.141797066 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:06.141819954 CET	49719	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.141825914 CET	443	49719	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:06.184962988 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.185009956 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:06.185322046 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.185729027 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:06.185741901 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:07.403867006 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.404300928 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.404311895 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.405035973 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.405292988 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.405306101 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.405515909 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.405611992 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.406368971 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.406533003 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.406697989 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.406768084 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.407179117 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.407654047 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.407721996 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.447335005 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.448551893 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.448569059 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.448571920 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.448577881 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:07.496277094 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.496279955 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:07.599081039 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.599234104 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.599242926 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.599392891 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.601106882 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.601113081 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.601375103 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.614731073 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:07.614897013 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:07.615978956 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:07.616004944 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:07.616259098 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:07.617336988 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.617851973 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.617903948 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.618052959 CET	443	49720	20.42.73.29	192.168.2.5
Dec 4, 2024 12:42:07.618145943 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.618145943 CET	49720	443	192.168.2.5	20.42.73.29
Dec 4, 2024 12:42:07.618557930 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:07.663331985 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:08.142416954 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:08.142489910 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:08.147013903 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:08.150121927 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:08.150121927 CET	49723	443	192.168.2.5	23.218.208.109
Dec 4, 2024 12:42:08.150142908 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:08.150155067 CET	443	49723	23.218.208.109	192.168.2.5
Dec 4, 2024 12:42:08.850848913 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:08.853425026 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:08.853487968 CET	443	49721	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:08.853557110 CET	49721	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:09.198390961 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:09.198452950 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:09.198565960 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:09.198829889 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:09.198847055 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.441987991 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.442362070 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:10.442377090 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.443356991 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.443445921 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:10.444756031 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:10.444756031 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:10.444767952 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.444819927 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.496512890 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:10.496534109 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:10.543787003 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:11.992645979 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992671013 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992679119 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992691994 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992700100 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992702961 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992827892 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:11.992827892 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:11.992844105 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992855072 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:11.992901087 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.035785913 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.035795927 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.035834074 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.035950899 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.035964966 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.035990000 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.077867031 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.077884912 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.077975988 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.077987909 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.121129990 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.209381104 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.209393024 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.209443092 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.209470034 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.209476948 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.209489107 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.209534883 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.209568977 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.238889933 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.238910913 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.239106894 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.239121914 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.239178896 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.243262053 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.243331909 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.273093939 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.273113966 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.273231983 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.273243904 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.273319960 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.381875038 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.381896019 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.382004023 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.382018089 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.382061958 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.401509047 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.401525974 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.401628971 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.401638985 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.401719093 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.421617985 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.421633959 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.421710968 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.421720982 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.421776056 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.441843033 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.441860914 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.441965103 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.441972971 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.442044973 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.447218895 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.447318077 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.447325945 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.447340012 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:12.447411060 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.477482080 CET	49724	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:12.477495909 CET	443	49724	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:13.243164062 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.243216038 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:13.243288040 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.243505955 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.243550062 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:13.243606091 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.244683027 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.244698048 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:13.244900942 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:13.244915962 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:13.335705042 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:13.335747957 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:13.335834980 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:13.336164951 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:13.336180925 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:13.870645046 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:13.870682001 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:13.870767117 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:13.872056007 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:13.872071981 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:14.503985882 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.504307032 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.504317999 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.504653931 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.505120039 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.505179882 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.505285025 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.505319118 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.505362988 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.545747995 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.546035051 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.546055079 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.546385050 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.546734095 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:14.546801090 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:14.586730957 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.122951984 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.123028040 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.125854015 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.125868082 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.126127958 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.167035103 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.210555077 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.255331993 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.338984013 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:15.339076042 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:15.339121103 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.342751026 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.342751026 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.342776060 CET	443	49725	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:15.342824936 CET	49725	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.346366882 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:15.391336918 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:15.568038940 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:15.568130970 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:15.569876909 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:15.569885015 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:15.570136070 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:15.610090971 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610120058 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610129118 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610138893 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610165119 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610178947 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.610212088 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.610227108 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.610259056 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.619330883 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:15.634180069 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:15.643491030 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:15.643567085 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:15.643610001 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:15.679327965 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:15.796039104 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.796065092 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.796122074 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.796139956 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.796174049 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.796185017 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.840167999 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.840204954 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.840241909 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.840249062 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.840302944 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.903729916 CET	49718	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:42:15.903774023 CET	443	49718	142.250.181.68	192.168.2.5
Dec 4, 2024 12:42:15.982135057 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.982160091 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.982203960 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:15.982212067 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:15.982253075 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.013264894 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.013284922 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.013353109 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.013362885 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.013405085 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.034347057 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.034363985 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.034431934 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.034439087 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.034481049 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.055820942 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.055839062 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.055888891 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.055901051 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.055946112 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.055967093 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.177629948 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.177649021 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.177702904 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.177720070 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.177752972 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.177768946 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.192095995 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.192115068 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.192163944 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.192176104 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.192207098 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.192234993 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.209108114 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.209125996 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.209175110 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.209182024 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.209222078 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.224838018 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.224869013 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.224925995 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.224934101 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.224968910 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.240175009 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.240197897 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.240241051 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.240251064 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.240286112 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.240298033 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.245268106 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245292902 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245301962 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245313883 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245342016 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245346069 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.245366096 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.245389938 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.245389938 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.245414019 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.271922112 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.271981955 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.271991014 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.272003889 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:16.272058010 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:16.370297909 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.370316982 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.370362997 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.370383978 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.370398998 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.370424986 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.374197006 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.374274015 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.374289036 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.374332905 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.374392986 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.374392986 CET	49727	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.374406099 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.374414921 CET	443	49727	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.432493925 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.432523966 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.432588100 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.433917046 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.433962107 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434041977 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434072018 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434101105 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434210062 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434544086 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434556007 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434600115 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434607983 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434629917 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434957027 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434957027 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.434972048 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434983015 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.434988022 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.435190916 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.435205936 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.435357094 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.435358047 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:16.435368061 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:16.435375929 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:17.508656979 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:17.508671999 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:17.508680105 CET	49728	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:17.508687973 CET	443	49728	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:18.162439108 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.163007021 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.163244963 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.163271904 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.163347006 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.163758993 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.163783073 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.164175987 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.164194107 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.165070057 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.165081024 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.165121078 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.165127039 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.165510893 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.165517092 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.231709003 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.231751919 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.232290030 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.232316971 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.232326031 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.232355118 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.232814074 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.232821941 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.232851982 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.232856989 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.583478928 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583503962 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583515882 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583554983 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583590984 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583606958 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.583617926 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.583645105 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.583645105 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.583677053 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.597985983 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.598076105 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.598642111 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.600416899 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.600416899 CET	49731	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.600444078 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.600456953 CET	443	49731	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.602823973 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.602847099 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.603075027 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.603104115 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.603529930 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.604377031 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.604377031 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.604388952 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.604582071 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.604614019 CET	443	49732	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.604686975 CET	49732	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.608002901 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.608028889 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.608092070 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.608139992 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.608160019 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.609035015 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.609046936 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.609081984 CET	49735	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.609087944 CET	443	49735	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.609986067 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.610029936 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.610605001 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.611016035 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.611017942 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.611025095 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.611054897 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.612237930 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.612272024 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.612339020 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.612348080 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.612417936 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.612436056 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.613370895 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.613384008 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.622565031 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.622629881 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.622641087 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.622647047 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.622796059 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.668499947 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.668521881 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.668659925 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.668672085 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.676209927 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.676280975 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.676372051 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.676513910 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.676513910 CET	49734	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.676532984 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.676548958 CET	443	49734	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.679435968 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.679469109 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.679721117 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.679721117 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.679749966 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681042910 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681066036 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681138039 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.681150913 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681346893 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.681346893 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.681360006 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681494951 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681543112 CET	443	49733	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.681689024 CET	49733	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.685374022 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.685401917 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.685488939 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.685781956 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:18.685795069 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:18.720369101 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.752470970 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.752505064 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.752656937 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.752845049 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.752861023 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.794847965 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.794857979 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.794925928 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:18.794950962 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.795068979 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.796963930 CET	49726	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:18.796977997 CET	443	49726	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:19.992213011 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:19.992517948 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:19.992548943 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:19.993743896 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:19.993835926 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:19.996552944 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:19.996643066 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:19.996721983 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:20.039340019 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:20.041429043 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:20.041444063 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:20.088641882 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:20.331131935 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.331568956 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.331579924 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.332030058 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.332036018 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.332386017 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.332700968 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.332711935 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.333146095 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.333151102 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.393728971 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.394299984 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.394323111 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.394778013 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.394783974 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.394937992 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.395278931 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.395302057 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.395569086 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.395575047 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.402493000 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.403692007 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.403707981 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.404090881 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.404095888 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.770526886 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.770603895 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.770795107 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.770832062 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.770855904 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.770868063 CET	49738	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.770874023 CET	443	49738	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.773547888 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.773571968 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.773639917 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.773773909 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.773785114 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.774981022 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.775037050 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.775196075 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.775196075 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.777360916 CET	49736	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.777371883 CET	443	49736	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.777561903 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.777595997 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.777659893 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.777777910 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.777796030 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.831188917 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.831254005 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.831389904 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.831541061 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.831556082 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.831572056 CET	49742	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.831578016 CET	443	49742	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.833838940 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.833872080 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.833935976 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.834069014 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.834079981 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839071989 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839133024 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839198112 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839365005 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839376926 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839381933 CET	49737	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839385986 CET	443	49737	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839740992 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839788914 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839848995 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839951038 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839971066 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.839986086 CET	49743	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.839992046 CET	443	49743	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.842344046 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.842363119 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.842428923 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.842891932 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.842917919 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.842989922 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.843005896 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:20.843022108 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.843111038 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:20.843122959 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.489137888 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.489674091 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.489696026 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.490128040 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.490133047 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.496098995 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.502815962 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.502844095 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.504864931 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.504872084 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.552931070 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.552966118 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.552978992 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.553041935 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.553061008 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.553108931 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.560360909 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.560379028 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.560745001 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.560760975 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.561186075 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.561192989 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.561419964 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.561443090 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.561785936 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.561791897 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.623269081 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.623758078 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.623780966 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.624193907 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.624201059 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.759479046 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759493113 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759522915 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759535074 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759552956 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759586096 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.759612083 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.759640932 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.759682894 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.868453979 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.868525982 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.868556023 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.868583918 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.868597984 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.868628025 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.897717953 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.897751093 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.897793055 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.897799969 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.897855997 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.898473978 CET	49744	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.898494959 CET	443	49744	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.925704956 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.925749063 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.925802946 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.925827026 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.925874949 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.925926924 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.926265955 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.926289082 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.927701950 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.927726984 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.927741051 CET	49745	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.927748919 CET	443	49745	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.932017088 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.932060003 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.932128906 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.932771921 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.932826996 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.932881117 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.933070898 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.933084011 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.933432102 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.933451891 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.933464050 CET	49746	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.933470964 CET	443	49746	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.935802937 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.935817957 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.935914993 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.936194897 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.936209917 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.949583054 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.949619055 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.949678898 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.949901104 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.949913025 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.993550062 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.993585110 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.993664980 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.994751930 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.994793892 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.994854927 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.996694088 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.996711969 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.996866941 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:22.996890068 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:22.997497082 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.997565985 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.997613907 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:22.997849941 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.997910976 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:22.997967958 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.007011890 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.007033110 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.007045031 CET	49749	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.007064104 CET	443	49749	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.007154942 CET	49748	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.007168055 CET	443	49748	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.011235952 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011276960 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.011295080 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011337042 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011346102 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.011395931 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011558056 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011567116 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.011574030 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.011583090 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.043530941 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:23.043570042 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:23.043651104 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:23.043832064 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:23.043857098 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:23.067349911 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.067437887 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.067488909 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.067617893 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.067637920 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.067650080 CET	49747	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.067656040 CET	443	49747	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.071316957 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.071346998 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:23.071415901 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.071567059 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:23.071577072 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.167391062 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.167674065 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.167715073 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.168066978 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.168801069 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.168869972 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.169306993 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.188853979 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.189105034 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.189116955 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.189434052 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.189809084 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.189867973 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.189950943 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.215332985 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.231333971 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.237538099 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.237737894 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.237746000 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.238745928 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.238800049 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.239171028 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.239226103 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.283829927 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.284142971 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.284159899 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.285159111 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.285268068 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.285650015 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.285712004 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.285825968 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.285835028 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.288944006 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.289108992 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.289125919 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.290132999 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.290193081 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.290538073 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.290600061 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.290617943 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.290627956 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.292479992 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.292489052 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:24.340869904 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.340872049 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.340872049 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:24.653830051 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.654376984 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.654392004 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.654808044 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.654813051 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.656241894 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.656640053 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.656675100 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.657087088 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.657094002 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.731844902 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.738054991 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.738080978 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.738518000 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.738523960 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.785101891 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:24.785178900 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:24.785264015 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:24.789921045 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.790426970 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.790452957 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.790877104 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.790882111 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.795620918 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.795969009 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.795985937 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:24.796353102 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:24.796359062 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.091442108 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.091514111 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.091582060 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.092248917 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.092248917 CET	49752	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.092271090 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.092281103 CET	443	49752	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.095406055 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.095447063 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.095519066 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.095668077 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.095675945 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.144144058 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.144243956 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.144356966 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.144530058 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.144546032 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.144556046 CET	49751	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.144562006 CET	443	49751	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.147258043 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.147289038 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.147362947 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.147542953 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.147555113 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.167038918 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.167124033 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.167227030 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.167670965 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.167670965 CET	49756	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.167687893 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.167692900 CET	443	49756	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.171416044 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.171438932 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.171516895 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.171654940 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.171669960 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.224883080 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.224942923 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.225017071 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.225241899 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.225256920 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.225287914 CET	49759	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.225294113 CET	443	49759	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.227987051 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.228018999 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.228106022 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.228295088 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.228311062 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.241230965 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.241293907 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.241338968 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.241528034 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.241533995 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.241564035 CET	49757	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.241568089 CET	443	49757	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.244003057 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.244028091 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.244096994 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.244265079 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:25.244287014 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:25.894752026 CET	49722	443	192.168.2.5	216.246.46.135
Dec 4, 2024 12:42:25.894763947 CET	443	49722	216.246.46.135	192.168.2.5
Dec 4, 2024 12:42:26.661278009 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.661571026 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.661572933 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.661598921 CET	443	49750	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.661628008 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.661658049 CET	49750	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.724234104 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.724560022 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.724632978 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.726150036 CET	49754	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.726167917 CET	443	49754	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.870472908 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.870515108 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.870594025 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.870825052 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:26.870841026 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:26.878388882 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.878832102 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.878854036 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.879281998 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.879292965 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.925987005 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.926593065 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.926614046 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.927150965 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.927155018 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.972745895 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.980492115 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.992577076 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.992593050 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.993036985 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.993041992 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.993273020 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.993288040 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:26.993614912 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:26.993621111 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.012392998 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.017126083 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.017143965 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.017573118 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.017579079 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.158340931 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158366919 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158375978 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158410072 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158447027 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.158452034 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158469915 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.158483028 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.158495903 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.158524990 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.201561928 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.201581001 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.201637030 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.201646090 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.201692104 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.322951078 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.323033094 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.323086977 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.323283911 CET	49760	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.323291063 CET	443	49760	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.326200008 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.326230049 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.326314926 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.326487064 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.326508045 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.350444078 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.350466967 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.350533009 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.350541115 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.350569963 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.350594997 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.352612019 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.352664948 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.352670908 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.352684021 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.352720022 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.352845907 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.352852106 CET	443	49758	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:27.352879047 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.352899075 CET	49758	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:27.360590935 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.360668898 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.360718966 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.360836029 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.360850096 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.360860109 CET	49761	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.360866070 CET	443	49761	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.363085985 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.363117933 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.363202095 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.363364935 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.363378048 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.415565014 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.415642977 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.415805101 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.415889025 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.415911913 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.415924072 CET	49764	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.415930033 CET	443	49764	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.418836117 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.418905020 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.418953896 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.423193932 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.423211098 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.423223019 CET	49762	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.423228979 CET	443	49762	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.424468040 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.424501896 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.424576044 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.424731016 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.424745083 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.425450087 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.425487995 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.425545931 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.425668955 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.425682068 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.456895113 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.456962109 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.457021952 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.457134008 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.457144022 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.457156897 CET	49763	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.457163095 CET	443	49763	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.459331989 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.459359884 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:27.459465981 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.459600925 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:27.459614992 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:28.109299898 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.109559059 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.109575987 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.110742092 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.110797882 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.112059116 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.112140894 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.112397909 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.112406969 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.153089046 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.675606966 CET	49771	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.675646067 CET	443	49771	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.675704002 CET	49771	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.675945044 CET	49771	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.675964117 CET	443	49771	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.834692955 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.834716082 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.834806919 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.834822893 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.834867954 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.839230061 CET	49771	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.850269079 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.850307941 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.850394011 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.850636005 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:28.850649118 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:28.879340887 CET	443	49771	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.038847923 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.038861990 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.038896084 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.038974047 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.038991928 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.039031982 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.039042950 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.049547911 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.049593925 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.049671888 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.049910069 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.049925089 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.049977064 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.050286055 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.050298929 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.050533056 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.050543070 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.107264042 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.108995914 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.109029055 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.109774113 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.109778881 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.139913082 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.141129971 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.141164064 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.141561985 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.141566992 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.145174026 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.148116112 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.148140907 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.148765087 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.148772001 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.154628992 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.154653072 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.154764891 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.154764891 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.154778004 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.154819965 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.168061972 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.168155909 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.193598986 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.193645954 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.193731070 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.193939924 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.193948984 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.205099106 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.205599070 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.205636024 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.206051111 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.206058025 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.236913919 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.236933947 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.236977100 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.237016916 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.237037897 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.237060070 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.237096071 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.237158060 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.237576962 CET	49753	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:29.237593889 CET	443	49753	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.243607044 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.244086027 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.244102955 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.244529009 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.244534969 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.551243067 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.551336050 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.551394939 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.551567078 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.551587105 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.551599026 CET	49766	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.551604986 CET	443	49766	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.554253101 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.554300070 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.554389954 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.554517984 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.554534912 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.574368000 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.574430943 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.574481964 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.574585915 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.574595928 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.574605942 CET	49769	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.574611902 CET	443	49769	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.576435089 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.576458931 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.576527119 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.576666117 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.576675892 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.589781046 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.589848042 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.589893103 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.590023994 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.590039968 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.590050936 CET	49767	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.590059042 CET	443	49767	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.592116117 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.592128992 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.592209101 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.592375040 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.592386007 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.649918079 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.649983883 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.650074959 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.650279999 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.650293112 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.650305033 CET	49768	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.650309086 CET	443	49768	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.653402090 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.653419018 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.653505087 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.653673887 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.653687000 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.688509941 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.688576937 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.688783884 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.689212084 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.689219952 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.689232111 CET	49770	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.689235926 CET	443	49770	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.692111969 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.692153931 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.692234993 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.692409992 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:29.692418098 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:29.960570097 CET	443	49771	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:29.960654974 CET	49771	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.134572029 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.134857893 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.134871960 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.135204077 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.136300087 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.136363983 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.136703014 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.179322958 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.335607052 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.335890055 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.335918903 CET	443	49765	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.335935116 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.335982084 CET	49765	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336447954 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336466074 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.336466074 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.336535931 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336642981 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336652040 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.336777925 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336791039 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.336956978 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.336972952 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.337116003 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.337405920 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.337462902 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.337516069 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.337692022 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.337754965 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.338048935 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.338118076 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.338130951 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.379322052 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.379324913 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.390523911 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.390531063 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.431410074 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.431746006 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.431761026 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.432792902 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.432859898 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.433867931 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.433938980 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.434075117 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.434084892 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:30.437699080 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:30.483800888 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.269275904 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.269728899 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.269768953 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.270159006 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.270164967 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.356128931 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.356638908 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.356658936 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.357224941 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.357230902 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.368904114 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.369263887 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.369285107 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.370690107 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.370697021 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.371306896 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.371632099 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.371665001 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.372251034 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.372256994 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.407851934 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.408248901 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.408271074 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.408668041 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.408673048 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.577011108 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:31.577274084 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.577302933 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:31.578588963 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:31.578649998 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.579102039 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.579180002 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:31.579277992 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.579284906 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:31.620223045 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:31.703766108 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.703835011 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.703883886 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.704056025 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.704077959 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.704092979 CET	49776	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.704097986 CET	443	49776	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.707910061 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.707957983 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.708031893 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.708245993 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.708265066 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.799676895 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.799740076 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.799803019 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.800038099 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.800057888 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.800074100 CET	49777	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.800079107 CET	443	49777	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.803343058 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.803383112 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.803437948 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.804054022 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.804121017 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.804126978 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.804141045 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.804167032 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.804404974 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.804409981 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.804444075 CET	49779	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.804447889 CET	443	49779	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.810626030 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.810669899 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.810720921 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.811008930 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.811022043 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.814481020 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.814555883 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.814604044 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.814745903 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.814757109 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.814765930 CET	49778	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.814771891 CET	443	49778	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.817243099 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.817267895 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.817329884 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.817457914 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.817471027 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.842317104 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.842391014 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.842433929 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.842636108 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.842653990 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.842667103 CET	49780	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.842672110 CET	443	49780	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.847547054 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.847575903 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:31.847655058 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.847767115 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:31.847778082 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:32.572587013 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.572623968 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.572643995 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.572762012 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.572777033 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.572822094 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.583573103 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.583652020 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.583657980 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.583817005 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.584044933 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.584055901 CET	443	49772	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.584064007 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.585418940 CET	49772	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.767287970 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767334938 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767343044 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767386913 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767402887 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767412901 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767416000 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.767443895 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767474890 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.767482042 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.767494917 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.767498016 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.769077063 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.769084930 CET	443	49774	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.769104958 CET	49774	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.772078991 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.772120953 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.772198915 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.772397041 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.772411108 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.836150885 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.836538076 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.836591959 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:32.836639881 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.836683035 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.837466955 CET	49775	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:32.837486982 CET	443	49775	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.488013029 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.488564968 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.488584042 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.489010096 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.489016056 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.526308060 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.526861906 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.526897907 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.527601004 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.527610064 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.532083035 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.532608986 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.532643080 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.533030033 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.533035040 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.582459927 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.583009958 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.583031893 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.583465099 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.583470106 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.627192020 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.627705097 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.627737045 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.628128052 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.628135920 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.814910889 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.814980030 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.815078974 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.815345049 CET	49781	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.815363884 CET	443	49781	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.845999956 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.846035957 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.846050024 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.846132040 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.846152067 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.846204996 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.892055035 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.892086983 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.892205000 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.892221928 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.892267942 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.932748079 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.932821035 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.932877064 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.933165073 CET	49782	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.933177948 CET	443	49782	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.936265945 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.936302900 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.936374903 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.936525106 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.936537027 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.937747955 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.937764883 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.937829971 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.937844992 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:33.937890053 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:33.961775064 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.961834908 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.961885929 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.962052107 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.962064028 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.962078094 CET	49784	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.962083101 CET	443	49784	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.966355085 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.966420889 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.966474056 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968154907 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968170881 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.968183041 CET	49785	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968189955 CET	443	49785	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.968708038 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968741894 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.968802929 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968969107 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.968985081 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.970146894 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.970165014 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:33.970232010 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.970355034 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:33.970365047 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.026313066 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.026371002 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.026459932 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.026660919 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.026674986 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.026695013 CET	49783	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.026700020 CET	443	49783	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.029510021 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.029540062 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.029658079 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.029822111 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.029835939 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.066711903 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.067023993 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.067049980 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.067375898 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.067703962 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.067769051 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.067827940 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.070842981 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.070909977 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.070961952 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.071132898 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.071147919 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.071157932 CET	49786	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.071163893 CET	443	49786	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.072177887 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.072199106 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.072287083 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.072295904 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.072334051 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.072360039 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.074712992 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.074736118 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.074822903 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.074951887 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:34.074965954 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:34.102257013 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.102272987 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.102374077 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.102384090 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.102426052 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.115329981 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.132549047 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.132575989 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.132683039 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.132694960 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.132740974 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.258729935 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.258761883 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.258821964 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.258837938 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.258873940 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.258888960 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.271348000 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.271431923 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.271436930 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.271492958 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.271913052 CET	49773	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.271927118 CET	443	49773	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.276247025 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.276284933 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.276345015 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.276560068 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.276598930 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.298046112 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.298090935 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.298151970 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.298393965 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.298403978 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.321743965 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.367328882 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.493792057 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.493823051 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:34.493923903 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.494121075 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:34.494133949 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.515768051 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.516081095 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.516110897 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.516484976 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.516887903 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.516962051 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.517055988 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.537024021 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.537319899 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.537349939 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.537700891 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.538079977 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.538150072 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.538527966 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.563328981 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.583340883 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.689780951 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.712511063 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.712543964 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.717139959 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.717149019 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.732099056 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.735799074 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.749571085 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.752162933 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.752185106 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.772605896 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.772617102 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.776798010 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.776838064 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.778829098 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.778915882 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.780865908 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.780888081 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.781335115 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.781339884 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.798235893 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.798441887 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.798450947 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.799061060 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.809097052 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.811652899 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.811669111 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.819819927 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.819825888 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.841450930 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:35.841459036 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:35.854105949 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.854609013 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.854636908 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.855071068 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:35.855076075 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:35.888005972 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:36.124223948 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.124294996 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.124355078 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.124516964 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.124536991 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.124547958 CET	49789	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.124553919 CET	443	49789	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.127476931 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.127512932 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.127600908 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.127768040 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.127780914 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.179265976 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.179339886 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.179388046 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.179919958 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.179939032 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.179950953 CET	49788	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.179955959 CET	443	49788	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.182998896 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.183044910 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.183110952 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.183335066 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.183345079 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.192864895 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.192925930 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.192965031 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.193070889 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.193084955 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.193094015 CET	49790	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.193099022 CET	443	49790	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.195619106 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.195643902 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.195715904 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.195837975 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.195852041 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.252116919 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.252191067 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.252240896 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.252342939 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.252357960 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.252371073 CET	49791	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.252376080 CET	443	49791	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.255058050 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.255081892 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.255142927 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.255331993 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.255345106 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.297550917 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.297621965 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.297672987 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.297771931 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.297791004 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.297810078 CET	49792	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.297816038 CET	443	49792	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.300518036 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.300549030 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.300609112 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.300729036 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:36.300743103 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:36.623444080 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:36.623472929 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:36.623487949 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:36.623586893 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:36.623610973 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:36.623624086 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:36.623661041 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:36.629776955 CET	49787	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:36.629792929 CET	443	49787	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.452872038 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.452951908 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.452963114 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.452992916 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.453022003 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.453025103 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.453030109 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.453069925 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.453083038 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.453120947 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.496895075 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.496906042 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.496938944 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.496979952 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.496985912 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.497102976 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.644413948 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.644439936 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.644579887 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.644598007 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.644665003 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.672585011 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.672607899 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.672708035 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.672723055 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.672771931 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.701095104 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.701111078 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.701211929 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.701220989 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.701271057 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.701275110 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.721740961 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.721791029 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.721820116 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.721837997 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.721858025 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.721896887 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.839379072 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.839401007 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.839512110 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.839523077 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.839605093 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.848663092 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.848740101 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.848745108 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.848799944 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.849179983 CET	49755	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.849194050 CET	443	49755	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.853475094 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.853523016 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.853588104 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.853801012 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.853817940 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.868619919 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.868649006 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.868720055 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.869609118 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.869620085 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.871351957 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.871366978 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.871416092 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.871773005 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.871786118 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.872148037 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.872186899 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.872266054 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.872598886 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.872611046 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.885576963 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.885699987 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.885756969 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.898236990 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.899781942 CET	49795	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.899796963 CET	443	49795	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.906864882 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.906884909 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.907366037 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.907371044 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.908098936 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.908613920 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.908629894 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.909607887 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.909611940 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.954225063 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.954526901 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.954598904 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.963804007 CET	49794	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:37.963839054 CET	443	49794	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:37.970046043 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.976610899 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.991978884 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.992013931 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.992419004 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.992424965 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.992643118 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.992656946 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:37.992979050 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:37.992983103 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.016752005 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.017245054 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.017278910 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.017724037 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.017729044 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.333003044 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.333076954 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.333254099 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.333486080 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.333509922 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.333525896 CET	49797	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.333532095 CET	443	49797	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.336313963 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.336337090 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.336405993 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.336597919 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.336611986 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.352715015 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.352782965 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.352858067 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.362232924 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.362252951 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.362262011 CET	49796	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.362267971 CET	443	49796	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.364854097 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.364897966 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.364960909 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.365092993 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.365107059 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.404422045 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.404489994 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.404545069 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.404702902 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.404722929 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.404736996 CET	49799	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.404742956 CET	443	49799	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.407073021 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.407108068 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.407171965 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.407330990 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.407345057 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.420461893 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.420522928 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.420578957 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.420685053 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.420698881 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.420710087 CET	49798	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.420715094 CET	443	49798	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.422811985 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.422847033 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.422931910 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.423043966 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.423058987 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.452434063 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.452507973 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.452577114 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.452704906 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.452728033 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.452739000 CET	49800	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.452745914 CET	443	49800	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.454932928 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.454963923 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.455049992 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.455167055 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:38.455188036 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:38.516621113 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.516644955 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.516729116 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.516753912 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.516798973 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.720886946 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.720902920 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.720946074 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.721024036 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.721049070 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.721219063 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.721219063 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.832040071 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.832101107 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.832189083 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.832227945 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.832242966 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.832273960 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.905467033 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.905488968 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.905592918 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.905617952 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.905754089 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.937067986 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.937088966 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.937290907 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:38.937310934 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:38.937357903 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.023957968 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.023983955 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.024209023 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.024240971 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.024302959 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.037111044 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.037317991 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.097738028 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.097759008 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.097829103 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.097846031 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.097888947 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.097976923 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.098254919 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.098274946 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.098746061 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.099431992 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.099514008 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.099566936 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.107705116 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.107937098 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.107949018 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.108275890 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.108576059 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.108635902 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.108700037 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.110023022 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.110219955 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.110234022 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111263037 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111330986 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111352921 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111407995 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111413002 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111432076 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111443996 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111457109 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111479998 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111598969 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111661911 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.111713886 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.111721992 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.113837004 CET	49793	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.113854885 CET	443	49793	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.147342920 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.152493000 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.155328035 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.156316042 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.163341999 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.163366079 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.163945913 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.164279938 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.164390087 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.164422989 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.211333990 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.213546038 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.986089945 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.986149073 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:39.986227989 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.986711979 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:39.986728907 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:40.052063942 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.104841948 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.107570887 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.107580900 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.108447075 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.108453035 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.137238026 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.143259048 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.171526909 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.187772989 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.188508034 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.188641071 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.196479082 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.196496010 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.197132111 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.197140932 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.198637962 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.198666096 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.199179888 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.199191093 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.199805975 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.199850082 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.200288057 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.200297117 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.200798988 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.200810909 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.201380014 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.201385021 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.574981928 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.575046062 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.575150967 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.575360060 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.575360060 CET	49808	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.575412035 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.575439930 CET	443	49808	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.579821110 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.579881907 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.580004930 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.581393003 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.581410885 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.588342905 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.588409901 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.589494944 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.589494944 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.589494944 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.593410969 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.593455076 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.597587109 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.597587109 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.597625971 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.606002092 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.606065989 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.609438896 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.609438896 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.609471083 CET	49809	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.609486103 CET	443	49809	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.611365080 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.611407995 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.611572981 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.611736059 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.611752033 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.632213116 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.632285118 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.632445097 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.632477999 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.632477999 CET	49807	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.632493973 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.632503986 CET	443	49807	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.634763002 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.634783030 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.635004997 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.637401104 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.637417078 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:40.901504993 CET	49806	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:40.901540995 CET	443	49806	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:41.083120108 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.083144903 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.083559990 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.083573103 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.083631992 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.084896088 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.084906101 CET	443	49802	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.084927082 CET	49802	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.109388113 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.109414101 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.113663912 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.113663912 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.113692999 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.121388912 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.121404886 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.121515989 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.121812105 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.121839046 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.121988058 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.122134924 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.122153044 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.122447014 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.122453928 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.158207893 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.171264887 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.171430111 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.171438932 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.171529055 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.177453995 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.186264038 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.186278105 CET	443	49804	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.186326027 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.186326027 CET	49804	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.189388037 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.189398050 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.189546108 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.193399906 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.193409920 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.207534075 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.207586050 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.213931084 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.214231014 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.214241982 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.231573105 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.270468950 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.270890951 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.270904064 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.271215916 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.271699905 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.271770000 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.272192001 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.272192001 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.276614904 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.276624918 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.276722908 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.277128935 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.277193069 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.277328014 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.279618025 CET	49803	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.279625893 CET	443	49803	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.281630993 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.281667948 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.285742044 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.286217928 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.286231041 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.319323063 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.991291046 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.991319895 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.991379976 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:41.991389036 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:41.991430998 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.195341110 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.195358038 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.195400953 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.195425034 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.195444107 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.195481062 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.195497990 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.311023951 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.311059952 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.311163902 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.311178923 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.311223984 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.351855993 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.352447033 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.352463007 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.352883101 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.353214979 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.353285074 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.353374004 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.353699923 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.358582020 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.358611107 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.359054089 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.359057903 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.359819889 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360028982 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.360040903 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360384941 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360436916 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360683918 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.360749960 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360840082 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.360855103 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.360970020 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.361198902 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.361470938 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.361535072 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.361552954 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.362808943 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.363158941 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.363210917 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.363579988 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.363585949 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.377649069 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.378036022 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.378048897 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.378422022 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.378427029 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.381558895 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.381592035 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.381640911 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.381656885 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.381686926 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.381711006 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.399338961 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.407042027 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.407075882 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.407155037 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.407166958 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.407241106 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.407335043 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.407350063 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.411448002 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.431756020 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.432254076 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.432274103 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.433341980 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.433423042 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.433840990 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.433906078 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.433986902 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.433995008 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.453389883 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.462629080 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.462654114 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.463238955 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.469875097 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.470017910 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.470042944 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.479499102 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.505978107 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.506015062 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.506094933 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.506119013 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.506726980 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.514714003 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.514817953 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.520904064 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.568461895 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.568500042 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.568594933 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.568622112 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.568694115 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.569359064 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.571765900 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.571801901 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.572856903 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.572930098 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.573388100 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.573455095 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.573527098 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.578768969 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.578871965 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.578871965 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.579195976 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.579210043 CET	443	49801	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.579225063 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.579262018 CET	49801	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.618056059 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.618103027 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:42.677539110 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:42.788176060 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.788250923 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.788319111 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.806557894 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.806627035 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.806870937 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.822856903 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.822930098 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.823251009 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:42.878137112 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.878210068 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:42.878323078 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.164565086 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.164573908 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.164603949 CET	49814	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.164608955 CET	443	49814	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.165735006 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.165767908 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.165786028 CET	49811	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.165791988 CET	443	49811	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.167109966 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.167114973 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.167129993 CET	49812	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.167134047 CET	443	49812	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.169231892 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.169239044 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.169248104 CET	49805	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.169251919 CET	443	49805	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.175712109 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.175767899 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.175836086 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.176578045 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.176613092 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.176676989 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177124023 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177139997 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.177238941 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177345037 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177359104 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.177860022 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177881002 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.177933931 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177954912 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.177969933 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.178040981 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.178050041 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.178103924 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.178112984 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.435728073 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.443451881 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.443464994 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.443918943 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.443923950 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.579139948 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:43.579554081 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:43.579593897 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:43.579621077 CET	443	49810	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:43.579654932 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:43.579684019 CET	49810	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:43.869811058 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.869879007 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.869987011 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.872850895 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.872870922 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.872883081 CET	49813	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.872889996 CET	443	49813	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.877780914 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.877840996 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:43.877907038 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.878361940 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:43.878376007 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.399612904 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.406790018 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.406847000 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.407536030 CET	49817	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.407548904 CET	443	49817	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.418487072 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.418515921 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.418577909 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.418977022 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.418991089 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.440821886 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.446403980 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.446434975 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.446492910 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.446506023 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.446536064 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.446577072 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.448039055 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.448081970 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.448101997 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.448600054 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.448638916 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.483340025 CET	49818	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.483377934 CET	443	49818	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.491178036 CET	49815	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.491209030 CET	443	49815	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.496223927 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.496273041 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.496577978 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.496577978 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.496611118 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.513936996 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.529171944 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.529293060 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.529311895 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.529668093 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.529789925 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.533399105 CET	49819	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.533411026 CET	443	49819	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.556777000 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.556806087 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.556920052 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.556941986 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.557966948 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.558162928 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.560463905 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.560509920 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.561455011 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.563266039 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.563292027 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.573354006 CET	49816	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.573374033 CET	443	49816	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.584800005 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.584846973 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.585016966 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.585161924 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.585181952 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.642580032 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.650711060 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.650841951 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.650893927 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.651081085 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.651213884 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.651294947 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.653783083 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.663537979 CET	49820	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:44.663564920 CET	443	49820	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:44.891865015 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.893311977 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.902354956 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.902374983 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.903228045 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.903233051 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.903803110 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.903825998 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.904305935 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.904310942 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.959067106 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.959572077 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.960829020 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.960839987 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.961139917 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.961160898 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.961757898 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.961762905 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:44.961927891 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:44.961935043 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.102961063 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.103059053 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.105479956 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.108181000 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.108203888 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.109791994 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.109839916 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.109973907 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.113406897 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.113420963 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.326118946 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.326193094 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.327876091 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.327955961 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.327991962 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.329806089 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.353276014 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.353276014 CET	49822	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.353328943 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.353348017 CET	443	49822	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.383491039 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.383491039 CET	49821	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.383508921 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.383524895 CET	443	49821	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.401897907 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.401968956 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.403529882 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.403634071 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.403662920 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.403791904 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.431564093 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.431565046 CET	49823	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.431592941 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.431634903 CET	443	49823	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.446042061 CET	49824	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.446079016 CET	443	49824	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.657762051 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.703696966 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.706512928 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.734766960 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.756838083 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.782869101 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.782888889 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.782977104 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.783005953 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.783473969 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.783572912 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.784061909 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.784073114 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.784548044 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.784554005 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.788621902 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.788801908 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.789035082 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.789156914 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.789215088 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.789271116 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.790303946 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.790360928 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.790431023 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.790581942 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.790600061 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.792855978 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.792881966 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.792948961 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.794249058 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.794276953 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.794334888 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.794665098 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.794672966 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.795205116 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.795213938 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.795260906 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.795300007 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.795330048 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.795393944 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:45.795406103 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:45.800471067 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.815510988 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.815553904 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.817347050 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.817430973 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.818646908 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.818800926 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.818818092 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.831334114 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.831334114 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.859337091 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.865029097 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.865061045 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.868642092 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.869143963 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.869163036 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.870198011 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.870302916 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.888883114 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.888977051 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.889056921 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.889066935 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:45.906446934 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:45.942370892 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.109163046 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.109229088 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.109333992 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.109513998 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.109544039 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.109556913 CET	49825	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.109564066 CET	443	49825	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.111893892 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.111948013 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.112019062 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.112148046 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:46.112164021 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:46.346123934 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.346616030 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.346647024 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.347023964 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.347706079 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.347776890 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.350332022 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.350562096 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.350575924 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.350899935 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.351320982 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.351382017 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.351543903 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.398430109 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.399328947 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.671058893 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.671128988 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.671199083 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.695557117 CET	49828	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.695606947 CET	443	49828	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:46.697909117 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.697932959 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:46.698071957 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.505368948 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.505947113 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.505979061 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.506411076 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.506418943 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.510143995 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.510549068 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.510565996 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.511009932 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.511014938 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.511454105 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.511797905 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.511812925 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.511944056 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.512224913 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.512224913 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.512231112 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.512237072 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.512625933 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.512631893 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.590897083 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.590965986 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.591082096 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.591290951 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.591317892 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.825141907 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.839135885 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.839225054 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.841243982 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.862790108 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.862858057 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.862881899 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.863251925 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.863301992 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.893269062 CET	49827	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.893290997 CET	443	49827	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.896451950 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.896655083 CET	49826	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:47.896692991 CET	443	49826	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:47.897764921 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.897783041 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.898219109 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.898226023 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.939762115 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.939830065 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.939903021 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.944669962 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.944731951 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.944803953 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.945245981 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.945312977 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.945355892 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.945821047 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.945871115 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.945905924 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.992511034 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.992511034 CET	49832	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.992551088 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.992583990 CET	443	49832	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.993684053 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.993701935 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.993743896 CET	49833	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.993750095 CET	443	49833	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.994534016 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.994539022 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:47.994560003 CET	49835	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:47.994564056 CET	443	49835	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.006771088 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.006781101 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.006789923 CET	49834	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.006799936 CET	443	49834	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.235444069 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.235477924 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.235572100 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.235586882 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.235893011 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.235934973 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.339595079 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.339668036 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.339720964 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.398773909 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.398811102 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.398825884 CET	49836	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.398833036 CET	443	49836	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.406584978 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.406615019 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.406677008 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.407622099 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.407664061 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.407721996 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.408598900 CET	49829	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.408617973 CET	443	49829	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.413290977 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.413312912 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.413377047 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.413805008 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.413827896 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.413872957 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.413887024 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.414717913 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.414731026 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.415740013 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.415791988 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.415854931 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.418298006 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.418333054 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.418819904 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.418837070 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.418893099 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.419370890 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:48.419382095 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:48.764702082 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.764730930 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.764810085 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.764825106 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.764887094 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.823787928 CET	49831	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.823828936 CET	443	49831	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.830404997 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.839421034 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.839451075 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.839957952 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.840430021 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.840517044 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:48.844137907 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:48.891341925 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.378468990 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.378602982 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.378668070 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.461091042 CET	49830	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.461118937 CET	443	49830	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.956413031 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.956450939 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.956530094 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.962625980 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.962641001 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.966368914 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.966404915 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:49.966461897 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.967361927 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:49.967375040 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.098674059 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.098720074 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.098798037 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.098834038 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.098876953 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.098926067 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.099057913 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.099072933 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.099210024 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.099225044 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.130917072 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.130934954 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.130944967 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.131030083 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.131197929 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:50.131211042 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:50.150743008 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.150773048 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.151231050 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.151237965 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.194593906 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.195033073 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.195048094 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.195509911 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.195516109 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.197793961 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.200268984 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.200278997 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.200669050 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.200673103 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.206460953 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.206708908 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.206738949 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.207057953 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.207063913 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.268285990 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.268973112 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.268984079 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.269614935 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.269629002 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.570635080 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.570708036 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.570758104 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.570919991 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.570939064 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.570947886 CET	49840	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.570954084 CET	443	49840	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.577040911 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.577101946 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.577167034 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.577986956 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.578000069 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.638837099 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.638937950 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.639007092 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.641685963 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.641758919 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.641809940 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.647384882 CET	49838	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.647411108 CET	443	49838	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.649480104 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.649496078 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.649511099 CET	49842	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.649516106 CET	443	49842	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.650255919 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.650326967 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.650376081 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.651771069 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.651793003 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.651803970 CET	49841	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.651810884 CET	443	49841	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.655952930 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.655992031 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.656069040 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.657150030 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.657176018 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.657229900 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.657402992 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.657418966 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.703716040 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.703787088 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.703886032 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.729321957 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.729350090 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.739506006 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.739552975 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.739573002 CET	49839	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.739582062 CET	443	49839	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.751202106 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.751247883 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.751362085 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.754740000 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.754767895 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.754782915 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.754784107 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:50.754842997 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.758435965 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:50.758450031 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:51.302629948 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.302891016 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.302906036 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.302926064 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.303040981 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.303067923 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.303267002 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.303394079 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.303684950 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.303756952 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.304054022 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.304132938 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.304198980 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.304249048 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.347342968 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.351329088 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.540548086 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.540637016 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.540699005 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.540832996 CET	49837	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.540852070 CET	443	49837	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.543881893 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.544245005 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.544267893 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.545310020 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.545371056 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.546247959 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.546758890 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.546837091 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.547024012 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.547036886 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.547233105 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.547245979 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.548329115 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.548393965 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.548676968 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.548742056 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.548819065 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.548959970 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.548969030 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.549128056 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.549139023 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.550715923 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.550771952 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.551085949 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.551160097 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.551335096 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.551343918 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:51.619205952 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.634848118 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:51.635482073 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:52.438095093 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.438704967 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.438738108 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.439205885 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.439220905 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.449620962 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.449918985 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.449994087 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.450007915 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.450203896 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.450212002 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.450352907 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.450356960 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.450686932 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.450691938 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.544372082 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.544398069 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.544949055 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.544955015 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.544960022 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.544981956 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.545428991 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.545434952 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.545474052 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.545479059 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.659665108 CET	49707	80	192.168.2.5	192.229.221.95
Dec 4, 2024 12:42:52.779823065 CET	80	49707	192.229.221.95	192.168.2.5
Dec 4, 2024 12:42:52.779946089 CET	49707	80	192.168.2.5	192.229.221.95
Dec 4, 2024 12:42:52.883908987 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.883995056 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884110928 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884284973 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884309053 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884321928 CET	49849	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884327888 CET	443	49849	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884526014 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884586096 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884628057 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884740114 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884746075 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.884754896 CET	49851	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.884758949 CET	443	49851	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.886862993 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.886879921 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.886925936 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.886936903 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.886981010 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887191057 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887238026 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.887269020 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887290001 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887299061 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.887336016 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887336016 CET	49850	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887348890 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.887357950 CET	443	49850	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.887386084 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887497902 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887512922 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.887588978 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.887600899 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.889239073 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.889246941 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.889319897 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.889442921 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.889451981 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.991014004 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.991096973 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.991194010 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.991466045 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.991486073 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.991499901 CET	49853	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.991506100 CET	443	49853	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.993695974 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.993726969 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.993813992 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.993840933 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.994141102 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.994178057 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.994234085 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.994303942 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.994322062 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.994333982 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:52.994488955 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.994527102 CET	443	49852	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:52.994565964 CET	49852	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:53.000403881 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:53.000416040 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:53.002104998 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:53.002124071 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:53.002201080 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:53.002306938 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:53.002320051 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:53.902736902 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:53.902766943 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:53.902857065 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:53.902908087 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:53.902950048 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:53.904284954 CET	49843	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:53.904309034 CET	443	49843	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.113173962 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.114057064 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.114114046 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.114216089 CET	49848	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.114227057 CET	443	49848	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.232615948 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:54.232659101 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:54.232736111 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:54.233061075 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:54.233073950 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:54.604491949 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.604907990 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.604947090 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.605365992 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.605370998 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.609872103 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.610249043 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.610266924 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.610723972 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.610728979 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.669337988 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.669742107 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.669770956 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.670191050 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.670202017 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.717088938 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.720724106 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.720761061 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.721220016 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.721225023 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.737251043 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.749217987 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.749229908 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.749294996 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.749324083 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.750180006 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.750190020 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.750232935 CET	443	49846	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.750233889 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.750288963 CET	49846	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.784888029 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.785960913 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.785974026 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.786405087 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:54.786412001 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:54.924828053 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.924870014 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:54.924933910 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.925159931 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:54.925177097 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.049773932 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.049801111 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.049890995 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.049918890 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.050472021 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.050493956 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.050549984 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.050575018 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.050614119 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.050714970 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.050760031 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.053405046 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.053426027 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.053436995 CET	49855	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.053442955 CET	443	49855	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.053643942 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.053643942 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.053653002 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.053816080 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.053853989 CET	443	49854	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.053898096 CET	49854	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056143045 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056179047 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056204081 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.056216955 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.056273937 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056303978 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056415081 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056432009 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.056457043 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.056471109 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.113001108 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.118781090 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.118841887 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.118897915 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.118916988 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.118927002 CET	49856	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.118932962 CET	443	49856	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.122210026 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.122230053 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.122299910 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.122431993 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.122443914 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.152057886 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.155306101 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.155410051 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.155457973 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.155473948 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.155487061 CET	49857	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.155492067 CET	443	49857	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.158020973 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.158050060 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.158122063 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.158286095 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.158302069 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.167629957 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.205821037 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.205830097 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.205862999 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.205939054 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.205954075 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.205975056 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.207494020 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.207556009 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.208147049 CET	49845	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.208158016 CET	443	49845	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.212275982 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.212294102 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.212390900 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.212585926 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:55.212600946 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:55.228704929 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.232526064 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.232599974 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.253798962 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.253808022 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.253840923 CET	49858	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.253845930 CET	443	49858	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.256372929 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.256392956 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.256469965 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.256628990 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:55.256643057 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:55.931701899 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:55.931797028 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:55.934617043 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:55.934623003 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:55.934849024 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:55.938278913 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:55.983330011 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.164963961 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.165273905 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.165292978 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.166371107 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.166435957 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.166975975 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.167049885 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.167397976 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.211343050 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.213502884 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.213520050 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.246786118 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.246833086 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.246918917 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.247533083 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.247548103 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.256309986 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.256407976 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.256450891 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.257473946 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.257668018 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.257683039 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.451402903 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.453641891 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.453677893 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.454673052 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.454739094 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.455140114 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.455204010 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.455301046 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.455308914 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:56.495381117 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:56.618990898 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.619021893 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.619044065 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.619134903 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.619173050 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.619225979 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.652851105 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.652890921 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.652951002 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.652959108 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.653000116 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.653120995 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.653139114 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.653147936 CET	49859	443	192.168.2.5	20.109.210.53
Dec 4, 2024 12:42:56.653153896 CET	443	49859	20.109.210.53	192.168.2.5
Dec 4, 2024 12:42:56.773660898 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.779756069 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.779777050 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.780242920 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.780247927 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.836497068 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.836905003 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.836934090 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.837379932 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.837384939 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.838181973 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.839910984 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.839925051 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.840315104 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.840318918 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.938350916 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.938883066 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.938906908 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.939415932 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.939424038 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.973121881 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.973543882 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.973568916 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:56.974029064 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:56.974035978 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.207869053 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.211658955 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.211754084 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.211781979 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.211796045 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.211812973 CET	49861	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.211817980 CET	443	49861	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.216577053 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.216622114 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.216694117 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.216862917 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.216871977 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.273791075 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.277235031 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.277338028 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.277384043 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.277389050 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.277399063 CET	49863	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.277403116 CET	443	49863	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.279926062 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.279953003 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.280035973 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.280170918 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.280184031 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.283056021 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.286185980 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.286254883 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.286292076 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.286303043 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.286314011 CET	49862	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.286324024 CET	443	49862	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.289784908 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.289817095 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.289877892 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.289992094 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.290002108 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.383171082 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.386723042 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.386831999 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.386869907 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.386883974 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.386894941 CET	49864	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.386899948 CET	443	49864	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.389553070 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.389599085 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.389693022 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.389832973 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.389844894 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.407179117 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.411120892 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.411204100 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.411475897 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.411488056 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.411518097 CET	49866	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.411523104 CET	443	49866	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.414036989 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.414056063 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.414139986 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.414335966 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:57.414350033 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:57.485769987 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.490518093 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.490546942 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.491636038 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.491693020 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.493659019 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.493736029 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.493896961 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.493907928 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.495117903 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.500385046 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.500407934 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.501437902 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.501488924 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.504842997 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.504900932 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.542975903 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.565243959 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.565258026 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.566562891 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.566595078 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.566657066 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.566884041 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:57.566898108 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:57.612792969 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.447005987 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.496045113 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.525039911 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.525052071 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.525104046 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.525119066 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.525197983 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.525242090 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.525744915 CET	49860	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.525762081 CET	443	49860	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.851641893 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.851984978 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.851998091 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.852372885 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.852690935 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.852770090 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.852874994 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.899334908 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.924355030 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:58.964950085 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:58.995357037 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:58.996089935 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:58.996114016 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:58.996617079 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:58.996623039 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:58.999254942 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:58.999577999 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:58.999600887 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:58.999969959 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:58.999978065 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.002259016 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.002278090 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.002296925 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.002330065 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:59.002384901 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:59.002391100 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.003746033 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:59.003753901 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.003777981 CET	443	49865	138.197.161.216	192.168.2.5
Dec 4, 2024 12:42:59.003807068 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:59.003835917 CET	49865	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:42:59.005038023 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.005455017 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.005486012 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.005902052 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.005911112 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.135535002 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.138839006 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.138858080 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.139331102 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.139337063 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.177145004 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.177612066 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.177624941 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.178092003 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.178097963 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.431428909 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.434428930 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.434509039 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.434623003 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.434643984 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.434664011 CET	49870	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.434669971 CET	443	49870	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.437216043 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.437263966 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.437331915 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.437469959 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.437484026 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.439059973 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.442351103 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.442531109 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.442579031 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.442585945 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.442624092 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.442677975 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.442677975 CET	49871	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.442689896 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.442698002 CET	443	49871	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.444804907 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.444828987 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.444911003 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.445072889 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.445087910 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.446243048 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.446294069 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.446343899 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.446350098 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.446358919 CET	49869	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.446365118 CET	443	49869	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.449515104 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.449532032 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.449584961 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.449719906 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.449732065 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.570359945 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.573072910 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.573133945 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.573201895 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.573220015 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.573290110 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.573309898 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.573319912 CET	49873	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.573326111 CET	443	49873	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.576085091 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.576102018 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.576200962 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.576332092 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.576344967 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.621459961 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.621548891 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.621638060 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.621927023 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.621956110 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.621968985 CET	49872	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.621977091 CET	443	49872	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.624402046 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.624454975 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:42:59.624547005 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.624667883 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:42:59.624681950 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:00.023592949 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.066701889 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.066895008 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.067512035 CET	49844	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.067536116 CET	443	49844	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.071568012 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.071607113 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.071679115 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.071917057 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.071930885 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855566025 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855601072 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855633020 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855645895 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855664968 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855670929 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855694056 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.855711937 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.855727911 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.880121946 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.880215883 CET	443	49874	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.880283117 CET	49874	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.889318943 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.889343977 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.889405012 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.889898062 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.889920950 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.889971018 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890342951 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890379906 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.890414000 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890441895 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890655041 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890671968 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.890805960 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890821934 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.890945911 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.890955925 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.901660919 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.923894882 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.923923016 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.923983097 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.924563885 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:00.924578905 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:00.935334921 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.031467915 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.031512976 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.031578064 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.031833887 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.031843901 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067441940 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067451000 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067478895 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067497969 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067537069 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.067570925 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.067589998 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.067615032 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.117790937 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.117816925 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.118015051 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.118052006 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.118099928 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.152360916 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.152900934 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.152928114 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.153371096 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.153377056 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.160831928 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.161108971 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.161144972 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.161441088 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.161447048 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.165781021 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.166362047 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.166378021 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.167032003 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.167037010 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.225382090 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.225486040 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.225611925 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.225611925 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.226238966 CET	49867	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.226258039 CET	443	49867	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.226751089 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.226794004 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.226855040 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.227754116 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.227773905 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.292886972 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.294312954 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.294354916 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.294918060 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.294924021 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.309863091 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.312267065 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.312277079 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.312649965 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.314891100 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.314960003 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.315072060 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:01.359340906 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:01.586280107 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.589807034 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.589879036 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.595032930 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.598500967 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.598583937 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.600083113 CET	49876	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.600107908 CET	443	49876	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.600263119 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.602344036 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.602375031 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.602391005 CET	49877	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.602396965 CET	443	49877	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.603557110 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.603602886 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.603992939 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.604001999 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.604031086 CET	49878	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.604037046 CET	443	49878	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.609874010 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.609922886 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.610009909 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.611565113 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.611581087 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.612150908 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612190962 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.612251997 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612366915 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612380981 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.612656116 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612668037 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.612723112 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612859964 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.612871885 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.727041960 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.730880976 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.730933905 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.730950117 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.731014967 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.731079102 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.731097937 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.731108904 CET	49879	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.731115103 CET	443	49879	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.733907938 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.733939886 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:01.734035969 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.734205961 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:01.734220982 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.130043030 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.130343914 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.130373955 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.130779982 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.131107092 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.131175995 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.131258965 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.131273031 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.131450891 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.131481886 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.132527113 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.132610083 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.132894039 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.132951975 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.133018017 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.133033991 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.133506060 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.133687019 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.133699894 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.134033918 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.134362936 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.134422064 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.134501934 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.172296047 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.172779083 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.172806978 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.173235893 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.173240900 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.175319910 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.178292990 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.179335117 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.211096048 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.211357117 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.211380959 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.212898016 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.212990999 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.213571072 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.213634014 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.213747025 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.213754892 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.256855965 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.270819902 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.271070957 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.271104097 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.272165060 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.272278070 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.273194075 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.273271084 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.273344040 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.273358107 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.328195095 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.511986971 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.512396097 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.512413979 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.513469934 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.513539076 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.514154911 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.514219999 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.514659882 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.514667988 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:02.555921078 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:02.616017103 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.619227886 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.619287014 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.619405985 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.619424105 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.619435072 CET	49880	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.619440079 CET	443	49880	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.622591019 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.622622013 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:02.622678041 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.622823954 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:02.622838020 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.328023911 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.371243954 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.390482903 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.392646074 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.435110092 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.435110092 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.439934015 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.439953089 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.440745115 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.440752983 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.441987038 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.441998959 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.442409039 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.442414999 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.442826986 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.442831039 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.443331957 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.443336964 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.456438065 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.456999063 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.457026005 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.457690954 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.457711935 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.547425032 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.547446966 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.547499895 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.547523975 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.547703981 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.547756910 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.550142050 CET	49868	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.550158024 CET	443	49868	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.550635099 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.550659895 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.550756931 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.551847935 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.551862955 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.700800896 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.700845957 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.701057911 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.701262951 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.701277018 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.762573957 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.766416073 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.766484976 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.766596079 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.766613960 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.766624928 CET	49889	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.766630888 CET	443	49889	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.771035910 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.771090984 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.771167994 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.771352053 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.771370888 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.833940983 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.836329937 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.837547064 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.837644100 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.837696075 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.837714911 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.837724924 CET	49888	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.837730885 CET	443	49888	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840420961 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840452909 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840522051 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840544939 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840590954 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840595961 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840699911 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840711117 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840718985 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840780973 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840787888 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.840795040 CET	49890	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.840799093 CET	443	49890	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.842636108 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.842669964 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.842736959 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.842855930 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.842866898 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.891381025 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.894571066 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.896461964 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.896752119 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.896752119 CET	49891	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.896764994 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.896780968 CET	443	49891	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.899175882 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.899198055 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.899281025 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.899523020 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:03.899530888 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:03.940865040 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.949625015 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:03.953476906 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.953773975 CET	49881	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:03.953794956 CET	443	49881	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.136187077 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:04.136230946 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:04.136322975 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:04.136533976 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:04.136548996 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:04.406234026 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.406738043 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.406760931 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.407186031 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.407196045 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.674834013 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.674860001 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.675017118 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.675039053 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.675437927 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.675492048 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.677134991 CET	49884	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.677150965 CET	443	49884	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.677457094 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.677510023 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.677586079 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.678215027 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.678240061 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.828773975 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.828800917 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.828833103 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.828991890 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.828991890 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.829024076 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.829067945 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.837013006 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.837271929 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.837289095 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.837764978 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.838207960 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.838278055 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.838370085 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.838381052 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.850481033 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.853734970 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.853792906 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.853794098 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.853965044 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.853965044 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.853965044 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.856878042 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.856925011 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.856996059 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.857135057 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:04.857146978 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:04.921452999 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.921540022 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.921622038 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.921667099 CET	49883	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.921685934 CET	443	49883	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.922043085 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.922092915 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.922152042 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.922956944 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.922981977 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.945077896 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.945378065 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.945399046 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.946412086 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.946479082 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.946821928 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.946887970 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.947019100 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:04.947027922 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:04.989867926 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.159466028 CET	49892	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.159502029 CET	443	49892	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.315978050 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.315999985 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.316018105 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.316096067 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.316118956 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.316164017 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.334822893 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.334851980 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.334858894 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.334868908 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.334902048 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.334985018 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.335004091 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.335074902 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.335359097 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.335424900 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.335445881 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337475061 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337501049 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337508917 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337538958 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337580919 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.337590933 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.337605953 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.337634087 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.354063988 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.354139090 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.354149103 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.354165077 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.354217052 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.354234934 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.355464935 CET	49885	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.355478048 CET	443	49885	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.355962038 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.355984926 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.356127024 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.357002020 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.357013941 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.360512018 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.360547066 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.360590935 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.360981941 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.361000061 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.376005888 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.388192892 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.388219118 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.388257027 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.388267040 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.388309956 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.401133060 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.401204109 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.401211977 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.401253939 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.401257038 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.401304007 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.401622057 CET	49882	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.401638031 CET	443	49882	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.405805111 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.405832052 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.405905008 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.406116962 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.406131029 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.428184032 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.428275108 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.428353071 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.428445101 CET	49887	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.428457975 CET	443	49887	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.448566914 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.448606968 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.448669910 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.449033022 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.449047089 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.488754034 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.489738941 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.489765882 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.491728067 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.491734982 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.615957022 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.621295929 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.622493029 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.628356934 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.628391027 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.629250050 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.629255056 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.629878044 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.629889011 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.630707026 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.630711079 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.631299019 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.631330967 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.631922960 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.631927967 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.826567888 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826597929 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826606035 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826617956 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826623917 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826630116 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826673031 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.826693058 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.826718092 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.826734066 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.863509893 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.863559008 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.863591909 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.863619089 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.863662004 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.875049114 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:05.914784908 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:05.922843933 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.926295042 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.926378965 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.940268993 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:05.940294027 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:05.940812111 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:05.942375898 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.942409039 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.942423105 CET	49895	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.942429066 CET	443	49895	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.956067085 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:05.956192017 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:05.958939075 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.958983898 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.959053040 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.959203005 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:05.959218025 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:05.960052967 CET	49886	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.960072041 CET	443	49886	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.968837023 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.969055891 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.969069004 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.969424009 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.969789982 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.969857931 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:05.969888926 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:05.969924927 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.010365963 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.010366917 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:06.050668955 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.056276083 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.056350946 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.056437969 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.056523085 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.056549072 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.056562901 CET	49898	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.056569099 CET	443	49898	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.060339928 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.060391903 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.060457945 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.060616016 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.060632944 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.065959930 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.069459915 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.069534063 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.069572926 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.069591045 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.069603920 CET	49897	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.069610119 CET	443	49897	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.071661949 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.071692944 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.071772099 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.071912050 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.071922064 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.127434969 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.127489090 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.127574921 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.127808094 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.127820015 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.206815004 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.207271099 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.207290888 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.207631111 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.207935095 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.207995892 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.208085060 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.208117008 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.266108036 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.269098043 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.269268990 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.269268990 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.269268990 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.271959066 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.272006035 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.272095919 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.272290945 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.272306919 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.573441029 CET	49896	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.573470116 CET	443	49896	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.624301910 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.624583006 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.624603033 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.624840975 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.624962091 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.625008106 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.625032902 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.625293970 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.625360012 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.625436068 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.626163006 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.626228094 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.626580954 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.626652002 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.626749992 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.626758099 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.638762951 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.639238119 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.639272928 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.639772892 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:06.639780045 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:06.644192934 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.644428015 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.644439936 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.644849062 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.645288944 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.645391941 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.645409107 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.667334080 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.669122934 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.669125080 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.687329054 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.699815035 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.734493017 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.734824896 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.734841108 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.735901117 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.736031055 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.736363888 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.736422062 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.736541986 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.777559996 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:06.777575970 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:06.824879885 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.081954956 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.085577011 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.085647106 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.085680008 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.085695028 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.085705996 CET	49902	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.085712910 CET	443	49902	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.090014935 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.090049982 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.090142965 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.090321064 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.090333939 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.225455046 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.225481033 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.225590944 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.225610971 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.225671053 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.227050066 CET	49893	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.227066994 CET	443	49893	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.233578920 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.233624935 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.233702898 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.233923912 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.233937025 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.295696974 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.295726061 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.295845032 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.295872927 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.295964956 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.296020031 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.296637058 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.296650887 CET	443	49894	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.296680927 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.296701908 CET	49894	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.413032055 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.413393021 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.413417101 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.414467096 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.414562941 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.414902925 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.414963961 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.415060043 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.459347963 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.461935997 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.461952925 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:07.514132977 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:07.742537975 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.743150949 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.743190050 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.743594885 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.743603945 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.777465105 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.778192043 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.778234005 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.778728962 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.778736115 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.786993027 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.787425041 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.787444115 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:07.787859917 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:07.787867069 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.052381039 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.052895069 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.052916050 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.053381920 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.053386927 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.186204910 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.189527035 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.189616919 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.189672947 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.189694881 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.189709902 CET	49908	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.189716101 CET	443	49908	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.192536116 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.192593098 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.192675114 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.192847967 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.192862034 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.212150097 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.215491056 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.215614080 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.215914011 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.215934992 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.215946913 CET	49909	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.215953112 CET	443	49909	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.218497992 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.218532085 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.218607903 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.218746901 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.218763113 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.225183010 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.228208065 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.228275061 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.228291035 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.228322029 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.228368998 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.228387117 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.228396893 CET	49910	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.228401899 CET	443	49910	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.231713057 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.231760979 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.231848001 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.231962919 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.231975079 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.472507954 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.472860098 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.472887039 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.473222971 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.473527908 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.473594904 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.473650932 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.496484041 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.500118017 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.500191927 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.500236034 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.500236034 CET	49912	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.500257969 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.500267982 CET	443	49912	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.502875090 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.502914906 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.502989054 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.503120899 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.503134012 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.519331932 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.699357033 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.699397087 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.699440956 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.699525118 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.699569941 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.699616909 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.701344013 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.701421976 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.701498985 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.701849937 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.701874018 CET	443	49903	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.701884985 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.701925039 CET	49903	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.703579903 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.703638077 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.703713894 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.704652071 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.704670906 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.705405951 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.705461025 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.705533028 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.705733061 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.705751896 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.848683119 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.848745108 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.848819971 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.849047899 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.849059105 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.869798899 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.870584965 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.870637894 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.871180058 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:08.871192932 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:08.874481916 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874502897 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874511957 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874521017 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874571085 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874608040 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.874628067 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.874643087 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.874682903 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.901829958 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.901912928 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.901959896 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.902004004 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.902493000 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.902493000 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.912178040 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.912240028 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.912312031 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.912611008 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.912642002 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.912698984 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913300037 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913338900 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.913410902 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913531065 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913552999 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.913676977 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913686991 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.913805008 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.913827896 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.917745113 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.917788982 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.917928934 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.918061018 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.918076038 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988058090 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988084078 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988173008 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.988200903 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988261938 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.988368034 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988429070 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.988471985 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.989048958 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.989067078 CET	443	49904	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.989079952 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.989115953 CET	49904	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.993237019 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.993282080 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.993371964 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.993882895 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.993947029 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.994031906 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.995052099 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.995066881 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:08.995384932 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:08.995419979 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.099531889 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.099561930 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.099601030 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.099654913 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.099674940 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.099812031 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.128139973 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128170013 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128177881 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128185034 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128206968 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128213882 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128253937 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.128276110 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.128308058 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.128325939 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.212730885 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.212816000 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.212909937 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.213435888 CET	49907	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.213454008 CET	443	49907	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.214232922 CET	49901	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.214270115 CET	443	49901	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.214296103 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.214350939 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.214416027 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.215159893 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.215179920 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269328117 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269350052 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269357920 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269385099 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269401073 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269411087 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269453049 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.269475937 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.269505978 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.302918911 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.302937984 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.302979946 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.303061962 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.303081989 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.303097010 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.303108931 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.303131104 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.303160906 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.303548098 CET	49905	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.303564072 CET	443	49905	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.310211897 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.314610958 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.317841053 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.317970991 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.318002939 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.318028927 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.318042040 CET	49913	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.318049908 CET	443	49913	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.320782900 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.320832014 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.320895910 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.321044922 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.321059942 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.478981972 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.478996038 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.479037046 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.479064941 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.479110956 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.479140043 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.479156017 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.479182959 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.521826029 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.521881104 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.521922112 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.521946907 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.521961927 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.521970987 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.522011995 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.522389889 CET	49906	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.522406101 CET	443	49906	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.913266897 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.914428949 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.914453030 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.914932966 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.914937973 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.954154968 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.954457045 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.954462051 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.954473019 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.954654932 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.954689026 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.954792023 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.955004930 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.955400944 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.955456972 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.955698967 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.955751896 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.955914021 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.955931902 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.955936909 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:09.956034899 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:09.997065067 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.997596979 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.997612000 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.998029947 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:09.998034000 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:09.999320984 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.011830091 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.012190104 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.012212992 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.012569904 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.012576103 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.132272959 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.132544041 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.132564068 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.133644104 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.133709908 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.134916067 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.135104895 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.135108948 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.135122061 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.151149988 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.151655912 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.152232885 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.152658939 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.152668953 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.152780056 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.152791977 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.152888060 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.152898073 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.153228998 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.153651953 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.153666973 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.153707981 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.153714895 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.153764009 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.153805971 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154119968 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154170036 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.154244900 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154536963 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154582977 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.154665947 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154671907 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.154748917 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.154757977 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.156014919 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.156183958 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.156197071 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.156507969 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.156826973 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.156877995 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.156932116 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.181905031 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.181919098 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.195329905 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.199251890 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.199331999 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.199359894 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.230053902 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.233839989 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.234141111 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.234159946 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.235327005 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.235387087 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.236809969 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.236876965 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.237040997 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.237046957 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.280833960 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.281382084 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.283971071 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.319499016 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.319535017 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.319974899 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.319982052 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.320168972 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.320179939 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.321279049 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.321331978 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.321753979 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.321822882 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.321922064 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.321928024 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.347410917 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.350919962 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.350991964 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.355268002 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.355285883 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.355305910 CET	49915	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.355319023 CET	443	49915	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.355634928 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355664968 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355671883 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355705023 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.355709076 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355724096 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355737925 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355756998 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.355770111 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.355770111 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.355781078 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.355793953 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.364104033 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.396363974 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.396389961 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.396469116 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.399880886 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.399895906 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.400124073 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.400160074 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.400190115 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.400197029 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.400209904 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.400223970 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.400265932 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.423600912 CET	49911	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.423607111 CET	443	49911	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.440298080 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.443639040 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.443680048 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.443696022 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.443732977 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.446378946 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.446398020 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.446409941 CET	49916	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.446415901 CET	443	49916	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.452356100 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.454560995 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.454592943 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.455250025 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.455653906 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.455710888 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.458767891 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.458791971 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.458826065 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.458892107 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.461792946 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.461803913 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.462207079 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.462227106 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.462239027 CET	49917	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.462244987 CET	443	49917	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.480417013 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.480456114 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.480529070 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.485100031 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.485126019 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.485194921 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.485363007 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.485380888 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.485521078 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.485532045 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.502244949 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.727641106 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.731596947 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.731668949 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.731777906 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.731801987 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.731818914 CET	49918	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.731831074 CET	443	49918	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.734705925 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.734739065 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.734801054 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.734958887 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:10.734972000 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:10.781234980 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.781266928 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.781371117 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.781410933 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.781678915 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.781728983 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.782326937 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.782346010 CET	443	49914	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:10.782375097 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:10.782411098 CET	49914	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:11.038093090 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.038672924 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.038698912 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.039165020 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.039170027 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.472096920 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.475641012 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.475737095 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.475773096 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.475792885 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.475804090 CET	49930	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.475810051 CET	443	49930	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.478358984 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.478409052 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:11.478502035 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.480253935 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:11.480271101 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.178872108 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.179460049 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.179482937 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.179908991 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.179913998 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.204443932 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.204911947 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.204945087 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.205332994 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.205342054 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.237957954 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.237993956 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.238090992 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.238096952 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.238142967 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.239125967 CET	49919	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.239145994 CET	443	49919	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.239619017 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.239676952 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.239739895 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.240129948 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.240143061 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.247598886 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.247646093 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.247744083 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.247993946 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.248006105 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.266050100 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.271881104 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.271925926 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.272670031 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.272676945 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.300000906 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.300038099 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.300074100 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.300098896 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.300131083 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.300175905 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.301687956 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.301721096 CET	443	49920	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.301791906 CET	49920	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.447449923 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.449960947 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.450011969 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.450026989 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.450741053 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.450783014 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.450970888 CET	49921	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.450988054 CET	443	49921	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.464121103 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.469573021 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.469625950 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.470021963 CET	49923	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.470041037 CET	443	49923	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.474705935 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.474731922 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.474797010 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.475022078 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.475033998 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.486454010 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.486489058 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.486522913 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.486538887 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.486573935 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.486608028 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.486820936 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.487059116 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.487104893 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.487121105 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.487401009 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.487437010 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.487533092 CET	49922	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.487543106 CET	443	49922	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.495443106 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.495455027 CET	443	49924	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.495465994 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.495543957 CET	49924	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.501847982 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.501893044 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.501952887 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.502533913 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.502547026 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.502975941 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.503031015 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.503118038 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.503444910 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.503459930 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.516402960 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.516870975 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.516887903 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.517334938 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.517339945 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.552100897 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.559833050 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.559890032 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.562921047 CET	49927	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.562942982 CET	443	49927	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.594458103 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.594495058 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.594542027 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.594754934 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.594770908 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.595468044 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.600039005 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.600095987 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.600538015 CET	49926	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.600548983 CET	443	49926	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.621933937 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.625778913 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.625830889 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.625840902 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.625861883 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.625900030 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.634115934 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.634140015 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.634150028 CET	49931	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.634157896 CET	443	49931	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.641526937 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.641571999 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.641632080 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.641788960 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.641799927 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.645670891 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.648711920 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.648766994 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.648778915 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.648832083 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.648916960 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.648932934 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.648946047 CET	49933	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.648951054 CET	443	49933	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.657618046 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.657660961 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.657715082 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.657977104 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.657989025 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.706679106 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.706706047 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.706763029 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.706793070 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.706815004 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.706855059 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.709568024 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.713670969 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.713725090 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.719223022 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.719233036 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.719245911 CET	49932	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.719249010 CET	443	49932	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.722774982 CET	49929	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.722785950 CET	443	49929	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.723221064 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.723253012 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.723300934 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.724031925 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.724041939 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.747529030 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.747555971 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.747616053 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.748066902 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.748078108 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.945770025 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.945795059 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.945810080 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.945905924 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.945918083 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.945961952 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.959558010 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.963325977 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:12.963483095 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:12.973036051 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.973115921 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.973133087 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:12.973154068 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:12.973201036 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.014965057 CET	49925	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.014993906 CET	443	49925	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.015448093 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.015486002 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.015542984 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.017008066 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.017019033 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.019138098 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.019177914 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.019193888 CET	49934	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.019201040 CET	443	49934	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.024501085 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.024543047 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.024609089 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.024966002 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.024980068 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.196269989 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.197051048 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.197082043 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.197542906 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.197556973 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.488125086 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.488420963 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.488454103 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.488806009 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.489139080 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.489216089 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.489289999 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.490295887 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.490494013 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.490525007 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.490910053 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.491305113 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.491399050 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.491520882 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.535332918 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.535357952 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.630616903 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.630647898 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.630711079 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.630714893 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.630759001 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.631063938 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.631084919 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.631094933 CET	49935	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.631100893 CET	443	49935	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.634073019 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.634131908 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.634192944 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.634349108 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:13.634365082 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:13.712280035 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.712593079 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.712625980 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.712971926 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.713855982 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.713924885 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.714574099 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.755327940 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.785847902 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.785979033 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.786160946 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.786190987 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.786484003 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.786505938 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.787252903 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.787319899 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.787550926 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.787602901 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.787664890 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.787724018 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.787971020 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.788021088 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.788115978 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.788125992 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.788165092 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.788172007 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.831496954 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.831826925 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.831840038 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.832880974 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.833040953 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.833287001 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.833352089 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.833446026 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.837862968 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.841459990 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.879334927 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.886183977 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.886198044 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.931535006 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.961985111 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.962313890 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.962327957 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.963371038 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.963426113 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.963798046 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.963845968 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:13.964196920 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:13.964205027 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.009387016 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.255259037 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.255558014 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.255572081 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.256619930 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.256679058 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.257311106 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.257361889 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.257455111 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.257461071 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:14.303939104 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:14.426687956 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.427261114 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.427294970 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.427715063 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.427721024 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.438419104 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.438858032 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.438891888 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.439241886 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.439246893 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.465348005 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.465723038 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.465748072 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.466090918 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.466097116 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.739566088 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.740247965 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.740272045 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.740705967 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.740710974 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.870718002 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.874665022 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.874803066 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.874857903 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.874857903 CET	49942	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.874881029 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.874897003 CET	443	49942	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.877772093 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.877810955 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.877895117 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.878036976 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.878048897 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.881593943 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.885658979 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.885704041 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.885752916 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.885804892 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.885878086 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.885896921 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.885910034 CET	49943	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.885915041 CET	443	49943	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.888787031 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.888824940 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.888911009 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.889094114 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.889103889 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.900954008 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.904568911 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.904691935 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.904737949 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.904755116 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.904767036 CET	49945	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.904772043 CET	443	49945	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.907691002 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.907716990 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:14.907819986 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.907979965 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:14.907991886 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.174160957 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.174206972 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.174269915 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.174345016 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.174586058 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.174586058 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.174607038 CET	49947	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.174623966 CET	443	49947	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.177615881 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.177659035 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.177822113 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.177931070 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.177944899 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.420569897 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.425221920 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.425259113 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.425724983 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.425729990 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.558790922 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:15.558860064 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:15.558931112 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:15.864037991 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.864116907 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.864197016 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.864428043 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.864454985 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.864471912 CET	49948	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.864478111 CET	443	49948	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.867604017 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.867636919 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.867734909 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.867959976 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:15.867974997 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:15.895420074 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.898036957 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.898145914 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.898152113 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.898200989 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.898679972 CET	49936	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.898700953 CET	443	49936	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.909317970 CET	49899	443	192.168.2.5	142.250.181.68
Dec 4, 2024 12:43:15.909353971 CET	443	49899	142.250.181.68	192.168.2.5
Dec 4, 2024 12:43:15.909689903 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.909729004 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.909796000 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.910170078 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.910191059 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.910761118 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.910795927 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.910865068 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.911041975 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.911056995 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.985758066 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.989528894 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.989619970 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.989835024 CET	49938	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.989855051 CET	443	49938	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.990247965 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.990295887 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:15.990358114 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.990757942 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:15.990780115 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.162662983 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.167735100 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.167866945 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.167893887 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.168139935 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.168148994 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.168200016 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.168201923 CET	443	49939	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.168247938 CET	49939	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.173878908 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.177447081 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.177520990 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.177531958 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.177748919 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.177766085 CET	443	49941	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.177824020 CET	49941	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.194370985 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.196650982 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.196856022 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.196878910 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.197451115 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.197506905 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.197609901 CET	49940	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.197623014 CET	443	49940	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.241168022 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.246243000 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.246311903 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.246546984 CET	49944	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.246567011 CET	443	49944	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.560386896 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.560421944 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.560436964 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.560475111 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.560509920 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.560530901 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.560554981 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.595021009 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.595669985 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.595698118 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.596479893 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.596484900 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.603471994 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.603497982 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.603585005 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.603598118 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.603640079 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.653564930 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.663949966 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.663994074 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.664201975 CET	49946	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.664218903 CET	443	49946	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.688751936 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.689234018 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.689273119 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.689655066 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.689661026 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.752571106 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.752594948 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.752675056 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.752721071 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.752759933 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.754796982 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.754842997 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.754854918 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.754918098 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.754954100 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.758088112 CET	49937	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:16.758111000 CET	443	49937	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:16.892031908 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.892560005 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.892592907 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:16.893032074 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:16.893037081 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.029393911 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.033005953 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.033087015 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.033143044 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.033164024 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.033174038 CET	49949	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.033180952 CET	443	49949	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.035953045 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.035995960 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.036071062 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.036209106 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.036220074 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.132186890 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.135982037 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.136048079 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.136054039 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.136101007 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.136161089 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.136181116 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.136195898 CET	49951	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.136202097 CET	443	49951	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.138777018 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.138820887 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.138885975 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.139041901 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.139055014 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.149214029 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.149550915 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.149560928 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.149924040 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.150235891 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.150321960 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.150434971 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.191328049 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.194463968 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.194791079 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.194819927 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.195175886 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.195487976 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.195568085 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.195632935 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.227782965 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.228157043 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.228184938 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.228518963 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.228869915 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.228926897 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.229036093 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:17.243321896 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.271337032 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:17.327023983 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.330333948 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.330413103 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.330456972 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.330471992 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.330483913 CET	49952	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.330488920 CET	443	49952	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.333066940 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.333108902 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.333189964 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.333324909 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.333336115 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.584105968 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.592015982 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.592045069 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.595767021 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.595777035 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.664755106 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.676919937 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.676955938 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:17.678968906 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:17.678975105 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.019011974 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.022111893 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.022169113 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.022180080 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.022224903 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.022377014 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.022397041 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.022408009 CET	49953	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.022413969 CET	443	49953	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.025280952 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.025331020 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.025599003 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.026588917 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.026618004 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.108596087 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.111773014 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.111840963 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.111881018 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.111881018 CET	49950	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.111896992 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.111906052 CET	443	49950	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.114504099 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.114545107 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.114617109 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.114753962 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.114765882 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.821907997 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.823570013 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.823613882 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.824043036 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.824048996 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.853492022 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.855051041 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.855072975 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:18.855531931 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:18.855537891 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.114761114 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.115366936 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.115398884 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.115844011 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.115853071 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.266118050 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.269398928 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.269504070 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.269557953 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.269584894 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.269614935 CET	49957	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.269620895 CET	443	49957	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.272434950 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.272479057 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.272564888 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.272749901 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.272763014 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.340922117 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.343914032 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.344002962 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.344084978 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.344104052 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.344115973 CET	49958	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.344121933 CET	443	49958	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.346872091 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.346914053 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.346987963 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.347122908 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.347140074 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.514648914 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.518256903 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.518338919 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.518372059 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.518404007 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.518419981 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.518455029 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.520800114 CET	49956	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.520818949 CET	443	49956	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.527307987 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.531007051 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.531075954 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.531109095 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.531451941 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.531497955 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.531567097 CET	49954	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.531580925 CET	443	49954	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.534935951 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.534974098 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.535037041 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.535269976 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.535279989 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.807977915 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.808585882 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.808614016 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.809057951 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.809062958 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.817446947 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.817497969 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.817514896 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.817596912 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.817655087 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.817676067 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.817678928 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.817727089 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.818800926 CET	49955	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.818820000 CET	443	49955	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.822635889 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.822701931 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.822778940 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.823106050 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:19.823131084 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:19.830270052 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.830714941 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.830770969 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:19.831156969 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:19.831165075 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.253837109 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.257505894 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.257569075 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.257601976 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.257641077 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.257703066 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.257719994 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.257733107 CET	49960	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.257745981 CET	443	49960	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.260448933 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.260545969 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.260633945 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.260776997 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.260821104 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.264873028 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.268126011 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.268205881 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.268239975 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.268239975 CET	49961	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.268259048 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.268271923 CET	443	49961	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.270428896 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.270477057 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.270550966 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.270694971 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:20.270714045 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:20.777970076 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:20.778352022 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:20.778367043 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:20.778724909 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:20.779047966 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:20.779114008 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:20.779171944 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:20.819355965 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.052493095 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.053071976 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.053112030 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.053476095 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.053482056 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.061194897 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.061517000 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:21.061552048 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.064204931 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.064526081 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:21.064614058 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.064665079 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:21.111336946 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:21.129102945 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.129676104 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.129709959 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.130163908 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.130175114 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.497065067 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.501868963 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.501919985 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.502042055 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.502042055 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.504808903 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.504808903 CET	49962	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.504807949 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.504823923 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.504832983 CET	443	49962	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.504843950 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.504935026 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.505089045 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.505105019 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.573272943 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.576181889 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.576284885 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.576309919 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.576323032 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.576333046 CET	49963	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.576338053 CET	443	49963	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.578809977 CET	49969	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.578849077 CET	443	49969	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.578913927 CET	49969	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.579042912 CET	49969	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.579054117 CET	443	49969	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.977993965 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.978640079 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.978682041 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.979342937 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.979348898 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.984993935 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.985347986 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.985383034 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:21.985729933 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:21.985737085 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.414144993 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.417088985 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.417253017 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.417253017 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.417253017 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.420186996 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.420233965 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.420341015 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.420532942 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.420547009 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.728857040 CET	49966	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.728876114 CET	443	49966	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.855786085 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.856132030 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.856301069 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.856301069 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.856301069 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.858939886 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.858973026 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:22.859061956 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.859213114 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:22.859225988 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.072010040 CET	49959	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.072024107 CET	443	49959	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.121923923 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.125230074 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.125413895 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.125435114 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.126116991 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.126178980 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.126245022 CET	49964	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.126255989 CET	443	49964	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.286178112 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.286818027 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.286829948 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.287256002 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.287261009 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.819901943 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.819946051 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.819974899 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.820108891 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.820128918 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.820151091 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.820188999 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.820214987 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.821207047 CET	49965	443	192.168.2.5	138.197.161.216
Dec 4, 2024 12:43:23.821221113 CET	443	49965	138.197.161.216	192.168.2.5
Dec 4, 2024 12:43:23.834924936 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.837954044 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.838022947 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.838068008 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.838084936 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.838093996 CET	49968	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.838099003 CET	443	49968	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.840975046 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.841013908 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:23.841093063 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.841268063 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:23.841281891 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.201824903 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.202500105 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.202531099 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.202874899 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.202881098 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.517925024 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.521030903 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.521136999 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.521178961 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.521195889 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.521209955 CET	49967	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.521214962 CET	443	49967	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.524208069 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.524245977 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.524343967 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.524534941 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.524547100 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.640233994 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.640862942 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.640873909 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.641220093 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.641223907 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.645005941 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.649036884 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.649113894 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.649174929 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.649197102 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.649210930 CET	49970	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.649218082 CET	443	49970	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.653017044 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.653042078 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:24.653117895 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.653280973 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:24.653286934 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.083936930 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.087029934 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.087094069 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.087162018 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.087167978 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.087177992 CET	49971	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.087182045 CET	443	49971	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.089982986 CET	49975	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.090006113 CET	443	49975	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.090075970 CET	49975	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.090208054 CET	49975	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.090221882 CET	443	49975	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.123671055 CET	443	49969	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.124064922 CET	49969	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.124074936 CET	443	49969	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.124551058 CET	49969	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.124555111 CET	443	49969	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.623199940 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.623759985 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.623794079 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:25.624209881 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:25.624217033 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.067858934 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.067887068 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.067939043 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.067940950 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.068192005 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.068218946 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.068248987 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.068248987 CET	49972	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.068259954 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.068269014 CET	443	49972	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.071290016 CET	49976	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.071326971 CET	443	49976	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.071409941 CET	49976	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.071547985 CET	49976	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.071562052 CET	443	49976	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.303993940 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.304976940 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.305037022 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.305433035 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.305438995 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.433872938 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.434355974 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.434391022 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.435082912 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.435101032 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.748934984 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.752043009 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.752095938 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.752157927 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.752157927 CET	49973	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.752180099 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.752192974 CET	443	49973	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.754930019 CET	49977	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.754968882 CET	443	49977	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.755059958 CET	49977	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.755224943 CET	49977	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.755238056 CET	443	49977	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.809341908 CET	443	49975	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.811069012 CET	49975	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.811106920 CET	443	49975	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.811553955 CET	49975	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.811559916 CET	443	49975	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.877871037 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.881287098 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.881339073 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.881385088 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.881407022 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.881418943 CET	49974	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.881424904 CET	443	49974	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.883861065 CET	49978	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.883894920 CET	443	49978	13.107.246.63	192.168.2.5
Dec 4, 2024 12:43:26.883963108 CET	49978	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.884152889 CET	49978	443	192.168.2.5	13.107.246.63
Dec 4, 2024 12:43:26.884167910 CET	443	49978	13.107.246.63	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 4, 2024 12:41:59.831676960 CET	53	55167	1.1.1.1	192.168.2.5
Dec 4, 2024 12:41:59.833437920 CET	53	52613	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:02.534557104 CET	53	63344	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:04.073905945 CET	53289	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:04.074040890 CET	52919	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:04.212882042 CET	53	52919	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:04.216232061 CET	53	53289	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:05.147002935 CET	55486	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:05.147558928 CET	63320	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:06.135137081 CET	53	63320	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:06.136087894 CET	53	55486	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:08.858903885 CET	54909	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:08.859862089 CET	51692	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:09.197192907 CET	53	54909	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:09.197321892 CET	53	51692	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:18.602230072 CET	63422	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:18.602854013 CET	65517	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:18.750864029 CET	53	63422	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:18.752054930 CET	53	65517	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:19.839364052 CET	53	55447	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:22.903261900 CET	60486	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:22.903423071 CET	55459	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:23.043009043 CET	53	55459	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:23.043045044 CET	53	60486	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:26.725557089 CET	61679	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:26.725712061 CET	63991	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:26.869492054 CET	53	61679	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:26.869510889 CET	53	63991	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:28.852401018 CET	56587	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:28.852528095 CET	58690	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:28.993021965 CET	53	56587	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:28.993571043 CET	53	58690	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:29.048948050 CET	49616	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:29.049098015 CET	55530	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:29.192946911 CET	53	49616	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:29.192961931 CET	53	55530	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:34.349062920 CET	54740	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:34.349212885 CET	58560	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:34.493114948 CET	53	54740	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:34.493264914 CET	53	58560	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:38.760497093 CET	53	53587	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:44.414006948 CET	55615	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:44.414381981 CET	55727	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:44.556083918 CET	53	55615	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:44.556243896 CET	53	55727	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:49.956917048 CET	59434	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:49.957046032 CET	52053	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:49.991740942 CET	55868	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:49.991888046 CET	54648	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:50.098121881 CET	53	52053	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:50.098205090 CET	53	59434	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:50.104450941 CET	53	54018	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:50.130208015 CET	53	54648	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:50.130249977 CET	53	55868	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:54.785204887 CET	59723	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:54.785362959 CET	61732	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:54.923065901 CET	53	59723	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:54.924355030 CET	53	61732	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:55.985930920 CET	53010	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:55.986088991 CET	59007	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:42:56.130641937 CET	53	53010	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:56.130700111 CET	53	59007	1.1.1.1	192.168.2.5
Dec 4, 2024 12:42:59.383048058 CET	53	65514	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:00.888394117 CET	59728	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:00.888592958 CET	58257	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:01.030050039 CET	53	59728	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:01.030958891 CET	53	58257	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:01.549400091 CET	53	56640	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:03.554918051 CET	64275	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:03.555233002 CET	64470	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:03.700098991 CET	53	64275	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:03.700131893 CET	53	64470	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:05.973602057 CET	62280	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:05.973984957 CET	56156	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:06.115938902 CET	53	62280	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:06.122816086 CET	53	56156	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:08.704188108 CET	59166	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:08.704359055 CET	55194	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:08.847836018 CET	53	59166	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:08.848143101 CET	53	55194	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:12.455054045 CET	63516	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:12.455200911 CET	61350	53	192.168.2.5	1.1.1.1
Dec 4, 2024 12:43:12.593139887 CET	53	63516	1.1.1.1	192.168.2.5
Dec 4, 2024 12:43:12.593780041 CET	53	61350	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 4, 2024 12:42:04.073905945 CET	192.168.2.5	1.1.1.1	0xb8c6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:04.074040890 CET	192.168.2.5	1.1.1.1	0x4e58	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:05.147002935 CET	192.168.2.5	1.1.1.1	0x48fa	Standard query (0)	lcatterton.adobesign.gr.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:05.147558928 CET	192.168.2.5	1.1.1.1	0xca1	Standard query (0)	lcatterton.adobesign.gr.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:08.858903885 CET	192.168.2.5	1.1.1.1	0xa501	Standard query (0)	documents.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:08.859862089 CET	192.168.2.5	1.1.1.1	0x50ab	Standard query (0)	documents.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:18.602230072 CET	192.168.2.5	1.1.1.1	0x5fab	Standard query (0)	d40a4b89-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:18.602854013 CET	192.168.2.5	1.1.1.1	0x7a06	Standard query (0)	d40a4b89-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:22.903261900 CET	192.168.2.5	1.1.1.1	0x3aa8	Standard query (0)	d40a4b89-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:22.903423071 CET	192.168.2.5	1.1.1.1	0x5b6a	Standard query (0)	d40a4b89-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:26.725557089 CET	192.168.2.5	1.1.1.1	0xf34c	Standard query (0)	50bc8e2d-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:26.725712061 CET	192.168.2.5	1.1.1.1	0x57eb	Standard query (0)	50bc8e2d-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:28.852401018 CET	192.168.2.5	1.1.1.1	0xfae3	Standard query (0)	f09d56ac-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:28.852528095 CET	192.168.2.5	1.1.1.1	0x5efe	Standard query (0)	f09d56ac-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:29.048948050 CET	192.168.2.5	1.1.1.1	0x82ab	Standard query (0)	l1ve.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:29.049098015 CET	192.168.2.5	1.1.1.1	0xdc1e	Standard query (0)	l1ve.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:34.349062920 CET	192.168.2.5	1.1.1.1	0xf61a	Standard query (0)	dc7f6cce-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:34.349212885 CET	192.168.2.5	1.1.1.1	0xb12e	Standard query (0)	dc7f6cce-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:44.414006948 CET	192.168.2.5	1.1.1.1	0xd170	Standard query (0)	67c8fb70-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:44.414381981 CET	192.168.2.5	1.1.1.1	0x983a	Standard query (0)	67c8fb70-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:49.956917048 CET	192.168.2.5	1.1.1.1	0xc694	Standard query (0)	7aea1062-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:49.957046032 CET	192.168.2.5	1.1.1.1	0xa75b	Standard query (0)	7aea1062-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:49.991740942 CET	192.168.2.5	1.1.1.1	0x158e	Standard query (0)	documents.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:49.991888046 CET	192.168.2.5	1.1.1.1	0x5aa3	Standard query (0)	documents.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:54.785204887 CET	192.168.2.5	1.1.1.1	0x3ac0	Standard query (0)	7aea1062-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:54.785362959 CET	192.168.2.5	1.1.1.1	0x2c77	Standard query (0)	7aea1062-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:42:55.985930920 CET	192.168.2.5	1.1.1.1	0xbe59	Standard query (0)	8add78d1-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:55.986088991 CET	192.168.2.5	1.1.1.1	0xeea0	Standard query (0)	8add78d1-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:43:00.888394117 CET	192.168.2.5	1.1.1.1	0x9ae0	Standard query (0)	8aa4dccd-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:00.888592958 CET	192.168.2.5	1.1.1.1	0x19c9	Standard query (0)	8aa4dccd-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:43:03.554918051 CET	192.168.2.5	1.1.1.1	0x9de9	Standard query (0)	8add78d1-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:03.555233002 CET	192.168.2.5	1.1.1.1	0x7edd	Standard query (0)	8add78d1-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:43:05.973602057 CET	192.168.2.5	1.1.1.1	0x10e7	Standard query (0)	8aa4dccd-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:05.973984957 CET	192.168.2.5	1.1.1.1	0x2d6b	Standard query (0)	8aa4dccd-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:43:08.704188108 CET	192.168.2.5	1.1.1.1	0xb756	Standard query (0)	098ace20-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:08.704359055 CET	192.168.2.5	1.1.1.1	0xb118	Standard query (0)	098ace20-59b1754a.wyr-law.com	65	IN (0x0001)	false
Dec 4, 2024 12:43:12.455054045 CET	192.168.2.5	1.1.1.1	0x3042	Standard query (0)	098ace20-59b1754a.wyr-law.com	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:12.455200911 CET	192.168.2.5	1.1.1.1	0xb23a	Standard query (0)	098ace20-59b1754a.wyr-law.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Dec 4, 2024 12:42:04.212882042 CET	1.1.1.1	192.168.2.5	0x4e58	No error (0)	www.google.com		65	IN (0x0001)	false
Dec 4, 2024 12:42:04.216232061 CET	1.1.1.1	192.168.2.5	0xb8c6	No error (0)	www.google.com	142.250.181.68	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:06.136087894 CET	1.1.1.1	192.168.2.5	0x48fa	No error (0)	lcatterton.adobesign.gr.com	216.246.46.135	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:09.197192907 CET	1.1.1.1	192.168.2.5	0xa501	No error (0)	documents.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:18.750864029 CET	1.1.1.1	192.168.2.5	0x5fab	No error (0)	d40a4b89-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:23.043045044 CET	1.1.1.1	192.168.2.5	0x3aa8	No error (0)	d40a4b89-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:26.869492054 CET	1.1.1.1	192.168.2.5	0xf34c	No error (0)	50bc8e2d-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:28.993021965 CET	1.1.1.1	192.168.2.5	0xfae3	No error (0)	f09d56ac-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:29.192946911 CET	1.1.1.1	192.168.2.5	0x82ab	No error (0)	l1ve.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:34.493114948 CET	1.1.1.1	192.168.2.5	0xf61a	No error (0)	dc7f6cce-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:44.556083918 CET	1.1.1.1	192.168.2.5	0xd170	No error (0)	67c8fb70-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:50.098205090 CET	1.1.1.1	192.168.2.5	0xc694	No error (0)	7aea1062-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:50.130249977 CET	1.1.1.1	192.168.2.5	0x158e	No error (0)	documents.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:54.923065901 CET	1.1.1.1	192.168.2.5	0x3ac0	No error (0)	7aea1062-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:42:56.130641937 CET	1.1.1.1	192.168.2.5	0xbe59	No error (0)	8add78d1-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:01.030050039 CET	1.1.1.1	192.168.2.5	0x9ae0	No error (0)	8aa4dccd-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:03.700098991 CET	1.1.1.1	192.168.2.5	0x9de9	No error (0)	8add78d1-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:06.115938902 CET	1.1.1.1	192.168.2.5	0x10e7	No error (0)	8aa4dccd-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:08.847836018 CET	1.1.1.1	192.168.2.5	0xb756	No error (0)	098ace20-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false
Dec 4, 2024 12:43:12.593139887 CET	1.1.1.1	192.168.2.5	0x3042	No error (0)	098ace20-59b1754a.wyr-law.com	138.197.161.216	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

lcatterton.adobesign.gr.com

umwatson.events.data.microsoft.com

fs.microsoft.com

documents.wyr-law.com

https:

d40a4b89-59b1754a.wyr-law.com

l1ve.wyr-law.com

dc7f6cce-59b1754a.wyr-law.com

67c8fb70-59b1754a.wyr-law.com

7aea1062-59b1754a.wyr-law.com

8add78d1-59b1754a.wyr-law.com

8aa4dccd-59b1754a.wyr-law.com

098ace20-59b1754a.wyr-law.com

otelrules.azureedge.net

slscr.update.microsoft.com

50bc8e2d-59b1754a.wyr-law.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49716	20.231.128.66	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:03 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4775 Host: login.live.com
2024-12-04 11:42:03 UTC	4775	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-12-04 11:42:04 UTC	653	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Wed, 04 Dec 2024 11:41:03 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" FdrTelemetry: &481=21&59=33&213=10&215=0&315=1&215=0&315=1&214=56&288=16.0.30405.9 Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C543_BL2 x-ms-request-id: 70e6facb-15e7-4746-85a3-2962e701389c PPServer: PPV: 30 H: BL02EPF0001D94B V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Wed, 04 Dec 2024 11:42:02 GMT Connection: close Content-Length: 11410
2024-12-04 11:42:04 UTC	11410	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:05 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-04 11:42:06 UTC	478	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Server: Kestrel ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-OSID: 2 X-CID: 2 X-CCC: GB Cache-Control: public, max-age=94523 Date: Wed, 04 Dec 2024 11:42:05 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	216.246.46.135	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:07 UTC	712	OUT	GET /ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm HTTP/1.1 Host: lcatterton.adobesign.gr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:08 UTC	669	IN	HTTP/1.1 302 Found Connection: close expires: Wed, 11 Jan 1984 05:00:00 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 content-type: text/html; charset=UTF-8 link: <https://www.motonivel.com/wp-json/>; rel="https://api.w.org/" location: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 content-length: 0 date: Wed, 04 Dec 2024 11:42:08 GMT server: LiteSpeed alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49720	20.42.73.29	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:07 UTC	178	OUT	POST /Telemetry.Request HTTP/1.1 Connection: Keep-Alive User-Agent: MSDW MSA_DeviceTicket_Error: 0x80004004 Content-Length: 5110 Host: umwatson.events.data.microsoft.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49723	23.218.208.109	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:07 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-12-04 11:42:08 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=234953 Date: Wed, 04 Dec 2024 11:42:07 GMT Content-Length: 55 Connection: close X-CID: 2
2024-12-04 11:42:08 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49724	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:10 UTC	784	OUT	GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:11 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:11 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-04 11:42:11 UTC	16203	IN	Data Raw: 37 37 66 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 51 35 28 51 2c 73 29 7b 76 61 72 20 6c 3d 61 30 51 34 28 29 3b 72 65 74 75 72 6e 20 61 30 51 35 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 77 29 7b 78 3d 78 2d 30 78 61 63 3b 76 61 72 20 49 3d 6c 5b 78 5d 3b 72 65 74 75 72 6e 20 49 3b 7d 2c 61 30 51 35 28 51 2c 73 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 51 34 28 29 7b 76 61 72 20 72 33 3d 5b 27 61 76 61 69 6c 54 6f 70 27 2c 27 74 6f 53 74 72 69 6e 67 27 2c 27 64 65 62 75 67 27 2c 27 7a 78 42 6d 71 27 2c 27 23 66 66 32 27 2c 27 2e Data Ascii: 77f6<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0Q5(Q,s){var l=a0Q4();return a0Q5=function(x,w){x=x-0xac;var I=l[x];return I;},a0Q5(Q,s);}function a0Q4(){var r3=['availTop','toString','debug','zxBmq','#ff2','.
2024-12-04 11:42:12 UTC	14515	IN	Data Raw: 6e 6c 6f 27 2c 27 53 65 72 69 66 61 27 2c 27 72 71 6d 56 6d 27 2c 27 77 4c 53 76 54 27 2c 27 65 76 65 6e 6f 64 64 27 2c 27 23 73 75 62 73 63 72 69 62 65 5f 70 6f 70 75 70 27 2c 27 43 6c 61 72 65 6e 64 6f 6e 27 2c 27 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 27 2c 27 4c 76 4a 6b 4d 27 2c 27 73 65 6e 64 27 2c 27 23 61 63 2d 6c 72 65 2d 70 6c 61 79 65 72 27 2c 27 72 61 6e 67 65 4d 61 78 27 2c 27 67 7a 49 5a 74 27 2c 27 6c 6f 67 27 2c 27 64 65 66 61 75 6c 74 27 2c 27 27 2c 27 4e 61 4e 27 2c 27 23 53 53 70 6f 74 49 4d 50 6f 70 53 6c 69 64 65 72 27 2c 27 77 65 62 64 72 69 76 65 72 27 2c 27 4d 65 69 72 79 6f 5c 78 32 30 55 49 27 2c 27 43 6c 6f 75 64 66 6c 61 72 65 2d 57 6f 72 6b 65 72 73 27 2c 27 6f 66 66 73 65 74 48 65 69 67 68 74 27 2c 27 64 6f 63 75 6d 65 6e Data Ascii: nlo','Serifa','rqmVm','wLSvT','evenodd','#subscribe_popup','Clarendon','createTextNode','LvJkM','send','#ac-lre-player','rangeMax','gzIZt','log','default','','NaN','#SSpotIMPopSlider','webdriver','Meiryo\x20UI','Cloudflare-Workers','offsetHeight','documen
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 63 38 30 33 0d 0a 34 61 30 29 29 3f 77 63 28 30 78 32 34 65 29 3a 6c 5a 28 77 63 28 30 78 33 32 62 29 29 3f 77 63 28 30 78 31 66 32 29 3a 6c 5a 28 77 63 28 30 78 31 37 31 29 29 3f 77 63 28 30 78 62 34 29 3a 6c 5a 28 77 63 28 30 78 32 36 34 29 29 3f 77 63 28 30 78 33 65 66 29 3a 6c 58 5b 27 42 75 6e 27 5d 26 26 77 63 28 30 78 31 37 38 29 3d 3d 74 79 70 65 6f 66 20 42 75 6e 5b 77 63 28 30 78 33 35 36 29 5d 3f 77 63 28 30 78 32 34 65 29 3a 6c 58 5b 77 63 28 30 78 32 34 36 29 5d 26 26 77 63 28 30 78 61 66 29 3d 3d 74 79 70 65 6f 66 20 44 65 6e 6f 5b 77 63 28 30 78 33 35 36 29 5d 3f 77 63 28 30 78 62 34 29 3a 27 70 72 6f 63 65 73 73 27 3d 3d 3d 6c 42 28 6c 58 5b 27 70 72 6f 63 65 73 73 27 5d 29 3f 77 63 28 30 78 33 65 66 29 3a 6c 58 5b 77 63 28 30 78 33 66 32 Data Ascii: c8034a0))?wc(0x24e):lZ(wc(0x32b))?wc(0x1f2):lZ(wc(0x171))?wc(0xb4):lZ(wc(0x264))?wc(0x3ef):lX['Bun']&&wc(0x178)==typeof Bun[wc(0x356)]?wc(0x24e):lX[wc(0x246)]&&wc(0xaf)==typeof Deno[wc(0x356)]?wc(0xb4):'process'===lB(lX['process'])?wc(0x3ef):lX[wc(0x3f2
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 3f 6c 58 3d 7b 7d 3a 6c 4c 26 26 28 6c 58 3d 6c 4f 28 6c 58 29 29 2c 6c 46 28 6c 58 5b 6c 47 5d 29 7c 7c 6c 56 28 6c 58 2c 6c 47 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 29 2c 6c 6a 5b 49 74 28 30 78 64 31 29 5d 3d 7b 27 49 74 65 72 61 74 6f 72 50 72 6f 74 6f 74 79 70 65 27 3a 6c 58 2c 27 42 55 47 47 59 5f 53 41 46 41 52 49 5f 49 54 45 52 41 54 4f 52 53 27 3a 6c 50 7d 3b 7d 2c 30 78 31 61 37 37 3a 66 75 6e 63 74 69 6f 6e 28 6c 6a 29 7b 76 61 72 20 49 65 3d 61 30 51 35 3b 6c 6a 5b 49 65 28 30 78 64 31 29 5d 3d 7b 7d 3b 7d 2c 30 78 31 62 33 30 3a 66 75 6e 63 74 69 6f 6e 28 6c 6a 2c 6c 59 2c 6c 52 29 7b 76 61 72 20 6c 58 3d 6c 52 28 30 78 32 30 38 34 29 3b 6c 6a 5b 27 65 78 70 6f 72 74 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ?lX={}:lL&&(lX=lO(lX)),lF(lX[lG])\|\|lV(lX,lG,function(){return this;}),lj[It(0xd1)]={'IteratorPrototype':lX,'BUGGY_SAFARI_ITERATORS':lP};},0x1a77:function(lj){var Ie=a0Q5;lj[Ie(0xd1)]={};},0x1b30:function(lj,lY,lR){var lX=lR(0x2084);lj['exports']=function(
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 61 29 5d 26 26 28 6c 42 2b 3d 27 76 27 29 2c 6c 72 5b 6d 35 28 30 78 32 62 31 29 5d 26 26 28 6c 42 2b 3d 27 79 27 29 2c 6c 42 3b 7d 3b 7d 2c 30 78 32 36 30 38 3a 66 75 6e 63 74 69 6f 6e 28 6c 6a 2c 6c 59 2c 6c 52 29 7b 76 61 72 20 6d 36 3d 61 30 51 35 2c 6c 58 3d 6c 52 28 30 78 37 30 66 29 2c 6c 72 3d 6c 52 28 30 78 31 36 37 62 29 2c 6c 42 3d 6c 52 28 30 78 31 32 63 66 29 2c 6c 5a 3d 6c 52 28 30 78 31 39 66 64 29 2c 6c 46 3d 52 65 67 45 78 70 5b 6d 36 28 30 78 63 34 29 5d 3b 6c 6a 5b 27 65 78 70 6f 72 74 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 6c 4a 29 7b 76 61 72 20 6d 37 3d 6d 36 2c 6c 4f 3d 6c 4a 5b 27 66 6c 61 67 73 27 5d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 78 30 21 3d 3d 6c 4f 7c 7c 27 66 6c 61 67 73 27 69 6e 20 6c 46 7c 7c 6c 72 28 6c 4a 2c 6d Data Ascii: a)]&&(lB+='v'),lr[m5(0x2b1)]&&(lB+='y'),lB;};},0x2608:function(lj,lY,lR){var m6=a0Q5,lX=lR(0x70f),lr=lR(0x167b),lB=lR(0x12cf),lZ=lR(0x19fd),lF=RegExp[m6(0xc4)];lj['exports']=function(lJ){var m7=m6,lO=lJ['flags'];return void 0x0!==lO\|\|'flags'in lF\|\|lr(lJ,m
2024-12-04 11:42:12 UTC	2059	IN	Data Raw: 5b 5e 5c 6e 5c 72 5d 2a 5b 5c 6e 5c 72 5d 2b 29 2a 28 5b 5e 5c 73 28 2f 5d 2a 29 2f 2c 6c 6f 3d 6c 42 28 6c 4f 5b 7a 4f 28 30 78 32 37 38 29 5d 29 3b 6c 58 26 26 21 6c 72 26 26 6c 5a 28 6c 46 2c 7a 4f 28 30 78 32 36 65 29 2c 7b 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 27 3a 21 30 78 30 2c 27 67 65 74 27 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 7a 6f 3d 7a 4f 3b 74 72 79 7b 72 65 74 75 72 6e 20 6c 6f 28 6c 4f 2c 6c 4a 28 74 68 69 73 29 29 5b 30 78 31 5d 3b 7d 63 61 74 63 68 28 6c 56 29 7b 72 65 74 75 72 6e 20 7a 6f 28 30 78 32 62 35 29 3d 3d 3d 7a 6f 28 30 78 32 62 35 29 3f 27 27 3a 51 49 28 51 5a 28 7a 6f 28 30 78 31 35 36 29 29 29 3b 7d 7d 7d 29 3b 7d 65 6c 73 65 7b 76 61 72 20 6c 54 3d 51 42 5b 51 47 5d 3b 72 65 74 75 72 6e 20 51 57 28 6c 54 5b 27 Data Ascii: [^\n\r][\n\r]+)([^\s(/]*)/,lo=lB(lO[zO(0x278)]);lX&&!lr&&lZ(lF,zO(0x26e),{'configurable':!0x0,'get':function(){var zo=zO;try{return lo(lO,lJ(this))[0x1];}catch(lV){return zo(0x2b5)===zo(0x2b5)?'':QI(QZ(zo(0x156)));}}});}else{var lT=QB[QG];return QW(lT['
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 6c 76 29 2c 6c 66 3d 6c 66 25 6c 76 2a 30 78 39 38 39 36 38 30 3b 7d 7d 2c 6c 70 3d 66 75 6e 63 74 69 6f 6e 28 6c 6b 29 7b 76 61 72 20 7a 64 3d 7a 50 3b 66 6f 72 28 76 61 72 20 6c 76 3d 30 78 36 2c 6c 79 3d 27 27 3b 2d 2d 6c 76 3e 3d 30 78 30 3b 29 69 66 28 27 27 21 3d 3d 6c 79 7c 7c 30 78 30 3d 3d 3d 6c 76 7c 7c 30 78 30 21 3d 3d 6c 6b 5b 6c 76 5d 29 7b 69 66 28 27 78 44 64 4e 76 27 21 3d 3d 27 78 44 64 4e 76 27 29 74 68 69 73 5b 7a 64 28 30 78 31 34 33 29 5d 3d 6c 56 2c 74 68 69 73 5b 7a 64 28 30 78 33 65 63 29 5d 3d 51 5a 3b 65 6c 73 65 7b 76 61 72 20 6c 66 3d 6c 6f 28 6c 6b 5b 6c 76 5d 29 3b 6c 79 3d 27 27 3d 3d 3d 6c 79 3f 6c 66 3a 6c 79 2b 6c 54 28 27 30 27 2c 30 78 37 2d 6c 66 5b 7a 64 28 30 78 33 39 65 29 5d 29 2b 6c 66 3b 7d 7d Data Ascii: 8000lv),lf=lf%lv*0x989680;}},lp=function(lk){var zd=zP;for(var lv=0x6,ly='';--lv>=0x0;)if(''!==ly\|\|0x0===lv\|\|0x0!==lk[lv]){if('xDdNv'!=='xDdNv')this[zd(0x143)]=lV,this[zd(0x3ec)]=QZ;else{var lf=lo(lk[lv]);ly=''===ly?lf:ly+lT('0',0x7-lf[zd(0x39e)])+lf;}}
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 6c 73 65 7b 76 61 72 20 78 64 2c 78 70 3d 6c 76 28 74 68 69 73 29 2c 78 6b 3d 78 70 5b 6a 4c 28 30 78 31 37 38 29 5d 2c 78 76 3d 78 70 5b 6a 4c 28 30 78 32 63 33 29 5d 3b 72 65 74 75 72 6e 20 78 76 3e 3d 78 6b 5b 6a 4c 28 30 78 33 39 65 29 5d 3f 6c 68 28 76 6f 69 64 20 30 78 30 2c 21 30 78 30 29 3a 28 78 64 3d 78 34 28 78 6b 2c 78 76 29 2c 78 70 5b 6a 4c 28 30 78 32 63 33 29 5d 2b 3d 78 64 5b 6a 4c 28 30 78 33 39 65 29 5d 2c 6c 4d 28 78 64 2c 21 30 78 31 29 29 3b 7d 7d 7d 3b 72 65 74 75 72 6e 20 6c 4a 26 26 78 7a 26 26 78 59 28 78 34 2c 78 6f 2c 7b 27 63 6f 6e 66 69 67 75 72 61 62 6c 65 27 3a 21 30 78 30 2c 27 73 65 74 27 3a 78 56 7d 29 2c 78 52 28 78 6f 2c 78 4f 29 3b 7d 2c 6c 63 28 78 36 3d 78 35 5b 78 31 5d 2c 27 74 6f 53 74 72 69 6e 67 27 2c 66 75 6e Data Ascii: lse{var xd,xp=lv(this),xk=xp[jL(0x178)],xv=xp[jL(0x2c3)];return xv>=xk[jL(0x39e)]?lh(void 0x0,!0x0):(xd=x4(xk,xv),xp[jL(0x2c3)]+=xd[jL(0x39e)],lM(xd,!0x1));}}};return lJ&&xz&&xY(x4,xo,{'configurable':!0x0,'set':xV}),xR(xo,xO);},lc(x6=x5[x1],'toString',fun
2024-12-04 11:42:12 UTC	8	IN	Data Raw: 20 6c 70 3d 3d 3d 0d 0a Data Ascii: lp===
2024-12-04 11:42:12 UTC	16384	IN	Data Raw: 64 33 37 32 0d 0a 51 66 7c 7c 6c 70 3d 3d 3d 51 69 5b 59 59 28 30 78 32 37 38 29 5d 3f 51 4f 26 26 21 6c 50 3f 7b 27 64 6f 6e 65 27 3a 21 30 78 30 2c 27 76 61 6c 75 65 27 3a 51 70 28 51 76 2c 51 4a 2c 51 45 2c 51 50 29 7d 3a 7b 27 64 6f 6e 65 27 3a 21 30 78 30 2c 27 76 61 6c 75 65 27 3a 51 6b 28 51 48 2c 51 7a 2c 51 56 2c 51 6d 29 7d 3a 7b 27 64 6f 6e 65 27 3a 21 30 78 31 7d 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6c 70 29 7b 76 61 72 20 6c 6b 3d 44 61 74 65 5b 27 6e 6f 77 27 5d 28 29 3b 51 77 28 6c 4d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 59 52 3d 61 30 51 35 3b 66 6f 72 28 76 61 72 20 6c 76 3d 5b 5d 2c 6c 79 3d 30 78 30 3b 6c 79 3c 61 72 67 75 6d 65 6e 74 73 5b 59 52 28 30 78 33 Data Ascii: d372Qf\|\|lp===Qi[YY(0x278)]?QO&&!lP?{'done':!0x0,'value':Qp(Qv,QJ,QE,QP)}:{'done':!0x0,'value':Qk(QH,Qz,QV,Qm)}:{'done':!0x1};}else return new Promise(function(lp){var lk=Date['now']();Qw(lM,function(){var YR=a0Q5;for(var lv=[],ly=0x0;ly<arguments[YR(0x3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:14 UTC	1069	OUT	POST /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive Content-Length: 5249 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://documents.wyr-law.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:14 UTC	5249	OUT	Data Raw: 68 75 61 6d 73 73 36 3d 25 35 42 25 35 42 25 32 32 32 35 33 33 34 33 36 64 36 31 37 34 37 39 36 66 25 32 32 25 32 43 25 32 32 37 30 37 65 32 35 33 33 34 36 36 63 36 65 32 35 25 32 32 25 32 43 25 32 32 33 37 34 34 34 34 32 35 33 37 34 33 32 35 34 33 25 32 32 25 32 43 25 32 32 33 32 32 35 33 38 33 34 36 38 33 30 33 33 33 37 25 32 32 25 32 43 25 32 32 33 33 33 33 33 34 33 36 33 37 33 33 33 34 33 35 25 32 32 25 32 43 25 32 32 33 34 33 38 33 30 33 38 33 36 33 32 25 32 32 25 35 44 25 32 43 25 32 32 30 33 37 33 33 34 36 37 33 34 25 32 32 25 32 43 25 32 32 35 34 37 32 30 35 36 25 32 32 25 32 43 38 25 35 44 26 79 70 6b 72 6a 73 30 70 61 6c 68 31 3d 25 35 42 25 35 42 25 32 32 32 35 33 33 34 33 36 62 37 38 32 35 33 33 34 32 37 30 37 31 33 33 36 39 32 25 32 32 25 32 Data Ascii: huamss6=%5B%5B%222533436d6174796f%22%2C%22707e2533466c6e25%22%2C%223744442537432543%22%2C%223225383468303337%22%2C%223333343637333435%22%2C%22343830383632%22%5D%2C%220373346734%22%2C%225472056%22%2C8%5D&ypkrjs0palh1=%5B%5B%222533436b78253342707133692%22%2
2024-12-04 11:42:15 UTC	507	IN	HTTP/1.1 302 Found Server: nginx Date: Wed, 04 Dec 2024 11:42:15 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 set-cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; Domain=wyr-law.com; HttpOnly; Path=/; SameSite=None; Secure
2024-12-04 11:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49727	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:15 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:15 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:15 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Cache-Control: public Last-Modified: Tue, 03 Dec 2024 18:21:00 GMT ETag: "0x8DD13C73D7EC056" x-ms-request-id: 85afd668-301e-0052-47c3-4565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114215Z-1746fd949bddtfvqhC1EWRxbpg000000013g0000000048c9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:15 UTC	15913	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-12-04 11:42:15 UTC	16384	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 Data Ascii: /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" /> </L> <R> <V V="400" T="I32" />
2024-12-04 11:42:15 UTC	16384	IN	Data Raw: 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 33 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 68 75 74 64 6f 77 6e 22 20 2f 3e 0d Data Ascii: .0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-7813" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryShutdown" />
2024-12-04 11:42:15 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 31 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 46 69 6c 65 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 38 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 Data Ascii: </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32" I="11" O="true" N="File_Count"> <S T="8" F="Count" /> </C>
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 52 65 73 75 6c 74 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 32 22 20 2f 3e 0d 0a 20 Data Ascii: <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Count_CreateResult_ValidPersona_False"> <C> <S T="12" />
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6c 65 61 6e 75 70 4d 73 6f 50 65 72 73 6f 6e 61 5f 49 4d 73 6f 50 65 72 73 6f 6e Data Ascii: Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C> </C> <C T="U32" I="21" O="false" N="CleanupMsoPersona_IMsoPerson
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 Data Ascii: <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="400"
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 46 61 69 6c 65 64 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 Data Ascii: </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIntegrationFirstCallFailedCount"> <C> <S T="10" /> </C
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 66 61 6c 73 65 22 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L> <R> <V V="false" T="B" /> </R>
2024-12-04 11:42:16 UTC	16384	IN	Data Raw: 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 Data Ascii: us" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <L> <S T="2" F="HttpStatus" /> </L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49726	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:15 UTC	1077	OUT	GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:18 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/html; charset=utf-8 Content-Length: 55723 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 898ba4af-702f-4486-a9f7-92a60ecb2000 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:18 UTC	15605	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 bc bd 69 5b 22 c9 b6 30 fa bd 7f 85 72 fa 0a b9 45 25 19 15 2b db 03 8a 55 96 03 2a 5a 6a d1 6c df 1c 02 4d 85 4c cc 04 15 ab 7c 7f fb 5d 43 44 0e 08 d5 7d f7 e9 73 f7 7e ba cc 8c 8c 61 c5 8a 15 6b 8e e0 d3 f2 5e 7b f7 e2 e6 b4 b5 74 3f 1e 0e fe f8 ed 13 ff 59 fa 74 2f 4c 07 fe 2e 7d 1a bb e3 81 c0 a7 a5 73 e1 b8 81 b0 c7 ae 77 87 1f 36 a2 2f 9f 86 62 6c 2e d9 be 37 16 de d8 c8 8c c5 eb 78 03 fb d9 5e b2 ef cd 20 14 63 63 32 ee af 6d 66 60 8c f1 68 4d 3c 4d dc 67 23 b3 cb d5 d7 2e a6 23 91 d9 98 d3 cd 41 cb 10 ce 9d 48 b7 ba 5e bb 6c ac ed fa c3 91 39 76 ad c1 fc 86 2f ae 33 be 37 1c f1 ec da 62 8d 5e f2 4b ae e7 8e 5d 73 b0 16 da e6 40 18 fa 7a 21 bf 34 34 5f dd e1 64 28 8b 8a 58 34 09 45 40 ef 26 f4 6d 4c 45 98 59 f2 cc a1 Data Ascii: i["0rE%+U*ZjlML\|]CD}s~ak^{t?Yt/L.}sw6/bl.7x^ cc2mf`hM<Mg#.#AH^l9v/37b^K]s@z!44_d(X4E@&mLEY
2024-12-04 11:42:18 UTC	14460	IN	Data Raw: c7 6a b7 37 c8 49 c7 76 8e 9c 96 87 5c 42 16 0b 6d 90 43 e9 e0 bf 8f a7 19 30 f0 a5 62 01 6c 63 7e ac 82 f6 a1 ca f5 5a 45 95 17 e1 31 2e 77 fa 71 b9 19 97 17 ab 66 d4 4f 11 43 2e a7 3c 5a 11 ec 4d 50 6f 54 1a 65 f4 0b 28 cd 89 c7 15 88 a0 92 00 c8 86 44 90 2b 2b 5c a7 5a 89 3c 01 4b 78 90 e8 43 53 82 85 9f 80 b2 d9 9d 81 fb 4c e5 78 f7 66 60 cb f2 e9 b8 6c 8f b7 63 94 4d df db 89 0e 8a cb ee fa 96 64 58 45 b0 fa 17 92 c4 45 4c 12 17 d8 aa b0 45 16 39 3d 6f c5 76 26 10 43 22 d6 86 71 62 6e fe 0d aa e6 39 82 cc 59 54 7d f6 be a2 29 08 5c f7 1b a9 8b 15 f4 4c 01 57 3d 8b 8c ee f8 21 ee d5 91 5d 7e 36 bc 6f db 14 65 ce a1 8d e8 40 f7 39 30 13 d1 ab 87 6e a0 a7 1d 78 eb 7a 9f 73 32 db 20 a7 c5 83 87 5c ce 23 02 8c 80 b1 be 74 62 63 d3 3e 6e a0 a7 0f 6c 3d d5 Data Ascii: j7Iv\BmC0blc~ZE1.wqfOC.<ZMPoTe(D++\Z<KxCSLxf`lcMdXEELE9=ov&C"qbn9YT})\LW=!]~6oe@90nxzs2 \#tbc>nl=
2024-12-04 11:42:18 UTC	16384	IN	Data Raw: c8 99 11 56 4e 6e 46 56 98 e3 9a a8 5a 6e 3b 02 51 de 87 ce 11 31 b0 a7 78 62 4b 76 94 76 72 13 d0 3b 41 3b 49 65 54 c8 d7 86 2e 05 40 71 9e a3 7d 26 06 11 06 0d 25 76 04 8e 38 d0 4e 62 d1 95 98 bc 63 cc e9 03 6a 49 ea 14 20 3e 83 4e 92 dc 8a 20 a8 01 f8 9b e8 e5 18 d7 ac 45 0b ea 49 73 9e c5 22 34 eb 2b 6e 80 66 91 5a 82 8b 3a 8e 4d 82 40 e5 e9 ad 4e 28 6f 60 e0 a6 5d f0 62 a5 1c 35 30 3b 8c a1 86 05 ba b6 12 2e 75 dc 0c e3 cd d5 d5 78 93 3f c3 23 1c 5c 69 36 03 f0 6f 69 82 53 8b bc 8c e9 25 46 86 06 87 16 95 00 a8 94 e0 d4 02 94 80 85 26 fd 21 8c b7 c8 ec 0b 9c 53 3e 04 f1 4d b8 b2 52 88 db b2 9e 76 df 4b e4 76 78 10 a8 06 41 f5 07 17 56 02 17 3d d9 ba 53 00 ec bc 8c 6e 07 d7 62 30 15 63 56 af 07 f1 0f 4b 93 f3 c4 4b ae 12 ce cb 41 7c a9 cd 5f 57 00 4c Data Ascii: VNnFVZn;Q1xbKvvr;A;IeT.@q}&%v8NbcjI >N EIs"4+nfZ:M@N(o`]b50;.ux?#\i6oiS%F&!S>MRvKvxAV=Snb0cVKKA\|_WL
2024-12-04 11:42:18 UTC	9274	IN	Data Raw: f6 24 92 47 0e 7e c1 55 c7 03 36 f8 39 52 7b d6 f7 e3 a9 88 ae b6 5f 7e 5e 8e ae 05 ee 12 6e 19 0b c6 7c dd 7a b7 b2 12 9e c0 c0 23 6c 67 3f da f6 55 25 ca d4 d8 0e 65 c6 fc 48 63 17 50 3c 6f e5 08 37 c3 c6 c2 5a 0f f3 42 1e 5f 23 97 0f c8 e2 d1 81 ff d9 48 e5 1b 5b 20 14 04 3a 1a 07 c6 8e 72 d0 38 37 4b 2e 4a 19 28 92 11 5f 3b 52 5b ca 91 53 f5 cc 77 23 eb bb 36 9a 31 6f a1 b9 2a 3d 27 15 88 60 d9 b7 23 23 fc 09 5a b3 3a da 14 16 c4 25 88 94 9c a2 db a6 e8 13 bb 49 b2 39 58 2b 96 d7 46 73 ef 5a 15 1d aa d4 10 d8 a5 74 14 b7 96 73 a2 a0 be e0 80 4e 14 47 38 66 ed b1 19 0b d4 e5 24 cd 1c b9 52 d7 35 85 53 ad ab e1 56 7f ce 30 ea f7 2e 83 2b 17 c1 bd 92 28 29 f2 e6 20 c5 e0 ff 53 91 c3 4c 91 c3 82 a3 64 70 0b d4 64 c0 20 6c eb bd de 26 74 47 32 12 50 cf 3b Data Ascii: $G~U69R{_~^n\|z#lg?U%eHcP<o7ZB_#H[ :r87K.J(_;R[Sw#61o*='`##Z:%I9X+FsZtsNG8f$R5SV0.+() SLdpd l&tG2P;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:15 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2S+VsBzpLc3SnZW&MD=f1444XW7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-04 11:42:16 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1030766c-f009-4398-988f-253acc773250 MS-RequestId: 55846076-3904-4466-8aa0-e341b1897ae4 MS-CV: zyBbYuwc70GXJDUG.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Dec 2024 11:42:15 GMT Connection: close Content-Length: 24490
2024-12-04 11:42:16 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-12-04 11:42:16 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49735	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:18 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 667c147a-501e-0016-34cc-45181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114218Z-1746fd949bdjrnwqhC1EWRpg2800000001ag000000000nz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:18 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49731	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:18 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: c4831996-901e-0016-39ce-45efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114218Z-1746fd949bdl6zq5hC1EWRf3ws00000000wg000000002r85 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:18 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49732	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:18 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 40031d31-601e-005c-53c5-45f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114218Z-1746fd949bdw2rg8hC1EWR11u400000001e000000000484s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:18 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49733	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:18 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:18 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 115d5b31-c01e-0046-4bcb-452db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114218Z-1746fd949bdw2rg8hC1EWR11u400000001dg00000000501d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:18 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49734	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:18 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:18 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:18 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 9ac3d201-201e-0000-03c5-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114218Z-1746fd949bdb8xvchC1EWRmbd400000001100000000083h7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:18 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49744	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:19 UTC	636	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://documents.wyr-law.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:22 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: application/x-javascript Content-Length: 49914 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 0ed820e2-301e-0060-0ac3-40bfc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114221Z-164dd7df5997xbb9hC1YTOdqsw0000000a60000000002v2e x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:22 UTC	6408	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-04 11:42:22 UTC	16384	IN	Data Raw: b8 93 0b e3 93 6d 51 1f f3 82 23 17 ce bf e2 7e 71 4b ea cb f6 73 aa cf 17 94 5c 26 d2 bc b9 50 35 4b 2d 01 19 43 a7 ab ee 7f b9 b2 9c de 4f f5 2d 2c d7 63 27 c6 11 9e 8d 11 e4 82 85 94 40 01 c9 5f 00 ea 2e 27 55 19 18 b0 e2 26 60 ed df 51 26 2e e7 69 af 55 03 a4 7d 0d 05 d7 42 2e 38 7f ff d3 25 70 dd d2 d4 ac 01 30 b3 e8 0d d0 5e f5 06 20 f7 63 da 39 ef 6f 28 b3 2e 31 3c 8f 72 d3 07 a8 3d 8e c6 52 6a 74 f5 17 72 c3 b1 2f 6e 61 7d 03 15 8d a8 57 45 0f 92 e7 ae 2c 0e 4b ba a5 ac 88 7e 3a 59 24 4f a8 7b 81 bb 06 71 7d 96 f0 37 98 5b 69 a2 f1 61 ea a2 e0 35 60 42 ff 5d 68 76 ab 14 a5 a7 05 65 f8 b8 2b 7f 5c d7 62 03 73 8e 63 bf d6 04 c9 b3 0e 42 c3 31 4c 93 67 af 70 7d 9d ea f4 97 6b 0b 4d 2b 78 a5 b6 70 55 6d b2 a9 7f bd 3a 6c bf aa f0 2f 74 44 4e 1c cf 1c Data Ascii: mQ#~qKs\&P5K-CO-,c'@_.'U&`Q&.iU}B.8%p0^ c9o(.1<r=Rjtr/na}WE,K~:Y$O{q}7[ia5`B]hve+\bscB1Lgp}kM+xpUm:l/tDN
2024-12-04 11:42:22 UTC	15472	IN	Data Raw: 98 94 41 da 45 c9 13 08 24 a5 bc e0 97 40 00 63 3c ce c2 e2 12 4b 24 29 fe 3d 77 a7 7e f2 b4 cf d1 ab 91 63 b8 d3 47 f7 29 c6 51 ec 22 51 82 0e c2 1e f2 7d e7 39 0d 99 b2 9b d6 28 0c d1 1a 85 27 26 19 78 60 75 d0 6e d2 be c6 aa a1 10 4f 9c 75 4e 9c e5 8f 97 b6 23 d2 fa af e7 3a 72 23 e6 74 0c fa 23 6f c3 1c 3b 01 3f 1d 12 89 d1 e3 64 c4 7b 3c 7f 1e b1 d0 1a d6 8f 38 a0 d4 f0 d8 ff 60 30 5c 6c 2e 67 21 0d e2 cc 7b 18 f3 5a 86 27 61 a7 64 0c f8 63 dd f7 9f 13 ad dc 06 b5 91 74 32 62 45 08 7d 1b 55 d9 18 d5 38 33 6b 70 43 f5 a2 2a 13 a1 8f 69 0f 65 ff 54 57 54 d7 a4 68 2b 34 66 9a 73 73 ab 32 42 0f b0 cc e1 26 e6 e3 98 f0 d9 a4 da ce f5 de 90 4f 92 1b 6e f5 4d ab 5f ff 37 bf c8 75 90 be f3 fc ef bc 10 17 f5 0b e7 59 ee 7f bb bc 5e 60 d4 cd d8 69 2e ac 58 11 Data Ascii: AE$@c<K$)=w~cG)Q"Q}9('&x`unOuN#:r#t#o;?d{<8`0\l.g!{Z'adct2bE}U83kpC*ieTWTh+4fss2B&OnM_7uY^`i.X
2024-12-04 11:42:22 UTC	11650	IN	Data Raw: b9 99 b5 84 24 97 bf 4f 85 3d cb 79 25 37 ce 11 9d 78 89 1c be 43 fd 08 8a 47 2d 1e 9a 4d c3 3a 06 9e fe 1f c1 67 40 2a d7 78 88 70 52 50 a0 4e ac 8f 2d 14 a4 93 62 8a 4c 32 a9 c0 38 aa e6 ac b9 dd b3 d3 b5 ab c2 0c e0 c7 da da df 67 fd 05 d3 b3 2c 2f 92 23 22 2a 49 25 a5 9b 69 cf 7b 05 58 19 2b c4 12 33 42 be a1 ec 2b b8 f9 b2 74 e2 97 76 54 86 76 f2 69 dc 54 be 3e 54 fa 98 ee 23 7d 10 9b b9 9d 93 13 cf ef 74 96 b7 55 c7 d9 36 ef 71 b0 34 e7 35 e7 89 05 3c f2 36 7c 60 8e 1c dd 68 7f 90 b3 59 c7 da bc c3 de 11 6e 0b dc 7c d6 86 6d 6d 2e 39 99 df 34 3b 4f 88 93 1e cc 8b fc 92 38 d4 d6 b2 44 76 10 39 a9 e2 16 8e 28 fb 8a 0b 94 83 ab d6 be d7 5d d3 5e 07 37 ff 30 41 9e bc b6 b8 26 4e 7d 0c 6e 07 c1 ac b9 c4 25 59 d3 2c 9c d1 c8 b7 87 1b e6 51 d6 e2 87 99 bb Data Ascii: $O=y%7xCG-M:g@xpRPN-bL28g,/#"I%i{X+3B+tvTviT>T#}tU6q45<6\|`hYn\|mm.94;O8Dv9(]^70A&N}n%Y,Q

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49736	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:20 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:20 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 4628c04c-d01e-0017-18cc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114220Z-1746fd949bdtlp5chC1EWRq1v4000000011g0000000079r4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:20 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49738	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:20 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:20 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: c2908fd4-501e-00a0-4ac8-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114220Z-1746fd949bd6zq92hC1EWRry480000000160000000002es7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:20 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49737	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:20 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:20 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: d3611829-901e-007b-22c2-45ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114220Z-1746fd949bdw2rg8hC1EWR11u400000001g0000000001rtv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:20 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49742	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:20 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:20 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 4a622c55-e01e-0099-7fc1-45da8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114220Z-1746fd949bdxk6n6hC1EWRdr8c00000000wg000000008x4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:20 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49743	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:20 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:20 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:20 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: dbf49064-101e-00a2-1bc6-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114220Z-1746fd949bddgsvjhC1EWRum2c00000001fg000000002ydr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:20 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.5	49745	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:22 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 2b878731-501e-008c-34ce-45cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114222Z-1746fd949bd77mkmhC1EWR5efc00000001e0000000004e72 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49746	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:22 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: c2a94a43-501e-00a0-7dd0-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114222Z-1746fd949bdqpttnhC1EWRe1wg00000000xg000000004asm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49748	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:22 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 864f0b94-901e-00a0-42cc-456a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114222Z-1746fd949bd54zxghC1EWRzre400000001a0000000009ffq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:22 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49749	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:22 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:22 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6223bc78-401e-0015-38b6-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114222Z-1746fd949bdjrnwqhC1EWRpg280000000140000000007znh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:22 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49747	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:22 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:23 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:22 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 6818e2c2-d01e-0065-16d2-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114222Z-1746fd949bd54zxghC1EWRzre400000001h000000000080f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:23 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49750	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	658	OUT	GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1 Host: documents.wyr-law.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://documents.wyr-law.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ==" Sec-WebSocket-Key: aObg8ZoMINw6jG4yT2VqXQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 11:42:26 UTC	738	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 96f86803-7610-4d3b-ae68-25f353245b00 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49753	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	1109	OUT	GET /?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-04 11:42:28 UTC	779	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 62504 Connection: close cache-control: no-store, no-cache pragma: no-cache vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: d7c808cf-0853-45b2-9d5a-1ae13d551100 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:28 UTC	6441	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd d9 76 22 4b 96 28 f8 7e be 82 a0 4f 45 c0 15 20 e6 41 3a a4 ca 99 24 c4 28 06 8d a5 ab e5 83 01 2e 1c 77 e4 03 83 22 c4 5b 7f 49 3f f4 aa 87 7e eb 3f c8 1f eb bd b7 b9 83 83 a4 c8 c8 ac ac ba ab fa 9e 53 95 21 37 73 1b b6 ed 79 6f 33 37 fe f8 52 e9 94 07 77 dd 6a 60 62 cf b4 bf fc f6 07 fe 09 c8 9a 68 59 c5 60 30 a0 a8 66 31 a8 d9 66 30 a0 89 fa b8 18 64 7a f0 2f bf 05 fe 98 30 51 81 bf 81 3f 6c d5 d6 18 3e 05 fa ea 58 0f a8 7a c0 36 02 6b c3 31 03 a2 2c 1b 8e 6e 63 a3 e3 6d ab 3f 66 cc 16 03 b2 a1 db 4c b7 8b 41 9b ad ec 63 9c f0 34 20 4f 44 d3 62 76 d1 b1 47 d1 7c 10 80 b1 e7 51 f6 e2 a8 8b 62 b0 cc 9b 47 07 eb 39 0b 1e 7f 30 4c bd 5a 64 ca 98 ed f7 ba 8d 0e 85 68 d9 98 cd 45 5b 95 b4 8f 3b 2e 55 c5 9e 14 15 b6 50 65 Data Ascii: v"K(~OE A:$(.w"[I?~?S!7syo37Rwj`bhY`0f1f0dz/0Q?l>Xz6k1,ncm?fLAc4 ODbvG\|QbG90LZdhE[;.UPe
2024-12-04 11:42:29 UTC	16384	IN	Data Raw: 2e 93 01 33 ce 35 66 b3 c3 1d 0f 41 b6 d5 05 ee 33 c0 ea 2d da dd 81 01 45 8d ef b7 b9 56 f6 bc fc 7e af e9 60 2f a2 52 eb e2 36 cd f8 60 0f 83 bf c4 c3 aa cc a4 19 00 98 bd 19 f6 9c 21 1c ba c1 d6 b4 c4 61 b9 eb df 2d d9 5b 21 e7 a4 77 7b 33 7c b2 5a bd d2 29 69 0e b3 0d c3 9e ec 61 0b 5d 35 30 c5 f2 14 48 df d0 0d 79 0a ce 99 60 ad 75 da c9 81 e1 81 f4 60 81 f9 c9 74 82 87 d3 c2 cf c6 65 c5 6f 67 7e fa 51 e8 b1 35 01 fd ac 1c 27 62 f1 63 cf 1f 06 f3 a2 d9 35 11 dc 62 e3 1f 1a c7 fd 6a f1 58 c5 cd 24 eb 78 c4 47 7a 12 9f 98 33 17 d7 a3 f1 78 f2 a2 8a 6a 6e 5a b0 0c 2d ab 8d 93 31 78 ed 45 ff 40 48 73 d0 19 fa a6 5d 2e 97 b3 7d 66 27 99 39 06 7b 85 8e bb 25 8e 4d 86 7b b6 f6 b1 7f 8c ae 09 fc 22 af 7d e3 24 e5 44 5e c9 a7 c5 8f c1 e7 63 ce 79 2f 8a 65 71 Data Ascii: .35fA3-EV~`/R6`!a-[!w{3\|Z)ia]50Hy`u`teog~Q5'bc5bjX$xGz3xjnZ-1xE@Hs].}f'9{%M{"}$D^cy/eq
2024-12-04 11:42:29 UTC	16384	IN	Data Raw: f9 44 cb 00 09 df ff 46 e5 3c fb 47 2a e7 b8 c5 83 9d 8c 9f 55 39 27 1f ff bf 51 39 0f f2 55 ce 93 bf 51 39 c7 49 8e ca f9 90 55 ce c9 21 a9 48 9a 71 11 2a e7 a7 27 7d ac 96 b6 73 e8 fa 7d 4b d7 ef e7 6c e3 7d 57 fc bb b6 d6 da f7 2d f1 d9 75 b4 59 45 ad 91 1c 96 56 13 87 5d a9 8b cf a1 ed a1 08 0a e4 9c aa 17 1d 7c 92 9c 42 fa 84 22 52 d8 12 59 ac bf d2 e0 0b 7b 3e c9 41 46 b4 55 4a 3b 1c 85 8c 50 e9 5f 77 f5 42 5f c9 30 8d 21 6c 60 c1 37 1a dd 0b af bb b8 6f 7a 90 65 6e e3 d0 a0 e7 4a 31 d1 12 e0 11 04 e0 e3 80 74 67 6b 6a 07 64 99 d5 81 fa 82 ca f0 66 d7 e3 13 40 5c bc b7 ef 4e 3f 3c 08 bb a0 ce 3a 0b df 8d 4b fd d6 28 4f 79 09 46 b3 c0 6c aa e7 f5 5b e3 0b 12 0c 67 36 7b b1 7f 3d c0 d9 02 e5 f5 65 b3 35 e4 84 4a 8d f4 9c fc 58 51 23 ab 76 7f 43 ed 75 Data Ascii: DF<GU9'Q9UQ9IU!Hq'}s}Kl}W-uYEV]\|B"RY{>AFUJ;P_wB_0!l`7ozenJ1tgkjdf@\N?<:K(OyFl[g6{=e5JXQ#vCu
2024-12-04 11:42:29 UTC	6328	IN	Data Raw: e8 84 8d 8f 08 bf 13 97 5d 49 80 9a 00 e7 dc 48 7e 48 31 90 42 25 b3 42 32 a0 c2 5a d3 02 05 20 4b 3e d0 cd 8c c8 aa 8a a3 dd 82 ec 3d a9 11 00 56 f7 e1 5f c9 a6 01 f9 cc 1f 0c c8 27 a9 f5 5b 8f 17 d9 e8 81 fb 06 45 a4 4e 4f 13 7a 80 91 90 5d f9 26 fc 69 90 54 8d 9f 4f 06 91 96 54 e9 25 7f c5 4e 6c 5a 5d a7 8c 02 81 86 52 09 70 e2 ed a6 a8 51 d9 ec 7b 14 93 78 69 36 35 fa fd 31 4c 84 dd cf e6 f8 ee ba f7 f9 17 81 fb 2c 50 cb 57 24 16 c2 1a c0 a1 32 1e e1 17 99 53 57 f8 52 56 63 96 ff 15 bb 89 95 10 7a 34 92 e5 fc 16 7d 92 36 77 97 96 93 b6 42 88 44 06 18 ee e9 0c f3 af 60 2d 86 c1 06 9e 2a c5 21 41 22 77 bc c0 86 32 25 82 8d 66 ed 2b 4e ce 08 92 63 e4 ad 19 f3 eb 59 d8 e7 d7 74 87 72 91 64 74 ce 69 ea 3a 2c 78 b5 7a 71 bb 5c bf 9a cd da bd 3b 4f b2 90 ef Data Ascii: ]IH~H1B%B2Z K>=V_'[ENOz]&iTOT%NlZ]RpQ{xi651L,PW$2SWRVcz4}6wBD`-*!A"w2%f+NcYtrdti:,xzq\;O
2024-12-04 11:42:29 UTC	16384	IN	Data Raw: c6 4a 00 7e c8 e8 64 1d 49 22 c7 3e a6 88 40 e4 a3 50 32 96 02 c1 2f ac af 9f b3 b5 03 90 3a 4e d3 9e fa 26 ab 84 42 81 8d da 2e 81 ca 39 fc f1 a1 a2 1a a2 6f 89 c7 3e 53 2c 4a e3 82 a1 1f 36 98 d0 4f 6f f7 f3 9b 93 d3 13 b2 a2 2a 78 bd f7 47 bd dd f7 0c 1b ed 1c bd db 7b f3 ea c3 fb 56 fb ed ae 4a 99 3d a5 4f 0d 1d 18 d5 6e 14 3e 05 08 6d 99 b3 37 66 b4 d8 34 6c 92 ed 0e 4a 18 4c 58 0c 6c 8d 9c 58 c9 ce 04 3b 8c 82 4f d6 d6 bd 80 87 18 57 8b 9c ee 36 44 ad 71 92 47 51 7c d5 58 1c fc 41 2e f2 92 0f 14 b9 ce ec 30 02 93 d2 32 55 3b f5 20 08 54 ce e1 56 91 32 4f fe 50 8f f1 68 44 df 6d 08 9d 72 48 42 a6 69 98 3c 70 76 4a e6 4f 06 f8 84 02 b3 0e 47 a3 91 a2 6c 9a c9 6b 29 52 1d 2f 8d e4 bc 49 f2 5d fa cd 9f 95 49 b8 fb 1b 7f b8 a1 5a f0 1b 57 fb 52 95 15 05 Data Ascii: J~dI">@P2/:N&B.9o>S,J6Oo*xG{VJ=On>m7f4lJLXlX;OW6DqGQ\|XA.02U; TV2OPhDmrHBi<pvJOGlk)R/I]IZWR
2024-12-04 11:42:29 UTC	583	IN	Data Raw: 4e 9a e5 27 53 00 89 c4 57 91 96 52 87 c2 2c 39 f8 77 07 73 80 17 be c2 80 51 2d 20 82 c9 7b 04 5f 60 84 38 92 54 97 09 ec 51 02 c6 12 a3 a2 af 37 31 08 41 5c dc e7 2e 7c 89 ce b2 ec e8 a8 1b 8e e9 c7 2e 05 ed 5b 78 53 1f 4d b5 81 e5 7c 7a 8a da ac 6b 4f a5 8d 93 56 9c 47 c0 7a 7b d3 76 6e 6d 59 da 27 d9 5a 22 a7 14 13 66 b0 b4 c0 4e 47 32 d0 81 50 2c ae 56 5a e9 d2 5d 49 8b 5a 26 cb 90 e2 46 91 e9 d7 c6 79 05 60 d3 8a 49 f6 29 5a 4b 7d 6d b9 68 b6 98 02 d7 af e2 31 64 00 a2 60 70 56 9b 38 42 36 58 79 6e 88 1a d9 17 81 76 2b 36 64 04 38 48 d3 c0 7e c9 38 75 2a ea 04 3e 18 3d 2b 4f 20 e9 1d fe df ec ba e6 91 60 2a 31 1b 6a e7 e5 1f 97 40 6a e1 03 86 0c 5e 09 31 4c 8c 5f 0a 07 a5 95 61 3f ed bf 40 7d 99 5f 62 47 cf d7 93 78 d0 9f cc 9a 2b 67 64 67 b8 0f ef Data Ascii: N'SWR,9wsQ- {_`8TQ71A\.\|.[xSM\|zkOVGz{vnmY'Z"fNG2P,VZ]IZ&Fy`I)ZK}mh1d`pV8B6Xynv+6d8H~8u>=+O `1j@j^1L_a?@}_bGx+gdg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49754	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	879	OUT	GET /favicon.ico HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
2024-12-04 11:42:26 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 9e43713e-f218-46af-b074-e48ad4bda200 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49758	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	539	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:27 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:26 GMT Content-Type: application/x-javascript Content-Length: 49914 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 02 Oct 2024 20:05:23 GMT etag: 0x8DCE31D8CF87EF9 x-ms-request-id: 0ed820e2-301e-0060-0ac3-40bfc9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114226Z-164dd7df599ts7rphC1YTOn4c00000000p00000000003ssq x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:27 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a d2 dd cc 00 61 08 4c cf 2e b0 5c 4e ac 80 a7 83 9d b5 1d 68 06 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 e1 79 ef ec bc 32 f8 58 39 ff 7c 78 76 50 39 85 b7 7f 54 4e 06 e7 87 fb fd 1f af 07 3f 8a ff 9f df f9 71 65 e2 4f 45 05 7e 47 6e 2c bc 4a 18 54 c2 a8 e2 07 e3 30 9a 85 91 9b 88 b8 72 0f 7f 23 df 9d 56 26 51 78 5f 49 ee 44 65 16 85 7f 88 71 12 57 a6 7e 9c 40 a1 91 98 86 8f 95 2a 54 17 79 95 53 37 4a 9e 2a 87 a7 66 1d ea 17 50 9b 7f eb 07 50 7a 1c ce 9e e0 f9 2e a9 04 61 e2 8f 45 c5 0d 3c aa 6d 0a 2f 41 2c 2a f3 c0 13 51 e5 f1 ce 1f df 55 8e fd 71 14 c6 e1 24 a9 44 62 2c Data Ascii: m[80OL;waL.\Nhr~=,JUT~l?y2X9\|xvP9TN?qeOE~Gn,JT0r#V&Qx_IDeqW~@TyS7JfPPz.aE<m/A,*QUq$Db,
2024-12-04 11:42:27 UTC	16379	IN	Data Raw: bb c1 2d e7 3a e4 2e 0f 1c 3f ec f7 b2 c9 db 28 dd cc d1 4c 37 e2 e0 a4 92 6e 40 a2 b7 36 eb 2d 7c 92 06 ef 2f a1 e7 ed 92 e3 03 90 2d b8 c9 12 7d 25 f9 d8 04 b9 bc 55 92 d9 94 f2 4a 8b 0d 9e cd 71 7b 0f de 82 95 d3 39 ce 04 9e bd 43 1a 07 3e e0 59 bf 67 e2 41 a8 73 30 56 ec 10 a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 24 51 da 2b 6d ae c3 c3 92 e6 30 2c 47 e2 16 a7 d6 2d 0d 94 23 88 9f 18 2d 1f 22 de b2 95 e2 e1 43 fe 2a 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 84 f2 53 69 1c da 46 ac bd 01 17 40 95 be ca ba cf 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 4f 2f 48 25 ed 0b d8 5c e1 21 97 5b fb 1f 06 67 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc Data Ascii: -:.?(L7n@6-\|/-}%UJq{9C>YgAs0Vu';Gph$Q+m0,G-#-"C"F^y9SiF@^xN4I UNyFtO/H%\![g$R$qpnd2}I~:5:
2024-12-04 11:42:27 UTC	16384	IN	Data Raw: 21 8e 35 1a b7 9a e4 dc 28 4f bb d5 b3 1e de 0b ea 16 41 1b a5 00 df 57 0c 24 86 83 7d c9 fe 67 bf 70 0b 5f 7c 46 a6 15 f8 c6 b7 15 40 7a 58 06 aa 2b 02 2d 82 b7 17 37 62 d1 21 41 fa 06 ae 13 f9 05 2b 11 ce 05 71 04 79 45 7d 81 20 b9 51 38 40 78 ac de b0 96 ca e2 66 a4 29 aa d5 60 be 56 dd 52 2e 53 6b ce b7 0b a1 f1 53 d8 4c 0f 9d d5 a1 cd 5f b5 0d 52 9a cb 49 4a c2 1b 6d 83 7c 92 8f fe 12 4f ba 2a 99 02 81 d1 66 f9 f2 dc f7 2d c9 9e 62 15 37 68 e3 3f 6b 42 81 a8 85 9f 42 04 f6 f3 19 f6 82 b5 44 24 55 b3 0a 64 e5 11 67 a2 f3 c9 6b df c5 e9 cf 4f f0 a3 fb 94 11 3a 0e 22 b8 64 3d 37 cd 92 f2 cf 5a d4 a4 9d 57 5a a4 b5 86 e8 cd 7e 78 25 c4 db 48 a6 01 0e cf 44 6d 1e 01 75 6e a4 75 00 c8 1c 32 c2 51 f5 1a 27 95 8f f5 58 f9 ab b6 90 f1 69 94 cf 64 af 1d a9 f7 Data Ascii: !5(OAW$}gp_\|F@zX+-7b!A+qyE} Q8@xf)`VR.SkSL_RIJm\|O*f-b7h?kBBD$UdgkO:"d=7ZWZ~x%HDmunu2Q'Xid
2024-12-04 11:42:27 UTC	1579	IN	Data Raw: ed c9 bb 08 77 1f ed 3f fe f3 fe f7 7f fa e1 f1 b7 f5 11 1c b7 b3 8c cc 42 e7 bb 6f 93 e4 d1 f7 8f e3 dd 1f 1e ed 45 bb 8f a7 df fd b0 fb 43 fc ed de 6e f4 a7 bd 6f f7 bf 9b 3e fa d3 f7 df fe c9 21 56 2a a1 73 b5 22 36 2a 23 82 5f 10 0b 95 13 07 45 ac c1 34 dc 23 56 89 cf dd 43 f9 73 20 7f 5e b4 9c 77 af 8d 67 49 29 10 e0 c8 15 a9 ed 3b 92 92 2a e3 9c 8d c0 46 cc b2 64 81 cc 1a b8 d4 b4 e8 55 0c 7f 1c dc 01 ac 1e 8d 0d fb 85 08 80 da 98 73 ae 71 ea 45 50 6c 47 82 34 de 49 4a 31 f1 9a 03 bf 49 12 b0 63 62 35 70 ed 81 0e d6 5e 10 2e 3d 9d 25 e9 55 12 0f 94 ee 8a bd b6 e4 1b 03 67 98 7a 2a d7 dc d5 71 71 32 56 da 4a fc f6 b7 d0 96 d2 cd 4d fb 59 89 ca ba ae 8d 75 94 bf 6b c4 3e 81 40 a6 cd e0 09 e5 d5 a2 06 85 44 f1 7a 3c 82 e1 70 ea 63 30 82 84 98 7f 38 31 Data Ascii: w?BoECno>!Vs"6#_E4#VCs ^wgI);FdUsqEPlG4IJ1Icb5p^.=%Ugzqq2VJMYuk>@Dz<pc081

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49751	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:24 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: b5189c33-801e-008c-34cb-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114224Z-1746fd949bdkw94lhC1EWRxuz400000001d000000000150y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:25 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49752	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:24 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 16655d81-601e-0084-07c4-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114224Z-1746fd949bdjrnwqhC1EWRpg28000000014g0000000076ve x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:25 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.5	49756	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:24 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 431871c3-501e-0047-55cc-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114224Z-1746fd949bdjrnwqhC1EWRpg28000000019g000000001vts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:25 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.5	49759	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:25 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 9b0204ab-501e-0047-62c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114225Z-1746fd949bd7wvgbhC1EWR0rgs000000015g000000006fu7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:25 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49757	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:24 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:25 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:24 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: de914170-201e-0000-68ad-45a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114224Z-1746fd949bd77mkmhC1EWR5efc00000001c0000000006g9a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:25 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49760	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:26 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:27 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 1b86d58a-f01e-0071-54ce-45431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114227Z-1746fd949bdlqd7fhC1EWR6vt000000001e00000000000a6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:27 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49761	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:26 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:27 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: dbf7ebc2-101e-00a2-0ac7-459f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114227Z-1746fd949bdhk6hphC1EWRaw3c00000000wg000000005t91 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:27 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49762	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:26 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:27 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 1e40fce6-401e-0078-1bd2-454d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114227Z-1746fd949bd54zxghC1EWRzre400000001dg000000005pg4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:27 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49764	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:26 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:27 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: c29bf332-501e-00a0-0ccb-459d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114227Z-1746fd949bdhk6hphC1EWRaw3c00000000xg000000004wu8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:27 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.5	49763	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:27 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:27 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:27 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 76d3483c-401e-00a3-2bcc-458b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114227Z-1746fd949bd4w8sthC1EWR700400000000y0000000003t6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:27 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49765	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:28 UTC	429	OUT	OPTIONS /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 50bc8e2d-59b1754a.wyr-law.com Connection: keep-alive Origin: https://documents.wyr-law.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:30 UTC	336	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:30 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding access-control-allow-headers: content-type access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-12-04 11:42:30 UTC	12	IN	Data Raw: 37 0d 0a 4f 50 54 49 4f 4e 53 0d 0a Data Ascii: 7OPTIONS
2024-12-04 11:42:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49766	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:29 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:29 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 167d53f1-601e-0084-47cc-456b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114229Z-1746fd949bd77mkmhC1EWR5efc00000001f00000000038zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:29 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49769	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:29 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:29 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 490c4061-c01e-000b-75c3-45e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114229Z-1746fd949bd2cq7chC1EWRnx9g00000000sg000000005xxd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:29 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49767	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:29 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: e4103400-101e-008e-08d4-45cf88000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114229Z-1746fd949bddgsvjhC1EWRum2c00000001ag000000008pkq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:29 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49768	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:29 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:29 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: daea1f5e-401e-005b-68d1-459c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114229Z-1746fd949bd54zxghC1EWRzre400000001b00000000091c7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:29 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49770	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:29 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:29 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:29 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 8c022bf0-601e-0070-5bcb-45a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114229Z-1746fd949bdw2rg8hC1EWR11u400000001a0000000008ze6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:29 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49772	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:30 UTC	661	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_nin8k2ycrbzww8zl5vxkaq2.css HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://documents.wyr-law.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:32 UTC	796	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:32 GMT Content-Type: text/css Content-Length: 20400 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 25 Sep 2024 21:42:27 GMT etag: 0x8DCDDAAF34D1A25 x-ms-request-id: 5baf686f-201e-001e-24dd-402f8e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114231Z-164dd7df599dn5tkhC1YTOvec00000000p2g000000003dwg x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:32 UTC	15588	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 db 36 b2 e8 77 ff 0a ee a4 52 eb c9 4a 8c 48 3d 47 53 49 ad e3 78 93 39 c7 af b2 9d 7d 54 2a b5 c5 91 a8 11 8f 29 51 97 a4 66 3c ab a3 ff 7e f1 46 03 68 90 d4 78 b2 d9 7b 2b eb 8d 2d a2 1b 0d a0 d1 68 a0 81 6e e0 eb af fe 10 3c 2f 76 f7 65 76 b3 ae 83 a7 cf cf 83 57 d9 a2 2c aa 62 55 93 f4 72 57 94 49 9d 15 db 30 78 96 e7 01 43 aa 82 32 ad d2 f2 36 5d 86 c1 57 5f 7f fd d5 1f 9e f4 bb ff 2f 78 ff e1 d9 bb 0f c1 9b bf 04 1f 7e bc 7a f7 7d f0 96 7c fd 23 78 fd e6 c3 d5 f3 17 41 67 2a 4f 9e 7c 58 67 55 b0 ca f2 34 20 ff 5e 27 55 ba 0c 8a 6d 50 94 41 b6 5d 88 5a a7 55 b0 21 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 b4 21 cf aa 9a 64 ba 4e f3 e2 2e 78 4a c8 95 cb e0 6d 52 d6 f7 c1 d5 db f3 30 f8 40 70 0b d2 Data Ascii: }k6wRJH=GSIx9}T)Qf<~Fhx{+-hn</vevW,bUrWI0xC26]W_/x~z}\|#xAgO\|XgU4 ^'UmPA]ZU!Y:ve?!dN.xJmR0@p
2024-12-04 11:42:32 UTC	4812	IN	Data Raw: 75 4c ff b4 b4 67 78 ce 2b 2b 6e 13 d6 17 0b 8b ca ba c2 a2 2a 8b 88 bd ac 2c 12 31 2f 2a 2b 24 e5 a1 95 75 9e df 51 bb 5f 6a 19 63 dc bc c9 45 89 b5 70 47 5d 70 ca fb 9e 0e 20 56 49 be 20 69 14 01 46 49 a3 08 a2 a9 10 de 51 33 ab ab 42 ad 3a 03 51 82 c9 86 58 21 80 b6 66 35 88 5b 0b 1a d2 44 af 18 0e 06 e3 65 32 71 db a4 25 ce 20 03 a5 0f 01 b4 b6 c9 2f 95 2d 68 58 9b 7c d2 ca db f4 30 61 ec 73 a7 f6 1e b8 a8 5b 0e 36 f1 85 8e 36 04 a6 86 1b 02 93 e3 0d 14 66 70 df 93 6e 56 08 83 b4 76 40 43 45 db f0 b0 2e 10 57 99 1b 46 0a 7a 9a 6c 5e eb 5b 91 85 43 fa 34 bc 98 9d 23 97 02 03 20 96 48 ba 89 37 5f 87 50 e3 87 e3 60 22 80 5b d9 23 19 93 28 7f 18 bb 0c ee 13 f6 9e b3 cc 4f 7d b0 93 e5 be fa 81 1c e1 db 81 87 f8 c3 85 9e 97 26 d9 ad e4 e2 f9 d0 f9 26 d9 66 Data Ascii: uLgx++n,1/+$uQ_jcEpG]p VI iFIQ3B:QX!f5[De2q% /-hX\|0as[66fpnVv@CE.WFzl^[C4# H7_P`"[#(O}&&f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49773	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:30 UTC	638	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://documents.wyr-law.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:33 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: application/x-javascript Content-Length: 122334 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 23 Oct 2024 19:33:27 GMT etag: 0x8DCF399919435D9 x-ms-request-id: 7e363f7c-101e-001d-1cc3-40b955000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114231Z-164dd7df5995ks78hC1YTOzszw0000000peg000000003md8 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:33 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 b8 b2 38 fa ff fd 14 c1 7b 5f 26 19 4c 3a ce 8b c4 b4 87 13 02 74 b3 07 08 43 a0 67 f6 a1 d9 2c c7 56 82 07 c7 ce b1 1d 1e 3b e4 7c f6 5f 55 49 b2 e5 c4 a1 bb e7 9c 75 ef ba eb ee 47 13 4b a5 57 a9 54 aa 2a 95 4a 1f 7e de fa bf 4a 3f 97 76 bf ff 3f a5 e1 75 ef ea ba 34 38 29 5d 7f 3e bd 3a 2a 5d c2 d7 3f 4b 17 83 eb d3 fe f1 f7 d7 83 8d e2 ff af 1f bc b8 34 f6 7c 56 82 bf 23 3b 66 6e 29 0c 4a 61 54 f2 02 27 8c 66 61 64 27 2c 2e 4d e1 df c8 b3 fd d2 38 0a a7 a5 e4 81 95 66 51 f8 27 73 92 b8 e4 7b 71 02 85 46 cc 0f 9f 4b 65 a8 2e 72 4b 97 76 94 bc 96 4e 2f 2b 55 a8 9f 41 6d de c4 0b a0 b4 13 ce 5e e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 79 e0 b2 a8 f4 fc e0 39 0f a5 73 cf 89 c2 38 1c 27 a5 88 39 Data Ascii: {W8{_&L:tCg,V;\|_UIuGKWTJ~J?v?u48)]>:]?K4\|V#;fn)JaT'fad',.M8fQ's{qFKe.rKvN/+UAm^CRsX\ fy9s8'9
2024-12-04 11:42:33 UTC	16384	IN	Data Raw: 06 5b 5f 6a 1f b2 d6 bb ac 14 df 6c ed 40 25 12 b0 c7 b7 08 6b 4d 3c 80 35 07 c2 4a aa 54 db 4a ed d6 56 4d b7 ab 0c 7d 21 30 f6 cc 77 aa 82 a0 91 48 c1 3b 2b 6b 79 a0 25 00 07 7e c2 e3 85 72 45 48 dd e5 45 c0 2f fb 6b b6 ff 6c bf c6 da b2 02 0d e2 6e 00 e3 1d cc b0 43 31 e0 c5 26 2e e3 44 de 28 df 7f a5 fe 0c a2 9c 09 b4 80 02 90 7e ca fc 84 3a e1 4e 06 65 b5 d0 8c b1 c7 32 57 5e 71 c2 d0 42 36 9d e1 a5 19 ee 00 62 15 ed 39 c0 53 00 70 90 0d 86 65 15 56 be 61 72 da cf ec 1b 9e 74 90 7e 6f da 74 34 01 18 68 02 10 2a 3f 48 df e2 1e 76 36 63 f1 4a 39 d4 df d1 47 04 14 a6 23 3b 7a cc 22 26 ec 7b 2b 9e 6f 87 e8 8f 45 be 84 78 11 64 35 f7 77 f4 cb 52 72 d7 ea b3 6c 14 9b d0 d3 98 6e cf 5c e0 4d 73 d8 43 aa 2e 40 65 29 89 ae d0 2d ac f1 68 83 fb 1d b3 a2 6a 91 Data Ascii: [_jl@%kM<5JTJVM}!0wH;+ky%~rEHE/klnC1&.D(~:Ne2W^qB6b9SpeVart~ot4h*?Hv6cJ9G#;z"&{+oExd5wRrln\MsC.@e)-hj
2024-12-04 11:42:33 UTC	16384	IN	Data Raw: 0b 0e 5c 95 09 a9 15 32 5e f4 42 33 de 32 61 56 cb c8 ca 04 55 6d 04 53 e6 18 48 2a 9a 32 49 20 8c 08 c9 2c 84 50 e1 94 49 00 61 04 47 f6 bf 70 e0 57 ff 01 fe 0e 0f b2 f7 69 86 e8 72 9f f9 69 ef 06 06 6e bf ef 9f c0 e3 14 a1 f7 64 20 e6 a7 27 7a e6 cc 32 30 b3 7f 66 66 92 4d b3 32 1a f1 97 fd 7d ce 8c 10 75 40 f5 4d 6f fd 37 90 10 b5 db 0f e8 53 99 4e 6e 05 e5 3a e0 5c ef 80 f4 86 63 29 39 e8 8f fd 1d 6c 19 fb a5 1d c6 77 30 04 02 77 54 31 a9 1f 59 7a f4 00 7c ec e7 6e 02 7b 59 2f 0d c2 bd 87 29 07 06 9b b8 02 64 a8 7a a3 28 f9 ec 20 af 59 ce 68 1e 20 f8 f6 b4 34 9d 95 f7 da 32 c6 7e 53 5e 06 a5 e8 e2 0b 43 cc 34 84 b3 37 53 8e e1 95 f8 e3 0a 1f eb 31 41 6f d4 07 e0 ff 47 5f a2 87 cc 99 a9 f2 65 04 f9 1e 50 d5 b0 72 c4 30 4e d0 23 be 07 6f 55 04 f9 3b 12 Data Ascii: \2^B32aVUmSH*2I ,PIaGpWirind 'z20ffM2}u@Mo7SNn:\c)9lw0wT1Yz\|n{Y/)dz( Yh 42~S^C47S1AoG_ePr0N#oU;
2024-12-04 11:42:34 UTC	16384	IN	Data Raw: 18 c6 7a c9 85 ad 99 a1 88 c3 c5 d8 26 9e 4c 05 e7 ee df 88 c1 74 24 26 41 d6 fc 30 e5 50 81 2c cc 12 13 4b 0f c5 52 87 7a e3 7b ad 80 03 06 b8 5c 08 19 8e f0 6f 38 89 1e 23 ad 28 65 80 01 63 1a 92 42 c7 2d 05 74 28 f3 4f 1d c4 71 49 bc a0 0f 3c 41 9a d0 89 93 a1 b7 b4 74 83 8a 93 46 a5 51 ac a3 71 bc af e9 80 ca db 49 9a d5 d2 43 ab 79 35 ef 65 0c ab 92 99 98 b5 fb d0 b2 4a a2 94 b9 14 56 a9 9c b9 04 5a 33 cf 88 4a 90 61 d4 1f b5 f6 6b 31 12 0f 49 d4 d4 b3 89 b5 c2 b9 01 0b 35 14 3e 70 fe 50 2f a1 8a 59 1f bb 62 39 8c 96 63 ef 87 30 05 6e ed 35 22 be e4 04 c2 c8 68 5f 13 91 91 a0 f8 4c a0 a4 fd 3a a8 dc c3 f1 72 aa ed 94 ad 15 87 ac e2 29 62 a0 e9 03 03 57 36 6d c1 24 32 53 74 83 f9 55 f3 8f 9e f5 76 32 4d de 44 93 d1 83 7c 7b 4a 7b f7 2c 0a c9 88 2c cf Data Ascii: z&Lt$&A0P,KRz{\o8#(ecB-t(OqI<AtFQqICy5eJVZ3Jak1I5>pP/Yb9c0n5"h_L:r)bW6m$2StUv2MD\|{J{,,
2024-12-04 11:42:34 UTC	16384	IN	Data Raw: d0 0c 44 97 19 b0 8f 6b 1b ae 76 c9 d4 de 9f 85 75 42 3b 97 53 75 56 25 70 ad 1b b5 60 26 9b 34 8d 63 59 33 bc ab 3b ec 9f c3 d2 c3 92 1d ff e3 d3 c9 9a c3 de 7e 0e 62 b9 17 0b 0d 1c 22 7b 76 56 61 11 53 27 db 04 89 66 7f 86 83 45 3b f7 66 08 3a 83 d7 2a 9b 67 9b a1 64 38 9e b4 4f 9f 8a 78 7a 9b 10 51 35 05 68 47 b7 df c2 4e b8 a0 8d 55 73 83 e5 35 73 38 72 6d ac bb f6 06 88 8d 47 15 c0 d1 fb 5d ae c1 95 4f 34 31 08 0c 54 7d c1 3f b5 43 79 b7 23 f9 57 f9 06 c3 f8 5c 33 f6 16 34 ba 63 b7 44 f8 b8 0c f3 75 68 41 d3 d6 e1 a6 c6 80 e2 f0 ab d7 1d 3e 8b b6 94 11 4c cf ca 75 8f e1 42 ae e5 10 2e 2c 0f 91 51 4d aa a9 e2 d4 3a 0d c1 2d d3 51 97 42 b7 24 5a c4 61 fb 09 b1 0f 9e 89 b4 a8 d0 ad e4 80 e4 a7 2c 24 2b ac 1c 06 a6 87 09 16 93 55 03 bc 81 9f 96 7a 6b 45 Data Ascii: DkvuB;SuV%p`&4cY3;~b"{vVaS'fE;f:*gd8OxzQ5hGNUs5s8rmG]O41T}?Cy#W\34cDuhA>LuB.,QM:-QB$Za,$+UzkE
2024-12-04 11:42:34 UTC	16384	IN	Data Raw: 0b db 82 79 91 f4 c2 dc 0d e2 30 48 22 8f 47 7e ee c2 86 0d 77 d1 8b 31 2d bd 44 c6 59 90 85 32 cb ed 28 12 59 98 33 df 8d a2 dc f7 44 e6 65 f9 ed ec be d5 be 52 8c 20 0c fc 2c e7 be ef 25 c2 89 72 cf cb e2 cc e6 76 16 60 98 ee 4e e6 cd 58 44 a9 1b f8 d0 50 b2 3c b4 03 0f ac 49 4a 97 87 61 c6 b2 c8 8d 23 68 72 f1 6e 3a 4b 73 cf 66 b1 08 e2 cc 97 59 92 67 32 63 b1 ef d9 b1 0c 32 96 7b b9 27 77 d2 8d 59 26 2e 22 37 8f 60 1f 07 3e 07 2e 04 49 98 f8 91 1b c6 a1 c3 00 46 2d ff b7 ee 2c 65 51 e0 fa 59 1c 79 b1 b4 a5 48 12 16 e5 32 13 2c 8a 73 98 58 3c bf 9d e5 bc da 4d cd 41 53 06 a4 83 8d 0e 7c 03 a7 4a 60 47 4b c6 13 81 37 10 b0 98 c9 dd a0 b9 97 02 cb 04 48 33 f7 78 20 13 cc a1 e3 e4 b6 cc 02 57 e4 b1 97 87 de 6e 70 af e6 f8 a9 9f 48 d7 77 12 ee 32 16 4b cf Data Ascii: y0H"G~w1-DY2(Y3DeR ,%rv`NXDP<IJa#hrn:KsfYg2c2{'wY&."7`>.IF-,eQYyH2,sX<MAS\|J`GK7H3x WnpHw2K
2024-12-04 11:42:34 UTC	16384	IN	Data Raw: 6d ff 4f 3e b0 fc f3 27 1f f8 93 0f a8 3f 9f e7 03 d7 25 e1 67 f5 9e 43 87 78 f5 59 a5 c5 07 ed c8 ed d0 ad f8 00 2a 2c b8 b9 fb 60 5b 0b de 6c 79 fc 07 90 f5 45 a3 01 b6 28 ca bc dc 39 2b 38 2d ce 09 67 80 82 e2 49 39 7f d9 d7 77 7f 91 4d b6 7f bd 10 75 06 c3 3a 5f 7b a7 bd fe 22 9f b3 ec af b0 e9 af 52 84 e9 26 82 85 96 1e dd da ed 0f 9b 57 e2 f1 b2 54 63 9f 76 97 65 bd c4 15 36 03 95 22 54 30 68 ff 48 56 bc d3 e0 a6 42 3b 65 bf 75 cc d2 3f ce aa 42 9f 2e 50 e2 bd 78 a4 5f ab 2d e9 fa b6 8a bd c9 64 b2 47 04 1f 8d c6 ad f7 e3 e7 b0 1c 28 cc e3 d9 cf 8f ee f5 11 5b 3d 7b f3 17 9d 0b 4e d6 30 ba fb 79 23 cd 55 fa f8 66 67 9e ea 97 1b bd 16 53 72 d8 33 1d 64 d0 aa d7 fe b0 a9 bf 3a e7 e6 8f 8c 76 d1 97 eb 6a 4c ef 2e 1c 9f 29 bc 69 dd ca f9 49 b9 30 3c 73 Data Ascii: mO>'?%gCxY*,`[lyE(9+8-gI9wMu:_{"R&WTcve6"T0hHVB;eu?B.Px_-dG([={N0y#UfgSr3d:vjL.)iI0<s
2024-12-04 11:42:34 UTC	8464	IN	Data Raw: 6e 4b 2f a0 f2 32 26 da 9b 29 0d 08 03 1d 50 09 50 7b 8d 95 ed 30 65 19 4e ff 15 2d 63 f8 16 2d 43 1a 48 4d fb 19 de a2 f9 80 3f 03 20 91 34 5f 9d 44 fb 0f 8e 8b d6 7c 4b 5c 0c cf cd 0e 1e 5e a2 3a 12 05 73 12 63 36 32 9a 46 5d fb 65 4a 83 fa 6a df c0 5f 9f 2e c5 d9 35 ec f7 38 99 13 50 bf 0a 0f 4f c2 c5 32 d5 7e cc 4a 9e 7f 80 95 42 78 81 76 13 84 da 6f f8 e2 08 a3 81 f1 bb 68 c2 2e f2 82 1e 5c 69 ff 98 52 63 1b 1d ed 19 6c 5e 9f a2 d8 d3 7e 67 0f 7f 24 e9 69 48 30 f0 31 a2 92 f6 13 7b 7a fe 21 58 fc 3b f5 b4 bf e3 20 8f d2 cf da 3f e9 68 01 72 6e f1 1e a4 f6 2f 78 11 54 30 49 fb 37 96 7f 4b 30 60 cf 51 04 3a 81 9b f2 14 ac 1a 21 d2 2b 96 a8 6b a1 85 d2 43 28 f8 2a 62 21 d6 41 a5 82 e7 31 7d 4c a7 8a 2e 2b c1 95 16 e0 63 5c b5 b7 a0 e6 e0 6d 4c 8a f0 fc Data Ascii: nK/2&)PP{0eN-c-CHM? 4_D\|K\^:sc62F]eJj_.58PO2~JBxvoh.\iRcl^~g$iH01{z!X; ?hrn/xT0I7K0`Q:!+kC(*b!A1}L.+c\mL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49774	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:30 UTC	657	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://documents.wyr-law.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:32 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:32 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: 85e0a3c1-101e-0048-4ec3-40de61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114231Z-164dd7df599zqcvchC1YTOqv3s0000000p5g000000001spx x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:32 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-04 11:42:32 UTC	773	IN	Data Raw: e8 04 1b c0 7a 77 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 Data Ascii: zwLp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49775	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:30 UTC	799	OUT	GET /Me.htm?v=3 HTTP/1.1 Host: l1ve.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Purpose: prefetch Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:32 UTC	514	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 1422 Connection: close cache-control: max-age=315360000 vary: Accept-Encoding p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" referrer-policy: strict-origin-when-cross-origin x-ms-route-info: C518_SN1 x-ms-request-id: 5ec890ac-b760-4214-b171-33ce0d145174 ppserver: PPV: 30 H: SN1PEPF0002F10C V: 0 content-encoding: gzip access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:32 UTC	1422	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 b5 57 db 6e db 38 10 7d ef 57 d8 44 11 90 1b 56 f1 25 76 1c 39 4c 50 74 bb a8 8b a6 2d aa 2e f6 c1 d5 02 8c 44 d9 dc ca 94 40 d2 4e 03 47 ff be a3 9b 65 ab 6d 8c 3e f4 21 b1 3c 9c 19 9e 33 9c 39 94 af 4c a0 65 6a 3b f6 21 15 0c 59 f1 cd 9e fd c7 37 bc b4 a2 eb 67 9d 6e b4 56 81 95 89 c2 96 0a b2 8d 12 8d 37 5c 77 4c 47 aa 8e 20 76 6e 7c 26 e0 5f 86 ed 52 1a da 38 83 6b f5 dc 11 58 91 ad 8c b0 99 2b 9f 68 61 d7 5a 75 f2 67 47 7c 4b 13 6d cd 34 4f 28 59 6e 62 db ca e6 6e 33 2a 43 57 d1 38 e1 a1 08 dd 6e 3f 9b 56 a1 36 0f 0d 78 1c 63 59 67 a0 92 36 cf 82 c0 97 32 8c 75 7b cd 42 56 e0 66 db 5d 22 e1 ac 18 90 72 02 06 41 4e ca 10 a2 02 f7 48 86 e7 2d ce 35 11 53 d0 aa 2a 20 58 34 f7 7c 6a 58 8f 2a 26 9c 58 a8 85 5d 4e cd 95 9a 9e Data Ascii: Wn8}WDV%v9LPt-.D@NGem>!<39Lej;!Y7gnV7\wLG vn\|&_R8kX+haZugG\|Km4O(Ynbn3CW8n?V6xcYg62u{BVf]"rANH-5S X4\|jX*&X]N

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49776	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:31 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: de9014ac-301e-0051-7cc5-4538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114231Z-1746fd949bdlnsqphC1EWRurw000000000x0000000008gyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:31 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49777	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:31 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4626c155-d01e-0017-0ecc-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114231Z-1746fd949bdl6zq5hC1EWRf3ws00000000r00000000090nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:31 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49779	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:31 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 85a33a74-901e-005b-1ccd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114231Z-1746fd949bdmv56chC1EWRypnn00000001ag00000000499w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:31 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49778	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:31 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: ddae3c3f-c01e-008d-3acb-452eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114231Z-1746fd949bd4w8sthC1EWR700400000000yg000000003akt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:31 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49780	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:31 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:31 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: 8da67b63-c01e-0034-2ecb-452af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114231Z-1746fd949bdqpttnhC1EWRe1wg00000000wg000000005hz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:31 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49781	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:31 UTC	365	OUT	POST /api/report?catId=GW+estsfd+frc HTTP/1.1 Host: 50bc8e2d-59b1754a.wyr-law.com Connection: keep-alive Content-Length: 555 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-04 11:42:31 UTC	555	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 37 32 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 75 6d 65 6e 74 73 2e 77 79 72 2d 6c 61 77 2e 63 6f 6d 2f 3f 61 6d 70 3d 63 6e 6c 68 62 69 35 74 62 33 4a 79 61 58 4e 41 62 47 4e 68 64 48 52 6c 63 6e 52 76 62 69 35 6a 62 32 30 3d 26 74 69 6d 65 73 74 61 6d 70 3d 31 37 33 33 33 31 32 35 32 38 26 72 61 6e 64 31 3d 34 37 26 72 61 6e 64 32 3d 6d 64 66 67 6c 75 68 6b 71 73 77 70 7a 78 61 26 72 61 6e 64 33 3d 35 31 26 72 61 6e 64 34 3d 33 38 26 72 61 6e 64 Data Ascii: [{"age":0,"body":{"elapsed_time":3727,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand
2024-12-04 11:42:33 UTC	367	IN	HTTP/1.1 429 Too Many Requests Server: nginx Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close request-context: appId=cid-v1:c242839f-7b23-4fcd-8b70-f19e1d322576 access-control-allow-credentials: false access-control-allow-methods: , GET, OPTIONS, POST access-control-allow-origin:
2024-12-04 11:42:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49782	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:33 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 9009c19b-701e-0053-74c6-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114233Z-1746fd949bdlqd7fhC1EWR6vt000000001ag000000004mnq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:33 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.5	49784	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:33 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 4ebe80de-801e-0047-51c8-457265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114233Z-1746fd949bdtlp5chC1EWRq1v400000001400000000048sy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:33 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49785	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:33 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:33 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 00b51f18-a01e-000d-6fcc-45d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114233Z-1746fd949bd7wvgbhC1EWR0rgs000000017g00000000420w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:33 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49783	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 7eb0f396-d01e-0066-0ac6-45ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114233Z-1746fd949bdb8xvchC1EWRmbd40000000110000000008447 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49786	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:33 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:34 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:33 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 46349be7-d01e-0017-71d1-45b035000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114233Z-1746fd949bdmv56chC1EWRypnn00000001c0000000002gra x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49787	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:34 UTC	560	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_i8f-75gfk3tbsm8bmatnqa2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:36 UTC	812	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:36 GMT Content-Type: application/x-javascript Content-Length: 16345 Connection: close cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 2024 01:33:48 GMT etag: 0x8DCF55E3D91C34E x-ms-request-id: 85e0a3c1-101e-0048-4ec3-40de61000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114235Z-164dd7df599fxcrbhC1YTOkgwn0000000pcg000000005ezm x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:36 UTC	15572	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 33 52 48 32 a2 09 14 c1 7e 04 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 9b b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd 9b 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'F3RH2~Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-12-04 11:42:36 UTC	773	IN	Data Raw: e8 04 1b c0 7a 77 4c f1 70 ee 03 7e b9 52 66 00 e0 2d 4b 19 b6 30 82 b4 8c 07 10 e2 6a 41 51 4f 3c 0d 86 9c fb 90 51 1e b8 7e 38 ef ac ca 5b ce 0d e6 a8 e8 40 1c 3c 54 74 00 12 3d d5 58 6e a1 df 32 fc 96 7e 1f e6 a4 0f c0 6d c1 20 4b f4 e5 94 23 08 f2 7a 2b a7 b0 22 f9 95 e1 1b bc 5a 63 78 0f a0 e3 c1 92 39 86 02 bf 1f 40 12 07 fe c0 04 ed 43 f1 51 60 30 01 9f 99 b9 11 22 9c 9c 46 f5 21 03 4e d8 91 99 23 47 70 69 f5 43 13 bf cf 2b a3 5b 30 aa 4d 00 19 ad 61 59 30 a3 07 1c ad 07 46 55 f6 20 7e 60 b4 50 c6 37 58 14 8d 87 24 dd 1a 60 1d ef 0e ff 78 de 3c 3f 3d 3f 29 da 42 15 9f 5b 3c cd 11 b4 5f 48 e5 b0 5e 8c 8c 27 d8 05 98 35 59 15 2d 93 07 3e a7 63 10 ab 63 49 07 c0 d2 95 1b 8e 96 fc d4 b9 0c ab 80 76 df 91 f7 17 e2 c7 c6 08 08 ae 98 e1 2e 77 5a 67 fd 21 Data Ascii: zwLp~Rf-K0jAQO<Q~8[@<Tt=Xn2~m K#z+"Zcx9@CQ`0"F!N#GpiC+[0MaY0FU ~`P7X$`x<?=?)B[<_H^'5Y->ccIv.wZg!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49755	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:34 UTC	744	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:37 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:37 GMT Content-Type: application/x-javascript Content-Length: 116416 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: 11412feb-001e-0078-3cc3-405f03000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114235Z-164dd7df599bk5hjhC1YTOpv5s0000000p00000000005u22 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:37 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-12-04 11:42:37 UTC	16379	IN	Data Raw: 2b a1 78 4e 1b 6b 02 68 69 6a da 0f fb 4f bd ce 04 d3 48 13 56 16 d4 4c b6 0b 85 71 3c 18 a5 5d 8e a8 72 9f 02 31 9b d1 1e 8a 1c 12 c3 46 ca 47 d2 60 1a 1d a1 cf 51 16 b3 d0 a6 04 97 32 5c a2 97 cd 29 a9 02 ea 05 4e c3 14 87 cf 25 8f 06 89 62 83 d2 69 40 fd 93 38 97 2e 39 5d 64 07 33 bf dd c8 ee 45 42 52 d5 f8 7e 07 89 5c 75 9d ef 94 d8 ed b0 74 13 fe 78 f8 27 82 3f 25 f6 32 93 2c d8 e4 af 28 62 61 b7 30 19 dd a7 e3 20 b1 bb af 8f 4c fe 53 6c 2d 68 a7 d2 b8 c7 ee 86 f0 3d f2 dd a8 e7 ef a7 14 1d 9d f2 0f 24 cc b7 a0 16 34 bf de c0 ea c6 70 1c fc 8d b1 e8 a9 78 02 13 31 76 7d 8b c1 e3 a6 ad 59 49 d7 c6 3f c5 b4 e5 37 d0 3e 11 8b f9 1b 2e 7e cb b0 b9 dc fc 39 6a 7a 07 a9 f0 87 dc f0 48 58 d2 f3 d1 ef c9 df d8 c8 f5 ba 53 d4 c6 4e e0 e9 64 df eb 4d b4 de 35 Data Ascii: +xNkhijOHVLq<]r1FG`Q2\)N%bi@8.9]d3EBR~\utx'?%2,(ba0 LSl-h=$4px1v}YI?7>.~9jzHXSNdM5
2024-12-04 11:42:37 UTC	16384	IN	Data Raw: b1 e4 6e 68 44 85 81 a4 35 a6 7b 6c 0c c4 6b ee 72 73 c1 be f7 84 c9 a2 fc 4d 4c 16 68 55 11 26 8b 83 d6 f6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d3 2c 29 8c 92 ca 92 96 69 33 da 82 35 38 fc da d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 19 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad 7a d6 15 90 17 54 c3 6f b1 8f f9 b7 5b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 cf 40 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 77 93 af be 83 38 82 66 ee ee ee 3e 6e 0d f8 b1 fd 02 45 5a dc 2d 7b 1e b9 c6 a8 1c a5 7d e7 d3 a7 21 cc 63 f3 e7 fc 53 3e 01 6a 35 fa f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e 0f e2 9e ef 6c 37 b7 f7 9b 6d 87 5d 63 90 56 d2 73 66 25 9c a5 be 73 Data Ascii: nhD5{lkrsMLhU&X>,)i358`A{B\|B4PTmZzTo[Oq3t0!}]GBM@Dfv&(t;bTeI0s8w8f>nEZ-{}!cS>j5Kn%.I Ub^l7m]cVsf%s
2024-12-04 11:42:37 UTC	16384	IN	Data Raw: 9d a4 b3 ff 06 12 ef 48 cf 38 c7 ab 49 7a 46 ce 39 c5 80 ac 48 e4 ef 31 c1 d9 15 1e 74 88 e5 50 eb fa 43 f3 a4 4b cd 22 55 36 9d 1c 3d 2b 48 a3 35 f6 63 ce 1e 2f 18 42 f3 a0 0d 8b 16 36 c7 b0 54 c3 e6 b8 9b 1e e5 5d 15 45 7b 0f 12 94 e1 e0 d8 cf d1 5f 1d a4 a9 49 6f e4 96 ee 0d 1e 1d 37 9e e7 d3 cf eb e0 4a f6 79 09 62 f3 f5 d1 65 d7 03 c1 a4 7f 09 ef 20 ef b7 1e bb 33 76 c3 ee d1 f9 25 43 6b f8 0d fc 63 24 bd f0 27 bf dc b7 45 6d f0 fd 2a be 92 c5 0b a9 1f c7 d8 26 e5 47 8a 95 af 3f 92 be 6a c8 44 9d ab 0b 4f 4c aa 56 ba 33 08 3a 6c 1d cb c3 74 84 38 56 43 d8 75 14 99 b1 0e a4 ae 24 4e a6 04 59 8f 93 5b e1 35 96 e3 8d 99 8a b8 12 c9 b9 fa 83 ee ec 88 78 8c b8 3f 92 a0 74 27 3d f2 0c 4b 7d 94 15 33 0f 95 d7 2e 30 9f bd 3e 7c 00 d0 66 e0 e3 bf 9e 76 32 30 Data Ascii: H8IzF9H1tPCK"U6=+H5c/B6T]E{_Io7Jybe 3v%Ckc$'Em*&G?jDOLV3:lt8VCu$NY[5x?t'=K}3.0>\|fv20
2024-12-04 11:42:37 UTC	16384	IN	Data Raw: f0 db 07 ff b5 f9 85 13 c7 7d 0f 25 e2 94 74 ec 8f 6e 69 df bc e7 ab b1 fb 06 aa bf 45 66 f2 27 fc e7 25 7a 6b 9e 1c bd a7 b0 68 1f 8e fc 7e 0f ce a3 7f 32 98 26 b7 21 46 1f ab 74 0c 28 e8 fa 12 55 7d 5c 75 70 01 af 59 9e 76 82 20 f1 d1 7f 3e 7a 6e 44 bf fb 80 86 00 3b 3b 6f 86 2f fd 0b ef 23 46 ec 8b 3e 22 7e fd c8 49 7b 3e 72 92 64 78 87 15 83 bb 3b fc 33 e1 3f cb 9d 9d f2 97 5b 5d 4c 1e 8b 6c f8 f6 e9 dd dd 69 59 d5 e3 9f aa 98 80 40 5f 4f 90 e3 3d 15 94 39 fc 09 ba 7f ce ac ef 2d d6 f1 2c 92 46 58 e2 5f c7 49 80 4e 44 9c 75 b1 c2 04 5a a1 ce ad 8e 23 49 78 40 11 2d 8c 7b e1 ab 5e 44 cc 5c ee e6 e7 25 d0 6f de 8d 4f 0d 87 00 ad 28 2e 58 e1 72 42 6f 57 28 98 f8 6f 3b 84 45 53 d7 e2 8d 8b 13 e3 c4 03 e7 7e 38 28 cd f9 bc dd 45 45 68 36 70 ce db b0 17 d0 Data Ascii: }%tniEf'%zkh~2&!Ft(U}\upYv >znD;;o/#F>"~I{>rdx;3?[]LliY@_O=9-,FX_INDuZ#Ix@-{^D\%oO(.XrBoW(o;ES~8(EEh6p
2024-12-04 11:42:37 UTC	818	IN	Data Raw: 6f fa 18 ea 02 0d de 87 94 36 ea ef 9e 2e 31 02 b7 1f cf 19 ec b2 5c b9 a5 61 99 e6 b8 9d 6e 3e cf f3 b9 56 78 bd b4 94 13 95 63 69 ed db 23 63 0f 68 ac 6e a6 55 fb 76 23 e5 ab 06 9d dc 7e cc 14 fc 24 6b e0 f4 20 6b f4 f4 e0 3b a7 80 da f8 f1 f3 c0 fb bc f1 64 d4 6a 65 3e b4 b7 56 10 ae bd 71 78 f5 1f 3f 08 6c f5 3b c7 90 5e d4 f5 06 f2 17 2d 49 dc f4 e6 43 6a f0 6c f7 82 7c 08 24 f9 10 49 42 c9 12 54 c3 33 e3 1b 5b 19 a2 dc e5 b1 28 23 29 77 53 e6 1d 4e 4c 53 05 9c a6 42 9f ef 72 7c c4 c9 8c ac 40 7b a1 89 05 1e d4 65 96 96 ac 57 9a 11 b7 83 d9 ea 08 94 73 70 10 eb 8e 0f e5 1c 54 36 99 83 77 d6 34 8b ac 30 03 31 3e 17 23 a4 24 3e fb 48 38 ea c8 cd c0 78 0c 23 19 24 0e 10 69 91 32 ab 6c 04 12 cc de 6a f4 f5 a7 46 26 b1 0a 70 a3 c2 be 12 b9 70 1c 2f bf c3 Data Ascii: o6.1\an>Vxci#chnUv#~$k k;dje>Vqx?l;^-ICjl\|$IBT3[(#)wSNLSBr\|@{eWspT6w401>#$>H8x#$i2ljF&pp/
2024-12-04 11:42:37 UTC	12576	IN	Data Raw: ee 67 1a 2b e5 91 fc 2b 06 7b 89 0d 2b 23 a6 fb 8d 90 d7 5f 8d cd 1a 29 99 28 1d 62 3e 8a 87 02 1b b7 6a a7 c2 aa dd 35 a6 41 d8 ca 44 46 62 37 13 c9 76 74 83 8f 9f 6e 32 ac 97 05 6e 92 41 60 04 ce 51 ae 91 3e a2 2a db 0c 50 5a f2 25 e8 3a 16 fa 1e 56 96 84 be 74 a4 a7 84 be 24 e2 4d 0b 7d 1b 14 10 74 a4 6b 64 ac a3 a1 e0 77 ac da ca de f1 93 80 0d cd 77 56 38 82 33 ee 7e 1d 30 ea c3 14 51 83 4b e6 c8 42 61 c5 c6 d0 8b 9e c0 15 7d e0 7a 46 68 7c 04 14 13 eb a3 d9 51 a4 a7 0d 63 fb 4d 1b 1e 70 1b bd 11 ce ac 6f 8e d2 e6 b8 0e 90 e0 54 6e 9a 77 f3 b9 a7 fb 69 73 dc 80 1e 4b 73 5c df f4 3b 33 6e 8e eb 2b 96 61 4c bc ed 9b 29 7b b1 58 6d 35 62 13 76 c3 31 17 e5 3c d3 53 15 db 77 4d df d0 87 fa 4d 71 82 1c 1c 25 80 99 1c dd b4 26 85 02 1b 03 72 9b a0 34 77 84 Data Ascii: g++{+#_)(b>j5ADFb7vtn2nA`Q>*PZ%:Vt$M}tkdwwV83~0QKBa}zFh\|QcMpoTnwisKs\;3n+aL){Xm5bv1<SwMMq%&r4w
2024-12-04 11:42:37 UTC	16384	IN	Data Raw: 4e fa 5c 64 09 2f 74 c2 ae ce 43 bc b1 65 c4 ea 4a b9 21 f3 08 f3 d1 e8 30 06 84 c7 d5 f5 3c 44 43 6c 49 18 07 df c8 b9 25 ae d6 48 6c a7 e9 1d 4e 71 bb 25 a0 9e 70 5b 63 02 35 2b 08 cf 71 ab c0 0a 4b 28 18 c0 b9 d3 c1 04 0e 80 47 b8 3c 57 1f 98 bc 05 a3 c5 3b 36 43 8c 4f 36 d4 d3 4e bf 6b ce b8 42 70 86 4b af 34 89 a2 a7 48 2d 41 07 5b 38 c7 0a 85 38 e5 0a bc 05 28 1e be d2 9c 2e ba 8b cd a5 87 b1 41 59 7c e0 d6 0f 44 60 e1 da 5e 23 15 f4 4d 80 c3 40 82 c3 58 82 cc 48 82 cc 54 ea 3c c8 88 05 cd 5a 66 52 c4 7c 27 41 e6 31 23 96 9a 88 92 84 96 47 f7 12 ac ae 04 58 91 f1 0a 85 43 ba 90 47 fb 99 79 23 40 0d d5 86 68 bf 72 42 f1 8b ae e1 57 09 70 24 f4 16 7c 2f ef 48 52 53 c3 28 4a 2b 32 ef 0f 89 02 46 5a b6 c4 a6 2b c2 b4 45 7e 10 6d 5b 72 b9 2f 70 b0 a7 8d Data Ascii: N\d/tCeJ!0<DClI%HlNq%p[c5+qK(G<W;6CO6NkBpK4H-A[88(.AY\|D`^#M@XHT<ZfR\|'A1#GXCGy#@hrBWp$\|/HRS(J+2FZ+E~m[r/p
2024-12-04 11:42:37 UTC	5536	IN	Data Raw: 47 24 1c 62 df 12 3f 5f c0 e0 a1 a6 eb 1b d1 c5 7a 00 9c 3c 8f 68 60 09 75 aa 63 0a d7 6b bc 63 38 42 ee 6b e6 50 b8 4f a9 65 2c 2b 43 ab 15 21 9f 4d 94 eb db f9 62 41 eb 80 51 4a f8 b7 70 81 2e 85 b9 ca bf 91 ad cd 1e f3 3c 3c 9f e5 78 63 32 0a 95 a3 b1 5a 9c c4 4d 5a 0b 74 ce 2f 23 1f b4 3e c6 87 b0 69 52 bc 6a 81 fc a7 f0 45 64 71 a9 40 80 3b 45 78 6b cb 6a e7 00 4f 6b 93 e0 22 ac 05 b5 a5 e5 b6 9d da 39 20 a3 64 84 72 52 db d8 92 51 29 fc e7 52 48 1e 69 d0 57 63 72 4a b8 43 14 54 dd b2 70 49 ee 08 e1 67 76 17 35 a0 a5 b3 9a d7 d2 79 8f 9f 96 0e 16 c5 1a 2f a4 b0 3b 6e 97 dc 6a 62 81 db 5b 72 90 89 8f 7d 3e 29 48 b9 a1 52 92 75 20 41 96 c8 b8 fe 8b dd f7 de 47 b7 87 4e 9c c3 d3 ee 6d 67 fb 76 a3 eb c0 a3 70 b0 ed 70 0d 5f af b7 72 58 02 d8 79 7d 1e 9b Data Ascii: G$b?_z<h`uckc8BkPOe,+C!MbAQJp.<<xc2ZMZt/#>iRjEdq@;ExkjOk"9 drRQ)RHiWcrJCTpIgv5y/;njb[r}>)HRu AGNmgvpp_rXy}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49793	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	541	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_h6TdaK6cfsrg175w47aRCA2.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:38 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: application/x-javascript Content-Length: 122334 Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 23 Oct 2024 19:33:27 GMT etag: 0x8DCF399919435D9 x-ms-request-id: 7e363f7c-101e-001d-1cc3-40b955000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114237Z-164dd7df599rvsf5hC1YTOpyg00000000pkg000000000rxb x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:38 UTC	6407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 e4 bd 7b 57 e3 b8 b2 38 fa ff fd 14 c1 7b 5f 26 19 4c 3a ce 8b c4 b4 87 13 02 74 b3 07 08 43 a0 67 f6 a1 d9 2c c7 56 82 07 c7 ce b1 1d 1e 3b e4 7c f6 5f 55 49 b2 e5 c4 a1 bb e7 9c 75 ef ba eb ee 47 13 4b a5 57 a9 54 aa 2a 95 4a 1f 7e de fa bf 4a 3f 97 76 bf ff 3f a5 e1 75 ef ea ba 34 38 29 5d 7f 3e bd 3a 2a 5d c2 d7 3f 4b 17 83 eb d3 fe f1 f7 d7 83 8d e2 ff af 1f bc b8 34 f6 7c 56 82 bf 23 3b 66 6e 29 0c 4a 61 54 f2 02 27 8c 66 61 64 27 2c 2e 4d e1 df c8 b3 fd d2 38 0a a7 a5 e4 81 95 66 51 f8 27 73 92 b8 e4 7b 71 02 85 46 cc 0f 9f 4b 65 a8 2e 72 4b 97 76 94 bc 96 4e 2f 2b 55 a8 9f 41 6d de c4 0b a0 b4 13 ce 5e e1 f7 43 52 0a c2 c4 73 58 c9 0e 5c aa cd 87 8f 20 66 a5 79 e0 b2 a8 f4 fc e0 39 0f a5 73 cf 89 c2 38 1c 27 a5 88 39 Data Ascii: {W8{_&L:tCg,V;\|_UIuGKWTJ~J?v?u48)]>:]?K4\|V#;fn)JaT'fad',.M8fQ's{qFKe.rKvN/+UAm^CRsX\ fy9s8'9
2024-12-04 11:42:38 UTC	16384	IN	Data Raw: b0 de 91 9f 28 09 2d c9 2b 60 dc 9c 5d 50 3f 41 1a 53 6c 9d 0a bc e0 c9 27 74 eb 27 01 b1 49 c9 03 ce cc 05 4f 5c 5a 2e 6e 25 90 88 bb 53 e0 5e 84 82 3b 43 4b 52 4b ab 35 6a 3a 77 0d bc 17 8b 1e af 0d 81 be 0b 1a ef e5 e5 fd f1 fd d1 e1 fd f9 f1 f9 e1 f1 d5 d1 e0 78 78 31 b8 3e fe e3 74 08 4b b2 7f 02 ff e9 1b 2d 8d 43 1d ff d1 3f bb 39 3a 86 05 d3 a9 d5 9a 38 87 22 83 97 bd 3f 1b f4 7f 55 72 0d 91 7b d8 3b ba bf ec 0d 87 bf 0f ae b2 cc ba 2c 7a 3a 1c 9e 5e 7c 12 55 f0 c5 cb 41 1a c6 0a c8 6a 1d 0d 59 c7 c9 f1 d1 f1 55 ef 9a 16 da c5 d9 29 2c dc c1 a7 d3 8b fb a3 d3 61 ef ec 6c f0 bb ec d2 5e a7 d7 17 25 2e 8f ef af 6e ce 60 c1 9e 0d 45 7b cd 6e 4d 66 9e 0f 0e 81 65 f4 61 05 0f ef 2f 3f 0f 2e 8e 2f 6e 68 78 87 67 bd 8b 5f 39 74 ab 53 33 be 01 7d 3d 18 0c Data Ascii: (-+`]P?ASl't'IO\Z.n%S^;CKRK5j:wxx1>tK-C?9:8"?Ur{;,z:^\|UAjYU),al^%.n`E{nMfea/?./nhxg_9tS3}=
2024-12-04 11:42:38 UTC	16384	IN	Data Raw: f8 5f 68 0b e3 c5 f7 91 0e a3 57 89 1a f1 99 cf a4 48 7a 12 00 08 fb 26 b0 81 94 d2 a0 9b a6 36 b7 3d 40 01 2c d8 70 2c 62 f0 f1 d0 7c da 5a 92 86 77 e3 30 44 29 dd f7 90 41 d8 78 6c 45 0c ca 28 9c df 4c 0c b2 f8 f9 f4 52 66 d4 f5 93 6b f9 bb a1 93 4f 80 fc 6c ea 47 78 05 8b 07 4b 94 89 2d 5d 78 3b 9a 8d 5a 0d 98 11 67 27 e1 18 69 ec 3a 94 0b 64 5d c9 a7 4b 48 e2 1a 06 e3 d7 30 4a 97 57 83 c1 09 51 67 15 d6 89 19 58 6e 35 5d 3a ca 7d 09 15 8e 96 0a 41 a6 eb 67 03 24 11 af b9 9a 2a a9 9a aa 50 29 7f 43 2d d7 83 eb cb dc ea fe 52 a7 a2 6b 0b 53 3d 1c ca e3 04 18 0e 2d c0 22 91 f6 1b 58 e1 a3 2d c2 15 14 3d f0 ab ab ab 50 a6 fc 35 94 f0 3a 8b d9 81 ff 57 91 95 d0 6d c6 1c 3f c8 ae 94 ec 0b 44 15 d0 0b 57 71 70 05 93 95 11 65 c9 b1 5c 82 94 82 41 0f c4 52 7e Data Ascii: _hWHz&6=@,p,b\|Zw0D)AxlE(LRfkOlGxK-]x;Zg'i:d]KH0JWQgXn5]:}Ag$*P)C-RkS=-"X-=P5:Wm?DWqpe\AR~
2024-12-04 11:42:38 UTC	16384	IN	Data Raw: 2b a3 db fe 17 ac b2 6f 5c 51 b6 79 2f 01 ef d3 30 33 7d c2 b6 bd 9b 6d cb b6 d7 b6 97 1d 17 82 d6 3e 2f ba 11 de 8c 63 db ff 4b 85 01 62 0c 4a 8e ae 7b 6d 85 f5 e1 70 42 b7 ca 21 cc 78 81 41 87 7a 0a 82 ff 8f 68 32 d8 15 37 70 5a a7 45 24 20 84 58 dd 99 c4 51 89 71 44 fc b8 9b 70 dc 8c 81 da 18 4c fb f9 01 cc 68 67 dc 1c be 8d ef 91 75 86 c1 53 eb 94 16 69 d9 6a 55 9a 8b 38 7a 71 3b be 73 9c 88 fd 49 7c 27 e0 e7 e9 67 0c 9a e8 3b bb f0 3d fc f9 b5 97 de c3 9f 4f 04 66 e4 1c 4f f3 51 9a 7e c6 5f c3 61 dc 17 64 63 d0 17 b0 98 9c 13 b4 b7 25 03 08 78 d8 83 69 8a 92 48 15 87 40 75 e8 ab ea bc 17 d1 08 95 1a 50 f9 48 1c fc 8c d5 88 e8 16 9f 4f 8f 28 15 0e ff 49 04 4d 52 04 83 2b 5e b7 9e 9e c4 0f a1 32 de f0 c8 06 03 8d b8 55 d8 45 e9 60 e5 34 5f a1 d7 1c ca Data Ascii: +o\Qy/03}m>/cKbJ{mpB!xAzh27pZE$ XQqDpLhguSijU8zq;sI\|'g;=OfOQ~_adc%xiH@uPHO(IMR+^2UE`4_
2024-12-04 11:42:38 UTC	16384	IN	Data Raw: 72 04 ef 3c 9f a1 a4 ed af 1b 86 f4 ff 40 2b fc fb ba c8 26 56 d0 e5 2d 5b af b5 ac 68 c2 4c 7c cd 1c 3e 32 7b 1d b3 f3 a1 63 76 84 32 2e fc 8e 5e b5 44 ae ca 17 09 c0 ba 6a 8d 12 8d 8a d7 24 4e a2 de 7d a8 6d 99 88 ac d2 3e cf 4e f3 33 45 96 80 e0 e2 80 96 bb 4f 46 12 09 ef dd cb 25 5a cf b2 af a2 bf 24 65 8a b4 c0 ca 86 35 87 a8 83 d3 2f c2 7a 1a 25 5d 09 89 9d 4f 54 66 40 c7 1f 41 19 80 6f 86 c6 cd 5c b1 28 82 19 38 d6 a9 37 c7 bd 6b 6a 6d 74 11 87 ce fb 54 e0 15 b2 15 1e 8b 15 25 c7 15 bd 4f a9 1e 17 f1 00 07 e7 4d 02 fc a7 f4 9d bc 8a 6b 53 8f 3f 5e 48 86 85 0b 4e 56 cc 36 5b 05 41 74 11 09 61 d0 52 7c 9e dd 24 63 21 2e 17 d1 23 02 91 28 be 94 e6 56 9b 5f 8e 59 6a ed ed 73 ce 3d fa 2b ce 37 69 ef 04 ee 66 35 74 7c 35 73 e2 2a 32 8e 75 3c de 9d c1 bb Data Ascii: r<@+&V-[hL\|>2{cv2.^Dj$N}m>N3EOF%Z$e5/z%]OTf@Ao\(87kjmtT%OMkS?^HNV6[AtaR\|$c!.#(V_Yjs=+7if5t\|5s*2u<
2024-12-04 11:42:39 UTC	16384	IN	Data Raw: 79 74 fc 30 62 e9 2b c8 70 c0 21 53 fe d8 5f f3 1e 7c 19 46 40 98 cc 52 da 2e ee a4 77 1d d3 42 d3 87 9e db f9 fd 42 3d 85 0b 3e 6c 67 10 76 a3 e2 2e 1d 61 ff 2b 76 73 0b b0 1a 2f c3 75 f6 09 e1 c0 a7 31 49 ac db 3d 26 11 03 b7 11 0c 85 86 ef c7 b7 e6 b3 23 8f f9 47 2f a8 bd ab 77 3d d5 b9 9a f6 52 53 1e ba b4 91 15 80 53 7b 36 42 82 70 a9 cd 9a 99 a3 94 e1 07 ee e3 c1 9c a4 b1 22 9b de 10 cb d9 a3 f1 a9 a5 b2 80 4c c1 de ea b4 62 98 7a 6f 03 cc 69 5a b8 9c 69 1c 1f 1a 5b 77 cd 64 2e 7d 20 d0 14 58 b0 ca 3d 82 45 59 89 98 2f 3d ef d4 61 77 0e e7 cc 2d 7b 59 0c e1 b4 fd 61 6a cf 6a 2c e0 77 19 50 29 ec 6f 36 6e 89 90 fb 2e cb e3 dd 74 92 81 54 ba d6 08 ec 69 55 07 22 b4 56 59 67 8b 23 8f 57 a7 6c 5f 01 1d 70 f6 b3 15 cc 01 72 ef 00 9f b0 98 c5 a3 64 92 c4 Data Ascii: yt0b+p!S_\|F@R.wBB=>lgv.a+vs/u1I=&#G/w=RSS{6Bp"LbzoiZi[wd.} X=EY/=aw-{Yajj,wP)o6n.tTiU"VYg#Wl_prd
2024-12-04 11:42:39 UTC	6169	IN	Data Raw: 95 33 8e 35 ca 47 56 66 34 05 ae af ed 1e 3e 1c 41 9f c8 e7 ec 84 84 33 89 f9 e6 c1 48 47 3e fe 15 38 8f 21 8e 2e 8f 27 83 c3 bd 73 b6 38 9d 7c 7b b8 27 ca 33 56 cc 26 83 7b 27 f7 86 67 f7 07 83 03 7c ab 24 bf 98 03 83 0e 87 e9 44 4d e5 e3 a9 a4 b6 be fb 70 24 86 03 7e ba 7f 2d b1 3d 1a 81 d4 55 0b fa 02 fa ba 91 e1 40 14 6f f1 91 a2 c0 ae dd 96 55 29 b9 5b cf 93 e6 17 a9 be 4b ba 66 0a 93 3e 8d 86 41 71 28 a1 38 cc 27 0b ad 52 a9 10 37 c8 7a fa dd 62 e9 93 52 bf 6a 13 e4 64 ae df 2d 4a ad e2 ac ab 69 83 75 d6 ac 88 98 a4 97 42 e6 d1 bd c1 01 3d 94 ea c1 30 a1 39 ad cf bd c9 60 6f 88 ee e8 7b 01 d1 44 3d 14 f9 87 e1 1c 75 46 03 62 2b a6 77 8d 58 1b 61 f8 f1 c1 80 08 4f 40 f5 ab 4b c2 6c fe 89 4d 2f e4 90 41 c1 a0 8e 3e 0d ee b1 43 4d b1 f3 fb 72 46 73 f0 Data Ascii: 35GVf4>A3HG>8!.'s8\|{'3V&{'g\|$DMp$~-=U@oU)[Kf>Aq(8'R7zbRjd-JiuB=09`o{D=uFb+wXaO@KlM/A>CMrFs
2024-12-04 11:42:39 UTC	16384	IN	Data Raw: a3 83 8d df 4a a3 6a 6a 2e 4d dc 88 76 39 36 75 7a 0a b4 d3 65 ee 5f a3 cc 72 a3 71 74 30 18 b4 3a 2a f8 95 bd 34 45 36 77 d2 14 e9 ed c3 0c b4 4d bf 9b 9a aa 27 60 cd 47 d6 95 ec 33 02 7c f1 4c ce 9f eb 20 af 06 3b 2a 6d 17 6f 44 08 a5 65 90 21 6b b4 03 85 6f 9b b2 c7 40 a0 83 11 d1 ec 19 b7 ed a7 4f 8b d6 78 da fe 5c 68 f9 da 47 49 e7 00 ae 00 20 9f c2 f2 ac f3 95 a4 18 a6 56 a0 8c 9b 8f bc 98 3d bc 68 d5 69 5f 6f cf 5f e9 1d 6f b6 17 e8 78 42 17 93 8d 6b 6b 05 49 a9 1b e5 82 3c d8 48 7d 6b de f5 f5 ed 0d 95 6f ea 33 10 d0 db d5 ce 2b dd 39 aa 5f d9 fd da 86 86 76 8a f4 a6 30 2b 0e af 01 08 38 71 ff 44 5c 0d c7 e8 7e a1 73 25 42 71 83 3d a3 36 69 15 5b 87 22 3f 3a 28 68 6b aa d0 5e 86 19 fa ec 1f ec e7 86 5a f4 0e b5 7d c6 a3 07 29 56 98 96 31 5d 7f a4 Data Ascii: Jjj.Mv96uze_rqt0:4E6wM'`G3\|L ;moDe!ko@Ox\hGI V=hi_o_oxBkkI<H}ko3+9_v0+8qD\~s%Bq=6i["?:(hk^Z})V1]
2024-12-04 11:42:39 UTC	11454	IN	Data Raw: 00 6f ee f2 ea d5 9b 6a 75 4d 94 c6 88 cd d4 45 c6 af bb 2a 58 08 90 9f 14 02 e4 63 00 f9 c2 e1 7f bc f5 c3 ff 4d 5b 5c 1d 20 3f 59 ff 78 ae fe 60 4e 19 5b af b0 b8 c9 91 d8 7a 6b 22 ed fd b1 81 89 1e 1e 90 e8 c1 81 88 1e 10 80 e8 de 81 87 1e 10 70 e8 de 81 86 36 0d 30 54 50 36 f2 b8 1e 27 49 76 7b 98 df ac 22 55 2b a9 54 37 0f 4a a4 c4 c3 12 47 6a bc 5d 59 77 d9 70 8b 11 89 b6 71 d7 b0 10 81 a8 71 d2 2b af 08 8b 2b 8b 0f 6b 65 83 e8 43 1b 5d 52 7c 78 b4 a1 2d 1f c5 29 9a dd 72 74 a1 bf 5c 54 a1 bf 5a 34 a1 75 f4 ff da a5 da 76 f4 a0 3f 39 6a d0 9f 1b 2d 68 93 95 58 b7 6c e3 8d c9 3f eb ba ee 66 51 80 36 8c fe b3 9d a8 3f 7f c9 db a4 7f f6 76 4e 49 22 cf 7a a3 44 0f f8 69 c7 b7 47 d7 11 ba ca e3 9e bc 62 3b 6e 12 0d 36 8c 55 f0 90 a0 86 db 0a 59 b0 45 51 Data Ascii: ojuME*XcM[\ ?Yx`N[zk"p60TP6'Iv{"U+T7JGj]Ywpqq++keC]R\|x-)rt\TZ4uv?9j-hXl?fQ6?vNI"zDiGb;n6UYEQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49794	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	700	OUT	GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1 Host: documents.wyr-law.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://documents.wyr-law.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1 Sec-WebSocket-Key: 4aydOtRqVcaBw28cVlbl+Q== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 11:42:37 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 93664a27-93c0-456c-8a0a-99c8eff03501 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49789	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 935017b2-001e-0017-80c6-450c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114235Z-1746fd949bd54zxghC1EWRzre4000000019g000000009euy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:36 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49788	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:35 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 5f5d2afa-901e-0015-66cc-45b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114235Z-1746fd949bd2cq7chC1EWRnx9g00000000vg000000002ea2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:36 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49790	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:36 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 6baa9d1a-801e-0048-02ce-45f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114236Z-1746fd949bdjzh7thC1EWR3g640000000140000000007pmn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:36 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49795	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	837	OUT	GET /Prefetch/Prefetch.aspx HTTP/1.1 Host: dc7f6cce-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:37 UTC	485	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:37 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache x-ms-correlation-id: d165e3e7-4832-4e74-824d-9548ac44ee88 x-ua-compatible: IE=Edge x-cache: CONFIG_NOCACHE x-msedge-ref: Ref A: 79917B9FDC884F0EA75DF0129C819F88 Ref B: BL2EDGE1821 Ref C: 2024-12-04T11:42:37Z access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:37 UTC	1252	IN	Data Raw: 34 64 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 69 73 6f 2d 38 38 35 39 2d 31 22 2f 3e 0d 0a 3c 74 69 74 6c 65 3e 34 30 34 20 Data Ascii: 4dd<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"/><title>404
2024-12-04 11:42:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49791	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:36 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 715419d5-801e-0078-38c7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114236Z-1746fd949bdw2rg8hC1EWR11u400000001d000000000593r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:36 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49792	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:36 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:36 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 0e2e5981-501e-0035-17c1-45c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114236Z-1746fd949bdb8xvchC1EWRmbd40000000150000000002qm4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:36 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49797	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:37 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 9b021dfd-501e-0047-60c1-45ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114238Z-1746fd949bdxk6n6hC1EWRdr8c0000000130000000000zx4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49796	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:37 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: c73ff22a-601e-0097-54c1-45f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114238Z-1746fd949bd7wvgbhC1EWR0rgs0000000130000000009c2w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:38 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49799	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:37 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 686307fb-901e-0029-3dcc-45274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114238Z-1746fd949bd77mkmhC1EWR5efc00000001cg0000000065ah x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49798	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:37 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 4da954f1-f01e-003f-58cd-45d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114238Z-1746fd949bdjrnwqhC1EWRpg28000000016g000000005wnd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49800	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:38 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:38 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: bbae04f8-a01e-0032-80cc-451949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114238Z-1746fd949bdwt8wrhC1EWRu6rg00000001600000000099kd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:38 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49801	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:39 UTC	564	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:41 UTC	813	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:41 GMT Content-Type: application/x-javascript Content-Length: 116418 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD5317046A2F x-ms-request-id: 11412feb-001e-0078-3cc3-405f03000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114240Z-164dd7df599qrfc9hC1YTOgqu80000000p4g000000004fs0 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:41 UTC	6407	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: 33 56 c1 62 46 be d5 ec 57 c4 fb fc 41 ff a3 ec 9c 53 b4 9f 41 3e 30 ee 9b 7f 07 9a 02 b6 a0 fb 4f 06 db d1 4d 12 f6 37 f3 2f cc b8 12 f3 6a c9 bb 87 04 88 8f 31 75 2f 7f f2 9e 84 38 ea c9 54 de 01 d3 6a ca 58 01 19 0d c5 d0 92 00 37 87 70 53 74 ea 7f 5f 90 46 b8 52 2d e5 fc 93 15 4d 96 9c 24 59 21 76 cf 19 fa 18 78 59 89 de 00 ab 6d 22 f6 dc dc 03 28 94 34 cd a8 6f 48 47 0f a0 12 0d 60 5c 69 e3 18 28 64 c3 b9 6f a2 3a 97 66 be 89 8a dc f0 d2 1b 00 88 99 01 74 b9 69 34 6e b4 63 77 07 24 15 00 96 e2 4e 11 73 bb c2 9d ac 0a 62 7f d2 71 43 eb 16 8e f0 e5 70 60 f2 9f e2 66 d4 ca a7 99 09 a7 64 f4 8d c3 8d 16 eb d5 57 85 7c 60 5c 09 11 43 d1 42 28 aa 9e 8a aa 43 bd ea a8 7f 8d 12 e6 40 6f 83 e4 0b ba 24 ad 0d a7 b4 f7 f7 3e 10 30 c0 c7 73 dd 7f 57 49 2c 35 bb Data Ascii: 3VbFWASA>0OM7/j1u/8TjX7pSt_FR-M$Y!vxYm"(4oHG`\i(do:fti4ncw$NsbqCp`fdW\|`\CB(C@o$>0sWI,5
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: 50 d4 83 31 b6 d5 08 48 12 bb d7 91 e8 72 4f 4a 62 09 4b 0a 74 b9 27 d1 25 8e 12 d1 e5 1e 5a 2f 8c 94 24 95 d0 25 52 1d 84 2e 77 5f 09 74 b9 07 a4 b1 10 c4 be 22 41 6c 4a 52 85 9b 1b 3e f2 bd 84 03 e6 4b c5 71 cc 1f dd c3 a3 99 c8 00 09 18 30 6d bd f5 e3 19 aa 2d 00 fb a5 ad 77 72 54 80 06 d3 d6 07 28 e2 5d f3 37 13 2f 08 f8 14 90 62 da 92 d1 99 bf b9 6d 00 a7 8f 8b de a4 28 f8 81 12 94 e5 08 6e 11 ae e1 34 bc 29 47 d1 9b 9a 5f 50 a7 2f 4f ca 17 98 d0 9e 9c 5c bc 66 1c 33 65 02 e4 7d 4a 77 61 3d 22 5b 0f c5 ce 0a c5 e0 a1 4c c4 c5 be 16 5e c0 80 c3 38 91 c3 01 10 97 50 04 6c 84 87 c3 70 da 34 36 37 8d 66 d0 9a 40 11 40 5a 00 d1 ee 00 1c 5f 15 29 80 a5 44 d0 68 b0 24 46 30 16 b6 9b 87 26 25 a6 1d e5 25 59 1e 77 f2 cb 65 b3 f9 ad a0 c3 f4 00 66 e7 fa 31 b4 Data Ascii: P1HrOJbKt'%Z/$%R.w_t"AlJR>Kq0m-wrT(]7/bm(n4)G_P/O\f3e}Jwa="[L^8Plp467f@@Z_)Dh$F0&%%Ywef1
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: 24 a2 61 be b0 34 4f 9c 73 62 42 bc 1f ca d1 44 65 a1 cd 67 5a d9 c9 33 43 43 83 cc 9a 45 32 68 60 d1 52 3c e4 2b 9b 21 eb 19 94 13 8e 66 54 0f 39 9a a7 85 83 38 ab e9 4f 17 4b cf 2c 40 bc 5a c2 2a d9 50 c0 56 ff 33 40 80 6c fc 33 41 70 5e e5 bf 9e de 99 3c 61 53 26 77 a6 2b f7 c1 3a 29 ba 0b 7e 08 90 05 7d 15 ac 37 21 14 d9 c8 bf 08 a1 28 88 9e 86 50 54 d3 48 4f bb b2 05 50 a2 f9 5a c4 92 98 a4 2f 70 7e 95 b9 5a 8f 7e dd a9 22 3b f3 ec 99 72 ea bf 2e 43 01 6a e9 ad e0 9b ea 29 ee c9 2a a7 d1 2f d8 59 fc 93 3a 68 c4 ba 6f c3 c3 37 68 a1 1c 99 71 e0 d7 6f fc c0 38 f7 c8 69 c6 e0 d3 6a a8 8d cd 1b 3f f5 82 a0 a5 f8 8e 66 4d 96 b6 16 3b 79 59 5f 88 bd 8e 76 eb 4a 14 bb 46 fe 5b 70 20 71 fe 8c 12 b7 73 3e 3d 6d 04 6d f4 f5 32 ce 2d c2 c5 cc 46 3e a9 b0 59 f8 Data Ascii: $a4OsbBDegZ3CCE2h`R<+!fT98OK,@ZPV3@l3Ap^<aS&w+:)~}7!(PTHOPZ/p~Z~";r.Cj)/Y:ho7hqo8ij?fM;yY_vJF[p qs>=mm2-F>Y
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: 81 1c ff 1e 85 73 40 80 13 5a c4 86 05 91 e5 a7 f7 bc 05 dc c9 6a 55 4c 7a 22 84 b6 cd 93 94 9d 51 30 ce fb 33 e1 19 1a d7 d2 b1 6d 78 5f a7 d2 8a c3 f5 c8 45 0c 78 42 41 89 d6 c7 a6 7a 73 d9 08 db 58 7a bc d5 74 53 8d e1 88 d1 56 43 52 ab 97 d2 98 72 97 c7 60 74 a2 aa 62 f6 4d a9 bc cd c2 ba b4 3a 2f ee a3 a2 1f 7c 77 09 00 21 63 d8 9a 26 61 b6 85 ea 42 c0 d3 1f 23 a0 64 83 ad 2f 2d 54 8b 7c b9 c5 7d 21 d9 7d 21 c2 d3 4b 14 d5 17 41 59 53 de df f2 d1 30 e5 b0 5b 6b 06 14 d1 4e 55 97 89 bf 92 f1 5b 33 58 3e 01 84 8d 1e d8 80 d7 80 56 45 cd df d8 97 20 fa ae 0a 4c 46 7f be 4b 26 ae b1 28 a9 86 4e 63 6d 18 9d ca f2 3a f5 61 38 5e e6 3d 70 29 f5 32 f2 c0 10 89 e0 5a 06 f1 96 5c 00 4d dd 17 e0 f5 c6 88 bf 06 94 06 0c de c3 58 0e ab 41 97 ac bb 29 0a 3b d1 15 Data Ascii: s@ZjULz"Q03mx_ExBAzsXztSVCRr`tbM:/\|w!c&aB#d/-T\|}!}!KAYS0[kNU[3X>VE LFK&(Ncm:a8^=p)2Z\MXA);
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: b9 e2 81 ee a2 8e 31 80 23 cc f9 89 67 46 95 8c 34 de 5c 2d db dd fa 96 95 8f ce 20 17 cc a3 b0 a3 f2 51 5b 19 6c 73 79 1d 16 69 88 59 aa ee 5d 8b 82 23 34 a2 9c eb e8 84 f4 51 e9 ca c6 7b f1 8f b3 22 a5 e5 58 c6 d9 65 34 cb 37 ae 48 25 93 55 39 e8 03 26 3c 2e 77 a9 58 a9 a3 98 d8 29 25 92 56 ef 51 62 06 0b 30 e4 7e a1 3b 8f d2 ea 22 55 6b 87 5a 41 65 5c 3b 2c 32 d1 77 97 e2 1a 8d 3b 8b 29 6b 7d 1d ad 9c f2 f8 f1 ec ac 09 47 d2 38 72 3c a5 cf 3a 3c cd 10 af 53 e6 18 91 7e a2 18 d1 86 6c d0 9c 94 ab 5e a0 9f ee 9a 2a e5 9b 3a 5c bf e6 a2 3e 79 1b 5d 5c 56 a9 0e 43 c2 a0 fb 6e 9a 47 bb 08 d3 92 e2 82 a7 a5 4e a9 af 7a ac b9 74 f8 a0 8e 7d dd 19 f7 d3 70 c6 2c ab 54 45 25 39 33 27 59 45 9d 4d 7c 7e 99 8a 19 25 e8 b6 0d cd 38 76 5b ee 8c 61 11 6b c0 7a 5a a6 Data Ascii: 1#gF4\- Q[lsyiY]#4Q{"Xe47H%U9&<.wX)%VQb0~;"UkZAe\;,2w;)k}G8r<:<S~l^*:\>y]\VCnGNzt}p,TE%93'YEM\|~%8v[akzZ
2024-12-04 11:42:42 UTC	6169	IN	Data Raw: cb 38 34 cf 2c 91 02 33 8f f5 3b 78 c2 6a 39 e0 56 cb 11 cc 62 0f 08 56 17 05 1c 0f 0b 8a dc 17 eb 5c c6 2d 43 f7 79 b0 79 b3 d7 19 93 0d 42 3a 78 8d 85 71 6a 58 12 ca 7d f0 3d ab 5b df df 5b 0f b9 66 69 72 73 62 23 66 a4 58 7f 24 31 30 4f bf be 0d d6 5d f1 26 a1 d4 68 5c a7 f8 f4 9a 65 0e 20 13 10 3f 48 a5 c8 52 48 ee 14 f0 6d 05 7a 71 f2 ad d8 24 39 3e 33 0e 62 8f 6d 69 13 5a 6f a4 6c 42 e5 24 73 83 4b e2 a3 e3 31 6a 9c b8 d1 28 83 71 92 52 7b 8d ad 39 7e ca 78 f4 19 a3 51 2b 65 34 92 6d 09 8a f8 92 05 89 f0 67 c4 03 16 aa b6 a0 bd 6c 5b 50 4b 97 d6 a0 70 86 a2 11 ba df 9e ea 7e c7 eb a2 31 28 fe 9a 98 94 7c 3d 53 d0 67 48 45 34 1d b2 02 80 cf 26 d7 3f ff 80 f6 9c 00 f5 e6 07 db e8 cd eb b5 ca 3a 4b 27 e0 c1 09 ce ee 43 db 0d 1c 38 ef 05 05 ad 16 6d 27 Data Ascii: 84,3;xj9VbV\-CyyB:xqjX}=[[firsb#fX$10O]&h\e ?HRHmzq$9>3bmiZolB$sK1j(qR{9~xQ+e4mgl[PKp~1(\|=SgHE4&?:K'C8m'
2024-12-04 11:42:42 UTC	16384	IN	Data Raw: e4 a4 cf 45 96 f0 42 27 ec ea 3c c4 1b 5b 46 ac ae 94 1b 32 8f 30 1f 8d 0e 63 40 78 5c 5d cf 43 34 c4 96 84 71 f0 8d 9c 5b e2 6a 8d c4 76 9a de e1 14 b7 5b 02 ea 09 b7 35 26 50 b3 82 f0 1c b7 0a ac b0 84 82 01 9c 3b 1d 4c e0 00 78 84 cb 73 f5 81 c9 5b 30 5a bc 63 33 c4 f8 64 43 3d ed f4 bb e6 8c 2b 04 67 b8 f4 4a 93 28 7a 8a d4 12 74 b0 85 73 ac 50 88 53 ae c0 5b 80 e2 e1 2b cd e9 a2 bb d8 5c 7a 18 1b 94 c5 07 6e fd 40 04 16 ae ed 35 52 41 df 04 38 0c 24 38 8c 25 c8 8c 24 c8 4c a5 ce 83 8c 58 d0 ac 65 26 45 cc 77 12 64 1e 33 62 a9 89 28 49 68 79 74 2f c1 ea 4a 80 15 19 af 50 38 a4 0b 79 b4 9f 99 37 02 d4 50 6d 88 f6 2b 27 14 bf e8 1a 7e 95 00 47 42 6f c1 f7 f2 8e 24 35 35 8c a2 b4 22 f3 fe 90 28 60 a4 65 4b 6c ba 22 4c 5b e4 07 d1 b6 25 97 fb 02 07 7b da Data Ascii: EB'<[F20c@x\]C4q[jv[5&P;Lxs[0Zc3dC=+gJ(ztsPS[+\zn@5RA8$8%$LXe&Ewd3b(Ihyt/JP8y7Pm+'~GBo$55"(`eKl"L[%{
2024-12-04 11:42:42 UTC	5538	IN	Data Raw: d3 d3 11 09 87 d8 b7 c4 cf 17 30 78 a8 e9 fa 46 74 b1 1e 00 27 cf 23 1a 58 42 9d ea 98 c2 f5 1a ef 18 8e 90 fb 9a 39 14 ee 53 6a 19 cb ca d0 6a 45 c8 67 13 e5 fa 76 be 58 d0 3a 60 94 12 fe 2d 5c a0 4b 61 ae f2 6f 64 6b b3 c7 3c 0f cf 67 39 de 98 8c 42 e5 68 ac 16 27 71 93 d6 02 9d f3 cb c8 07 ad 8f f1 21 6c 9a 14 af 5a 20 ff 29 7c 11 59 5c 2a 10 e0 4e 11 de da b2 da 39 c0 d3 da 24 b8 08 6b 41 6d 69 b9 6d a7 76 0e c8 28 19 a1 9c d4 36 b6 64 54 0a ff b9 14 92 47 1a f4 d5 98 9c 12 ee 10 05 55 b7 2c 5c 92 3b 42 f8 99 dd 45 0d 68 e9 ac e6 b5 74 de e3 a7 a5 83 45 b1 c6 0b 29 ec 8e db 25 b7 9a 58 e0 f6 96 1c 64 e2 63 9f 4f 0a 52 6e a8 94 64 1d 48 90 25 32 ae ff 62 f7 bd f7 d1 ed a1 13 e7 f0 b4 7b db d9 be dd e8 3a f0 28 1c 6c 3b 5c c3 d7 eb ad 1c 96 00 76 5e 9f Data Ascii: 0xFt'#XB9SjjEgvX:`-\Kaodk<g9Bh'q!lZ )\|Y\*N9$kAmimv(6dTGU,\;BEhtE)%XdcORndH%2b{:(l;\v^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49802	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:39 UTC	746	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:41 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: application/x-javascript Content-Length: 5536 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD531731891C x-ms-request-id: 8947869b-101e-0016-1bc3-400a2c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114240Z-164dd7df599hxd8jhC1YTOqxmn0000000p6g0000000032br x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:41 UTC	5536	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7f 77 da 46 d6 fe 7f 3f 85 d0 ee 21 d2 66 2c db 4d db b4 72 55 1f 07 70 42 6b c7 ae c1 ed 66 93 1c 8e 40 03 28 16 92 aa 11 c6 d4 f0 dd df e7 ce 48 48 80 c0 4e df ed 49 2d 6b e6 ce 9d 3b 77 ee ef 2b 1f fe bb f6 0f ed df da c1 f3 ff d3 3a dd b3 9b ae 76 75 ae 75 df b5 6f 9a da 35 de 3e 68 ef af ba ed 46 eb f9 78 68 53 fa bf 3b f6 85 36 f4 03 ae e1 d9 77 05 f7 b4 28 d4 a2 44 f3 c3 41 94 c4 51 e2 a6 5c 68 13 fc 4c 7c 37 d0 86 49 34 d1 d2 31 d7 e2 24 fa c2 07 a9 d0 02 5f a4 58 d4 e7 41 34 d3 0c a0 4b 3c ed da 4d d2 b9 d6 be 36 2d e0 e7 c0 e6 8f fc 10 ab 07 51 3c c7 ef e3 54 0b a3 d4 1f 70 cd 0d 3d 89 2d c0 4b 28 b8 36 0d 3d 9e 68 b3 b1 3f 18 6b 97 fe 20 89 44 34 4c b5 84 0f b8 7f 8f 4d c4 14 e3 eb 5b 30 cd 4d b8 26 78 aa 0d Data Ascii: [wF?!f,MrUpBkf@(HHNI-k;w+:vuuo5>hFxhS;6w(DAQ\hL\|7I41$_XA4K<M6-Q<Tp=-K(6=h?k D4LM[0M&x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49804	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:39 UTC	794	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:41 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 8792da23-401e-006a-6fc3-401b7e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114240Z-164dd7df599zn726hC1YTOd4ys0000000pag000000000xxn x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:41 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-12-04 11:42:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49803	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:39 UTC	788	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:41 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:41 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 8b8c7902-d01e-005f-3dc3-4000d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114240Z-164dd7df599bk5hjhC1YTOpv5s0000000p1g000000003qbx x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:41 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-12-04 11:42:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49805	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:40 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 71541f9e-801e-0078-2fc7-45bac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114242Z-1746fd949bdjzh7thC1EWR3g6400000001a00000000003p3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49808	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:40 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 5cfda45f-901e-00ac-3dce-45b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114240Z-1746fd949bdlnsqphC1EWRurw00000000110000000004d15 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49806	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:40 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: f87bd39b-701e-0097-59cc-45b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114240Z-1746fd949bd7wvgbhC1EWR0rgs000000019g000000001gaa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:40 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49809	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:40 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: 2accf417-001e-0014-64cb-455151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114240Z-1746fd949bd4w8sthC1EWR700400000000zg0000000023e2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:40 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49807	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:40 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 901a75be-701e-0053-76cb-453a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114240Z-1746fd949bdhk6hphC1EWRaw3c00000000u0000000008e5e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49810	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:41 UTC	709	OUT	GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1 Host: documents.wyr-law.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://documents.wyr-law.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: 2CusilZusX03TDzwRoPYaw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 11:42:43 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: 732a3ffc-a86b-4d8e-b29f-b92f73332d01 x-ms-ests-server: 2.1.19492.3 - FRC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49815	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	566	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pfetchsessionsprogress_d0a803279e7397bef834.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: application/x-javascript Content-Length: 5536 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:54 GMT etag: 0x8DCBD531731891C x-ms-request-id: 8947869b-101e-0016-1bc3-400a2c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114243Z-164dd7df599qrfc9hC1YTOgqu80000000p90000000001gru x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:44 UTC	5536	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 5b 7f 77 da 46 d6 fe 7f 3f 85 d0 ee 21 d2 66 2c db 4d db b4 72 55 1f 07 70 42 6b c7 ae c1 ed 66 93 1c 8e 40 03 28 16 92 aa 11 c6 d4 f0 dd df e7 ce 48 48 80 c0 4e df ed 49 2d 6b e6 ce 9d 3b 77 ee ef 2b 1f fe bb f6 0f ed df da c1 f3 ff d3 3a dd b3 9b ae 76 75 ae 75 df b5 6f 9a da 35 de 3e 68 ef af ba ed 46 eb f9 78 68 53 fa bf 3b f6 85 36 f4 03 ae e1 d9 77 05 f7 b4 28 d4 a2 44 f3 c3 41 94 c4 51 e2 a6 5c 68 13 fc 4c 7c 37 d0 86 49 34 d1 d2 31 d7 e2 24 fa c2 07 a9 d0 02 5f a4 58 d4 e7 41 34 d3 0c a0 4b 3c ed da 4d d2 b9 d6 be 36 2d e0 e7 c0 e6 8f fc 10 ab 07 51 3c c7 ef e3 54 0b a3 d4 1f 70 cd 0d 3d 89 2d c0 4b 28 b8 36 0d 3d 9e 68 b3 b1 3f 18 6b 97 fe 20 89 44 34 4c b5 84 0f b8 7f 8f 4d c4 14 e3 eb 5b 30 cd 4d b8 26 78 aa 0d Data Ascii: [wF?!f,MrUpBkf@(HHNI-k;w+:vuuo5>hFxhS;6w(DAQ\hL\|7I41$_XA4K<M6-Q<Tp=-K(6=h?k D4LM[0M&x

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49814	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:42 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 1a0f4f93-001e-0049-61cb-455bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114242Z-1746fd949bdl6zq5hC1EWRf3ws00000000rg000000008610 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:42 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49816	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	775	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 2f9c8f3c-201e-0050-24c3-403eab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114243Z-164dd7df5995ks78hC1YTOzszw0000000ph00000000020tq x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:44 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-04 11:42:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49817	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	788	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 7a28559e-501e-0033-20c3-40eb42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114243Z-164dd7df599v2tqqhC1YTOqpv000000009c0000000005r1b x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:44 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-04 11:42:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49811	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:42 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 6fdb675e-b01e-0070-05ce-451cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114242Z-1746fd949bdw2rg8hC1EWR11u400000001b00000000081ne x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:42 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49812	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:42 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:42 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: f6fadb53-501e-0064-5acb-451f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114242Z-1746fd949bdqpttnhC1EWRe1wg00000000v0000000007bqe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:42 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49818	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	789	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 7bcc1ee9-701e-003f-03c3-403458000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114244Z-164dd7df599ts7rphC1YTOn4c00000000nzg0000000053p4 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:44 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-04 11:42:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49819	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	554	OUT	GET /shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:47 GMT etag: 0x8DB5C3F48EC4154 x-ms-request-id: 8792da23-401e-006a-6fc3-401b7e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114244Z-164dd7df5995f4drhC1YTOxkh80000000ph0000000001whr x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:44 UTC	2679	IN	Data Raw: 61 37 30 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 ff ff ff 96 96 96 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 06 00 00 00 30 00 03 00 00 02 1a 8c 01 16 88 ca ec 1e 3c f2 a9 18 1b b5 5b e6 9a 5c 4b 38 6a e5 74 72 a9 67 14 00 21 f9 04 09 03 00 00 00 2c 07 00 00 00 33 00 03 00 00 02 1a 8c 81 16 c8 ca ef 5e 3b 12 2a 0a e2 5c 55 4b df 5d 5c 86 25 e5 56 99 63 aa 14 00 21 f9 04 09 05 00 00 00 2c 0a 00 00 00 37 00 03 00 00 02 1a 8c 81 60 91 b9 ed 0e 6c 6f c6 c5 ee ac 90 5b bf 61 19 02 2a 52 77 7e Data Ascii: a70GIF89a`!NETSCAPE2.0!,`6PlHI:qJk`BYL&!,0<[\K8jtrg!,3^;\UK]\%Vc!,7`lo[a*Rw~
2024-12-04 11:42:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49820	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:42 UTC	548	OUT	GET /shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:44 UTC	761	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:44 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4904824B x-ms-request-id: 8b8c7902-d01e-005f-3dc3-4000d5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114244Z-164dd7df5995ks78hC1YTOzszw0000000pe0000000004c83 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:44 UTC	3627	IN	Data Raw: 65 32 34 0d 0a 47 49 46 38 39 61 60 01 03 00 f0 00 00 00 00 00 69 69 69 21 f9 04 09 05 00 00 00 21 fe 26 45 64 69 74 65 64 20 77 69 74 68 20 65 7a 67 69 66 2e 63 6f 6d 20 6f 6e 6c 69 6e 65 20 47 49 46 20 6d 61 6b 65 72 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 36 84 1d a9 b7 07 ed 50 8a 6c d2 8b b3 de bc fb 0f 86 e2 48 96 e6 89 a2 0a 04 49 01 d6 3a 71 4a d7 f6 8d e7 fa ce 6b ab f5 00 ba 60 42 59 b1 87 4c 2a 97 cc 26 af 00 00 21 f9 04 09 05 00 00 00 2c 00 00 00 00 60 01 03 00 00 02 39 84 1f 69 19 07 ec 96 8a b2 51 34 af de bc fb 0f 86 e2 48 96 e6 89 a6 6a 0a 3d 99 6b 39 2d 35 5f f5 8a e7 fa ce f7 fe 0f 8c b4 6a 37 98 a6 28 7b 05 97 cc a6 f3 09 d5 15 00 00 21 f9 04 09 03 00 00 00 2c 00 00 00 00 60 01 03 00 Data Ascii: e24GIF89a`iii!!&Edited with ezgif.com online GIF maker!NETSCAPE2.0,`6PlHI:qJk`BYL*&!,`9iQ4Hj=k9-5_j7({!,`
2024-12-04 11:42:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49813	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:43 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:43 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:43 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 8c60988c-801e-00a3-08c1-457cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114243Z-1746fd949bdjzh7thC1EWR3g640000000140000000007puu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:43 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49822	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:44 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:45 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: b51b559c-801e-008c-7fcc-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114245Z-1746fd949bdw2rg8hC1EWR11u400000001dg0000000050th x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:45 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49821	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:44 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:45 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 7057cc02-501e-008f-16cc-459054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114245Z-1746fd949bdxk6n6hC1EWRdr8c0000000120000000002npy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:45 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49823	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:44 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:45 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 68175a90-d01e-0065-3ed1-45b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114245Z-1746fd949bdqpttnhC1EWRe1wg0000000100000000000d3m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:45 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49824	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:44 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 859db5fc-901e-005b-23cb-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114245Z-1746fd949bdxk6n6hC1EWRdr8c000000011g000000003d4m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:45 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49825	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:45 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:46 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: bcf9f347-101e-007a-60d2-45047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114245Z-1746fd949bdwt8wrhC1EWRu6rg00000001d0000000000wqq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:46 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49827	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:45 UTC	548	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:47 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:46 GMT etag: 0x8DB5C3F47E260FD x-ms-request-id: 7a28559e-501e-0033-20c3-40eb42000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114247Z-164dd7df599rvsf5hC1YTOpyg00000000pgg000000002a6p x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:47 UTC	680	IN	Data Raw: 32 61 31 0d 0a 1f 8b 08 00 00 00 00 00 00 ff b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 Data Ascii: 2a1Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9
2024-12-04 11:42:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49826	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:45 UTC	549	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:47 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:48 GMT etag: 0x8DB5C3F4911527F x-ms-request-id: 7bcc1ee9-701e-003f-03c3-403458000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114247Z-164dd7df599lspm6hC1YTO03d00000000pfg000000002mtv x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:47 UTC	1442	IN	Data Raw: 35 39 62 0d 0a 1f 8b 08 00 00 00 00 00 00 ff bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 Data Ascii: 59bWMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#
2024-12-04 11:42:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49828	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:45 UTC	814	OUT	GET /lcatterton.com/winauth/ssoprobe?client-request-id=997c4121-0f6a-4347-a457-2af89d69191a&_=1733312560783 HTTP/1.1 Host: 67c8fb70-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49829	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:45 UTC	535	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:48 UTC	764	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:48 GMT Content-Type: image/x-icon Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Sun, 18 Oct 2020 03:02:03 GMT etag: 0x8D8731230C851A6 x-ms-request-id: 2f9c8f3c-201e-0050-24c3-403eab000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114247Z-164dd7df599ts7rphC1YTOn4c00000000p50000000000rs6 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes
2024-12-04 11:42:48 UTC	2286	IN	Data Raw: 38 65 37 0d 0a 00 00 01 00 06 00 10 10 00 00 00 00 20 00 16 01 00 00 66 00 00 00 18 18 00 00 00 00 20 00 24 01 00 00 7c 01 00 00 20 20 00 00 00 00 20 00 35 01 00 00 a0 02 00 00 30 30 00 00 00 00 20 00 6a 01 00 00 d5 03 00 00 40 40 00 00 00 00 20 00 f3 01 00 00 3f 05 00 00 80 80 00 00 00 00 20 00 b5 01 00 00 32 07 00 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 dd 49 44 41 54 78 9c dd 92 31 4e 43 41 10 43 df cc 8e 44 40 b0 22 2d 65 6e c4 21 90 68 c3 15 38 40 ce c4 39 68 a8 11 22 e4 ff 00 05 93 35 4d 1a b2 bf 89 68 10 2e 2d 8d c7 b6 6c 9b eb 85 4c fc 80 50 d6 59 09 5e 6c 75 77 ff c8 95 d9 72 dc 28 cd 08 0e e0 87 c7 c7 c2 7f 77 fe 17 04 42 28 7b da 12 04 f2 26 01 46 02 a9 89 be a2 ce 4e ba 66 Data Ascii: 8e7 f $\| 500 j@@ ? 2PNGIHDRaIDATx1NCACD@"-en!h8@9h"5Mh.-lLPY^luwr(wB({&FNf
2024-12-04 11:42:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49831	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:46 UTC	733	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:48 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:48 GMT Content-Type: application/x-javascript Content-Length: 7401 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD53179C7D04 x-ms-request-id: 85327b23-201e-0029-68af-438a9d000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114248Z-164dd7df599v2tqqhC1YTOqpv000000009hg000000000d4p x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:48 UTC	7401	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 df f7 57 d0 da 3d 0e b9 85 19 3b 69 73 53 ba ac 8f 9f b1 1a c7 d6 5a 4a b2 6d 92 a3 43 91 90 c4 98 22 58 12 b2 ac da fa ef 77 06 e0 9b a0 2d 27 e9 de de 7b ae 7a 6a 89 20 30 18 cc 7b 06 20 f3 f4 9f 1b 7f d3 fe a9 6d ad ff d1 fa 83 fd cb 81 76 71 a2 0d 4e bb 97 47 5a 0f ae 7e d5 ce 2f 06 dd c3 e3 f5 e1 e0 a4 f8 ff 60 ea 27 da d8 0f a8 06 df 23 27 a1 9e c6 42 8d c5 9a 1f ba 2c 8e 58 ec 70 9a 68 33 f8 1b fb 4e a0 8d 63 36 d3 f8 94 6a 51 cc 3e 53 97 27 5a e0 27 1c 06 8d 68 c0 16 9a 0e e0 62 4f eb 39 31 5f 6a dd 9e 61 02 7c 0a d0 fc 89 1f c2 68 97 45 4b f8 3d e5 5a c8 b8 ef 52 cd 09 3d 01 2d 80 8b 30 a1 da 3c f4 68 ac 2d a6 be 3b d5 de f8 6e cc 12 36 e6 5a 4c 5d ea 5f c3 24 c9 1c da ab 53 10 cd 89 a9 96 50 ae Data Ascii: =kw6W=;isSZJmC"Xw-'{zj 0{ mvqNGZ~/`'#'B,Xph3Nc6jQ>S'Z'hbO91_ja\|hEK=ZR=-0<h-;n6ZL]_$SP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49830	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:46 UTC	1377	OUT	POST /common/instrumentation/dssostatus HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive Content-Length: 67 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" hpgrequestid: d7c808cf-0853-45b2-9d5a-1ae13d551100 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 client-request-id: 997c4121-0f6a-4347-a457-2af89d69191a canary: PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeqCCe8zO8XOZUc9-lZc82sAb2ELchRiqs26c-DMOU_vmA9aQHxcopeP8Vl0LJeQuC6eekg115N6mcs_txdG6rxzrLQgnmtctngZqBja7X_oRGKd-U3NRbt_eOyQwl2Gl7rlYozQVQnkKk9JooHKC-VG0xx7pbKh5YGcjfxTjuiEJMhsIkWxQEbmiE1SLGo-4exOXZTiMnT29emN73qMmbAiAA Content-type: application/json; charset=UTF-8 hpgid: 1104 Accept: application/json hpgact: 2101 sec-ch-ua-platform: "Windows" Origin: https://documents.wyr-law.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://documents.wyr-law.com/?amp=cnlhbi5tb3JyaXNAbGNhdHRlcnRvbi5jb20=&timestamp=1733312528&rand1=47&rand2=mdfgluhkqswpzxa&rand3=51&rand4=38&rand5=92&sso_reload=true Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0
2024-12-04 11:42:46 UTC	67	OUT	Data Raw: 7b 22 72 65 73 75 6c 74 43 6f 64 65 22 3a 32 2c 22 73 73 6f 44 65 6c 61 79 22 3a 30 2c 22 6c 6f 67 22 3a 22 50 72 6f 62 65 20 69 6d 61 67 65 20 65 72 72 6f 72 20 65 76 65 6e 74 20 66 69 72 65 64 22 7d Data Ascii: {"resultCode":2,"ssoDelay":0,"log":"Probe image error event fired"}
2024-12-04 11:42:49 UTC	910	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:49 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache access-control-allow-origin: https://67c8fb70-59b1754a.wyr-law.com/ access-control-allow-credentials: true access-control-allow-methods: POST, OPTIONS p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" client-request-id: 997c4121-0f6a-4347-a457-2af89d69191a x-ms-request-id: d165b66c-690b-4fcf-952b-8c6754040f01 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin
2024-12-04 11:42:49 UTC	272	IN	Data Raw: 31 30 39 0d 0a 7b 22 61 70 69 43 61 6e 61 72 79 22 3a 22 50 41 51 41 42 44 67 45 41 41 41 44 57 36 6a 6c 33 31 6d 42 33 54 37 75 67 72 57 54 54 38 70 46 65 59 2d 67 77 7a 69 76 64 55 46 55 76 78 64 4f 67 58 79 6e 56 69 6e 47 31 4d 46 33 45 64 4b 53 6d 45 46 53 62 4b 56 70 54 4c 51 6b 2d 64 69 41 4b 2d 72 67 51 69 4d 32 39 52 42 63 66 52 62 4d 35 32 55 6d 7a 69 6c 53 77 50 76 30 4a 52 48 6b 7a 6d 50 70 53 57 4c 79 35 46 6c 30 53 72 71 30 55 70 35 37 69 46 68 76 4d 59 46 76 4f 6b 39 76 79 6d 79 50 6d 4d 71 47 37 6b 73 57 73 54 56 63 6f 64 31 62 53 6b 50 7a 51 59 74 34 69 6d 6d 36 71 34 59 45 42 38 35 32 49 47 78 4e 73 30 31 34 62 79 43 6f 5f 72 41 39 69 62 7a 70 52 68 71 6c 64 45 42 45 36 70 34 38 52 56 46 63 56 68 74 75 32 38 36 58 68 6f 59 33 7a 35 2d 6e Data Ascii: 109{"apiCanary":"PAQABDgEAAADW6jl31mB3T7ugrWTT8pFeY-gwzivdUFUvxdOgXynVinG1MF3EdKSmEFSbKVpTLQk-diAK-rgQiM29RBcfRbM52UmzilSwPv0JRHkzmPpSWLy5Fl0Srq0Up57iFhvMYFvOk9vymyPmMqG7ksWsTVcod1bSkPzQYt4imm6q4YEB852IGxNs014byCo_rA9ibzpRhqldEBE6p48RVFcVhtu286XhoY3z5-n
2024-12-04 11:42:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49832	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:47 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 2aa810bc-801e-008f-63c1-452c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114247Z-1746fd949bdhk6hphC1EWRaw3c00000000v00000000085mv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:47 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49833	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:47 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 26f79bf1-901e-0083-7ec4-45bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114247Z-1746fd949bdl6zq5hC1EWRf3ws00000000vg0000000046fg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:47 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49835	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:47 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 4879dc54-201e-0096-5ac3-45ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114247Z-1746fd949bdw2rg8hC1EWR11u400000001d00000000059hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:47 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49834	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:47 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:47 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:47 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 0312aba8-e01e-0085-12cc-45c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114247Z-1746fd949bdb8xvchC1EWRmbd40000000100000000009e08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:47 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49836	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:47 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:48 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:48 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 1e2c2913-401e-0078-28cc-454d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114248Z-1746fd949bdfg4slhC1EWR34t0000000013g000000001g6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:48 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49837	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:48 UTC	709	OUT	GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1 Host: documents.wyr-law.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://documents.wyr-law.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: VMYrNSwJBnZ7i3Wy6zyFsA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-12-04 11:42:51 UTC	735	IN	HTTP/1.1 404 Not Found Server: nginx Date: Wed, 04 Dec 2024 11:42:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: private p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: b3886d4c-cbfc-4154-a551-5f4ccc441f01 x-ms-ests-server: 2.1.19492.3 - SEC ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin access-control-allow-origin: * access-control-allow-headers: *
2024-12-04 11:42:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49840	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:50 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:50 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 72953a3b-301e-0000-41cd-45eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114250Z-1746fd949bd9x4mhhC1EWRb76n0000000160000000005ehq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:50 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49838	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:50 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:50 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 85a1d3f6-901e-005b-3ecd-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114250Z-1746fd949bdlnsqphC1EWRurw0000000011g000000003mf7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:50 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49842	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:50 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:50 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 92011275-e01e-0033-54c3-454695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114250Z-1746fd949bd9x4mhhC1EWRb76n000000015g000000006er0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:50 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49841	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:50 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:50 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 626f2b07-401e-0015-15d1-450e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114250Z-1746fd949bdjzh7thC1EWR3g640000000160000000005aq4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:50 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49839	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:50 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:50 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:50 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 859f66ca-901e-005b-0ccc-452005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114250Z-1746fd949bdzd2qvhC1EWRcygw00000000x0000000004kam x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:50 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49843	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:51 UTC	553	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_ppassword_89db715e3340a2e8ecd8.js HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:53 UTC	811	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:53 GMT Content-Type: application/x-javascript Content-Length: 7401 Connection: close cache-control: public, max-age=31536000 last-modified: Thu, 15 Aug 2024 17:52:55 GMT etag: 0x8DCBD53179C7D04 x-ms-request-id: 37169f70-001e-0073-0cc3-40ec7a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114253Z-164dd7df599s87hnhC1YTOzgqc0000000pc0000000002pth x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:42:53 UTC	7401	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 3d 6b 77 db 36 b2 df f7 57 d0 da 3d 0e b9 85 19 3b 69 73 53 ba ac 8f 9f b1 1a c7 d6 5a 4a b2 6d 92 a3 43 91 90 c4 98 22 58 12 b2 ac da fa ef 77 06 e0 9b a0 2d 27 e9 de de 7b ae 7a 6a 89 20 30 18 cc 7b 06 20 f3 f4 9f 1b 7f d3 fe a9 6d ad ff d1 fa 83 fd cb 81 76 71 a2 0d 4e bb 97 47 5a 0f ae 7e d5 ce 2f 06 dd c3 e3 f5 e1 e0 a4 f8 ff 60 ea 27 da d8 0f a8 06 df 23 27 a1 9e c6 42 8d c5 9a 1f ba 2c 8e 58 ec 70 9a 68 33 f8 1b fb 4e a0 8d 63 36 d3 f8 94 6a 51 cc 3e 53 97 27 5a e0 27 1c 06 8d 68 c0 16 9a 0e e0 62 4f eb 39 31 5f 6a dd 9e 61 02 7c 0a d0 fc 89 1f c2 68 97 45 4b f8 3d e5 5a c8 b8 ef 52 cd 09 3d 01 2d 80 8b 30 a1 da 3c f4 68 ac 2d a6 be 3b d5 de f8 6e cc 12 36 e6 5a 4c 5d ea 5f c3 24 c9 1c da ab 53 10 cd 89 a9 96 50 ae Data Ascii: =kw6W=;isSZJmC"Xw-'{zj 0{ mvqNGZ~/`'#'B,Xph3Nc6jQ>S'Z'hbO91_ja\|hEK=ZR=-0<h-;n6ZL]_$SP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49844	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:51 UTC	785	OUT	GET /shared/1.0/content/images/arrow_left_43280e0ba671a1d8b5e34f1931c4fe4b.svg HTTP/1.1 Host: d40a4b89-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:43:00 UTC	806	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close cache-control: public, max-age=31536000 last-modified: Wed, 24 May 2023 10:11:45 GMT etag: 0x8DB5C3F47A00633 x-ms-request-id: a06d3cdd-101e-0015-09c3-40d4e5000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding access-control-allow-origin: * x-azure-ref: 20241204T114259Z-164dd7df599lspm6hC1YTO03d00000000pc0000000005gw3 x-fd-int-roxy-purgeid: 4554691 x-cache: TCP_HIT accept-ranges: bytes content-encoding: gzip
2024-12-04 11:43:00 UTC	283	IN	Data Raw: 31 31 34 0d 0a 1f 8b 08 00 00 00 00 00 00 ff 95 51 3d 6f c3 20 10 fd 2b 88 ae e6 e0 08 d8 b8 b2 3d 74 ca 90 ae 1d ba 45 8a 6b 5b 22 1f aa 91 c9 cf 2f 67 3b 6e 87 2c 15 f0 80 bb 7b ef 9e a0 1a a7 8e dd cf fe 32 d6 bc 0f e1 f6 2a 65 8c 11 e2 0e ae df 9d d4 4a 29 99 2a 38 8b c3 29 f4 35 d7 86 b3 be 1d ba 3e 2c e7 69 68 e3 db f5 5e 73 c5 14 d3 26 4d de 54 61 08 be 6d 8e e3 d8 86 b1 92 cb ad ba 1d 43 cf 4e 35 7f 47 97 21 82 2d dc 04 ce 98 7d 01 39 16 7e 07 a5 c6 8c d0 09 b0 a5 a1 75 c8 33 d4 de 40 69 8c 98 71 4b cc 9c 55 e5 93 b3 af c1 fb 9a bf 18 45 83 cb bf bd 14 f1 b2 02 94 cd fd 53 fa 1e ff ef e3 ac 04 a0 41 01 aa c0 b4 0e 36 95 97 a4 47 9b 05 67 1d 11 d6 2c 66 33 67 c1 35 46 1b b1 49 9d da d8 47 40 3c 0e 98 4c 2e 3a 60 b5 4e 26 01 3f 52 03 93 0c cf 89 64 Data Ascii: 114Q=o +=tEk["/g;n,{2eJ)8)5>,ih^s&MTamCN5G!-}9~u3@iqKUESA6Gg,f3g5FIG@<L.:`N&?Rd
2024-12-04 11:43:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49845	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:51 UTC	821	OUT	GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419 HTTP/1.1 Host: 7aea1062-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:55 UTC	547	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:55 GMT Content-Type: image/* Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding cache-control: public, max-age=86400 etag: 0x8D58B76131BFB79 last-modified: Fri, 16 Mar 2018 19:42:38 GMT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7af11a39-701e-0016-2b41-46b535000000 x-ms-version: 2009-09-19
2024-12-04 11:42:55 UTC	7748	IN	Data Raw: 31 65 33 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 02 18 08 02 00 00 00 e8 c6 37 1f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 1d d1 49 44 41 54 78 5e ed dd db 92 e3 46 72 06 60 54 81 ec 99 ee 99 91 66 6e 7c da 91 2c f5 f5 fa c2 e1 b0 65 69 d7 77 eb 47 70 38 a4 77 f1 a5 1d b6 f7 85 2d 75 b3 ca 59 40 36 07 44 55 b2 91 64 81 40 92 ff 17 25 0d 9a 20 ce 3f 8b e8 24 1a 74 6f 1f ff d0 dc 18 17 43 d3 f8 e8 9a 18 9d f3 be 6d b7 d1 a7 c7 9c 73 fc 8c cb 8a 31 f2 d0 34 9e ff 1d 93 e7 a3 9b 7f 2d da ed 52 71 0f 8f 7f e4 c1 d5 93 76 04 45 50 89 0e 7d 88 2e d0 0c bd df 6c da bb e8 36 14 62 7a 90 c7 5f 56 94 96 ab dc 30 b7 b2 Data Ascii: 1e3cPNGIHDR7sRGBgAMAapHYsodIDATx^Fr`Tfn\|,eiwGp8w-uY@6DUd@% ?$toCms14-RqvEP}.l6bz_V0
2024-12-04 11:42:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49846	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:51 UTC	819	OUT	GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179 HTTP/1.1 Host: 7aea1062-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:54 UTC	547	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:54 GMT Content-Type: image/* Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding cache-control: public, max-age=86400 etag: 0x8D58B7613F9157D last-modified: Fri, 16 Mar 2018 19:42:40 GMT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 264a1b18-001e-0023-6c41-46d921000000 x-ms-version: 2009-09-19
2024-12-04 11:42:54 UTC	5410	IN	Data Raw: 31 35 31 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 23 08 06 00 00 00 0e 95 3f c0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 14 af 49 44 41 54 78 5e ed 9c 07 7c 54 c5 b7 c7 7f bb d9 f4 4e 42 12 48 a8 21 40 42 4f 94 a6 88 d2 ab 98 20 a0 a0 f4 26 08 0a 28 e0 5f 11 44 44 44 45 40 41 23 fd 6f 79 68 14 e4 45 41 69 52 a4 88 20 2d 48 09 81 90 1e 48 d8 d4 4d df fb ce 99 bd 9b 6c 96 94 cd 63 e5 fd 7d 9f fb 35 97 bd 3b f5 de 99 39 73 ce 99 99 55 25 11 50 50 50 b8 6f d4 f2 a7 82 82 c2 7d a2 08 93 82 82 95 50 84 49 41 c1 4a 58 e4 33 e5 e6 17 20 fe 8e 16 76 ea 07 2b 7b c5 65 7a 04 36 f0 82 93 83 bd 1c a2 a0 f0 9f 8b 45 c2 Data Ascii: 151aPNGIHDR#?sRGBgAMAapHYs(JIDATx^\|TNBH!@BO &(_DDDE@A#oyhEAiR -HHMlc}5;9sU%PPPo}PIAJX3 v+{ez6E
2024-12-04 11:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49848	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:51 UTC	548	OUT	GET /common/instrumentation/dssostatus HTTP/1.1 Host: documents.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0
2024-12-04 11:42:54 UTC	856	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:53 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: no-store, no-cache pragma: no-cache access-control-allow-origin: https://67c8fb70-59b1754a.wyr-law.com/ access-control-allow-credentials: true access-control-allow-methods: POST, OPTIONS p3p: CP="DSP CUR OTPi IND OTRi ONL FIN" x-ms-request-id: cdd4106d-b3da-4f97-b0f6-d4eeaae97d00 x-ms-ests-server: 2.1.19492.3 - NEULR1 ProdSlices report-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://50bc8e2d-59b1754a.wyr-law.com/api/report?catId=GW+estsfd+frc"}]} nel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0} x-ms-srs: 1.P referrer-policy: strict-origin-when-cross-origin
2024-12-04 11:42:54 UTC	170	IN	Data Raw: 61 34 0d 0a 7b 22 65 72 72 6f 72 22 3a 7b 22 63 6f 64 65 22 3a 36 31 30 30 2c 22 73 74 73 45 72 72 6f 72 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 2c 22 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 22 3a 22 63 61 32 33 63 62 30 65 2d 66 37 36 61 2d 34 38 37 62 2d 39 32 30 66 2d 30 66 33 34 37 30 61 34 34 31 39 35 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 22 32 30 32 34 2d 31 32 2d 30 34 20 31 31 3a 34 32 3a 35 33 5a 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 41 41 44 53 54 53 39 30 30 35 36 31 22 7d 7d 0d 0a Data Ascii: a4{"error":{"code":6100,"stsError":"AADSTS900561","correlationId":"ca23cb0e-f76a-487b-920f-0f3470a44195","timestamp":"2024-12-04 11:42:53Z","message":"AADSTS900561"}}
2024-12-04 11:42:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49850	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:52 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:52 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 3e1c70e6-d01e-0028-76c3-457896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114252Z-1746fd949bd6ztf6hC1EWRvq2s00000000u0000000004c7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:52 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49851	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:52 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:52 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 4927bbd2-c01e-000b-53cc-45e255000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114252Z-1746fd949bdkw94lhC1EWRxuz400000001ag000000004yxv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:52 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49849	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:52 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:52 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: e8edc24c-801e-0083-0ecc-45f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114252Z-1746fd949bdzd2qvhC1EWRcygw00000000wg000000004wfu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:52 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49852	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:52 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:52 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:52 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8db94728-c01e-0034-79d1-452af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114252Z-1746fd949bd6zq92hC1EWRry480000000120000000007dbs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:52 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49853	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:52 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:52 UTC	470	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:52 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: d1823508-801e-008c-16d3-457130000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114252Z-1746fd949bd4w8sthC1EWR700400000000v00000000070y7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:52 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49855	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:54 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:54 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: dea1083a-301e-0051-14cb-4538bb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114254Z-1746fd949bdw2rg8hC1EWR11u400000001g0000000001sy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:55 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49854	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:54 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:54 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: c43eeb18-901e-008f-6ecb-4567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114254Z-1746fd949bdwt8wrhC1EWRu6rg00000001700000000089ew x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:55 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.5	49856	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:54 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:54 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 5bdbb5de-801e-0067-47cb-45fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114254Z-1746fd949bdnq7x2hC1EWRpxr000000000zg000000005f1t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49857	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:54 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:54 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 55cb7248-101e-0017-4fd4-4547c7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114254Z-1746fd949bd2cq7chC1EWRnx9g00000000ug000000003wat x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:55 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49858	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:54 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:55 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:55 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: ddb132fa-c01e-008d-18cc-452eec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114255Z-1746fd949bdwt8wrhC1EWRu6rg00000001cg000000001qkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:55 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49859	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:55 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=2S+VsBzpLc3SnZW&MD=f1444XW7 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-12-04 11:42:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 0a7e0ef2-5809-4f3b-bb66-c7560e8da486 MS-RequestId: 75e0b3fe-7057-420b-be09-ccde0833ee19 MS-CV: 24QU80Iy0UeHWUUi.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Dec 2024 11:42:55 GMT Connection: close Content-Length: 30005
2024-12-04 11:42:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-12-04 11:42:56 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49860	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	579	OUT	GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/bannerlogo?ts=636568261598439179 HTTP/1.1 Host: 7aea1062-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:58 UTC	569	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:58 GMT Content-Type: image/* Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 4 cache-control: public, max-age=86400 etag: 0x8D58B7613F9157D last-modified: Fri, 16 Mar 2018 19:42:40 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 264a1b18-001e-0023-6c41-46d921000000 x-ms-version: 2009-09-19
2024-12-04 11:42:58 UTC	5410	IN	Data Raw: 31 35 31 61 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d3 00 00 00 23 08 06 00 00 00 0e 95 3f c0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c2 00 00 0e c2 01 15 28 4a 80 00 00 14 af 49 44 41 54 78 5e ed 9c 07 7c 54 c5 b7 c7 7f bb d9 f4 4e 42 12 48 a8 21 40 42 4f 94 a6 88 d2 ab 98 20 a0 a0 f4 26 08 0a 28 e0 5f 11 44 44 44 45 40 41 23 fd 6f 79 68 14 e4 45 41 69 52 a4 88 20 2d 48 09 81 90 1e 48 d8 d4 4d df fb ce 99 bd 9b 6c 96 94 cd 63 e5 fd 7d 9f fb 35 97 bd 3b f5 de 99 39 73 ce 99 99 55 25 11 50 50 50 b8 6f d4 f2 a7 82 82 c2 7d a2 08 93 82 82 95 50 84 49 41 c1 4a 58 e4 33 e5 e6 17 20 fe 8e 16 76 ea 07 2b 7b c5 65 7a 04 36 f0 82 93 83 bd 1c a2 a0 f0 9f 8b 45 c2 Data Ascii: 151aPNGIHDR#?sRGBgAMAapHYs(JIDATx^\|TNBH!@BO &(_DDDE@A#oyhEAiR -HHMlc}5;9sU%PPPo}PIAJX3 v+{ez6E
2024-12-04 11:42:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49865	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	581	OUT	GET /dbd5a2dd-hwes8s7mmi9abmdrewsfauyn5jexmrxbz0ztxyln7ai/logintenantbranding/0/illustration?ts=636568261583251419 HTTP/1.1 Host: 7aea1062-59b1754a.wyr-law.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:42:58 UTC	569	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:42:58 GMT Content-Type: image/* Transfer-Encoding: chunked Connection: close accept-ranges: bytes access-control-allow-origin: * access-control-expose-headers: x-ms-request-id,Server,x-ms-version,Content-Length,Date,Transfer-Encoding age: 4 cache-control: public, max-age=86400 etag: 0x8D58B76131BFB79 last-modified: Fri, 16 Mar 2018 19:42:38 GMT x-cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 7af11a39-701e-0016-2b41-46b535000000 x-ms-version: 2009-09-19
2024-12-04 11:42:58 UTC	7748	IN	Data Raw: 31 65 33 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e8 00 00 02 18 08 02 00 00 00 e8 c6 37 1f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 1d d1 49 44 41 54 78 5e ed dd db 92 e3 46 72 06 60 54 81 ec 99 ee 99 91 66 6e 7c da 91 2c f5 f5 fa c2 e1 b0 65 69 d7 77 eb 47 70 38 a4 77 f1 a5 1d b6 f7 85 2d 75 b3 ca 59 40 36 07 44 55 b2 91 64 81 40 92 ff 17 25 0d 9a 20 ce 3f 8b e8 24 1a 74 6f 1f ff d0 dc 18 17 43 d3 f8 e8 9a 18 9d f3 be 6d b7 d1 a7 c7 9c 73 fc 8c cb 8a 31 f2 d0 34 9e ff 1d 93 e7 a3 9b 7f 2d da ed 52 71 0f 8f 7f e4 c1 d5 93 76 04 45 50 89 0e 7d 88 2e d0 0c bd df 6c da bb e8 36 14 62 7a 90 c7 5f 56 94 96 ab dc 30 b7 b2 Data Ascii: 1e3cPNGIHDR7sRGBgAMAapHYsodIDATx^Fr`Tfn\|,eiwGp8w-uY@6DUd@% ?$toCms14-RqvEP}.l6bz_V0
2024-12-04 11:42:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.5	49861	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:57 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 5ce939f7-901e-00ac-7ec7-45b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114257Z-1746fd949bdqpttnhC1EWRe1wg00000000w0000000005yvg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:57 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.5	49862	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: 4ebcc1fc-101e-0028-09cb-458f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114257Z-1746fd949bddtfvqhC1EWRxbpg000000015g000000001rns x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:57 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49863	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:57 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 0b7a0bcb-d01e-0082-68c5-45e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114257Z-1746fd949bdnq7x2hC1EWRpxr0000000012g000000001mtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:57 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49864	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:57 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 2e27a562-801e-00a0-79cb-452196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114257Z-1746fd949bdlnsqphC1EWRurw000000001400000000000y1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:57 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49866	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:56 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:57 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:57 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76609676-a01e-0070-74cc-45573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114257Z-1746fd949bdwt8wrhC1EWRu6rg00000001cg000000001qmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:57 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49867	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:57 UTC	1418	OUT	GET /?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com HTTP/1.1 Host: 8add78d1-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://documents.wyr-law.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:43:00 UTC	367	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:43:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: max-age=0, private access-control-allow-headers: * access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-max-age: 86400 access-control-allow-origin: *
2024-12-04 11:43:00 UTC	14118	IN	Data Raw: 33 37 31 65 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 74 72 61 6e 73 69 74 69 6f 6e 61 6c 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 0d 0a 09 4d 69 63 72 6f 73 6f 66 74 20 4f 6e 6c 69 6e 65 20 50 61 73 73 77 6f 72 64 20 52 65 73 65 74 0d 0a 3c 2f 74 69 74 6c 65 Data Ascii: 371e<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en-US"><head><title>Microsoft Online Password Reset</title
2024-12-04 11:43:01 UTC	16384	IN	Data Raw: 33 66 66 61 0d 0a 65 76 65 6e 74 29 3b 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 6c 61 62 65 6c 3d 27 52 65 6c 6f 61 64 27 20 74 61 62 69 6e 64 65 78 3d 22 33 22 20 68 72 65 66 3d 22 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 43 6f 6e 74 65 6e 74 50 6c 61 63 65 68 6f 6c 64 65 72 4d 61 69 6e 43 6f 6e 74 65 6e 74 5f 52 65 70 4d 61 70 52 65 6c 6f 61 64 4c 61 62 65 6c 22 20 63 6c 61 Data Ascii: 3ffaevent);" role="button" aria-label='Reload' tabindex="3" href=""> <span id="ContentPlaceholderMainContent_RepMapReloadLabel" cla
2024-12-04 11:43:01 UTC	16384	IN	Data Raw: 0d 0a 35 33 33 64 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 2e 5f 76 69 73 75 61 6c 43 68 61 6c 6c 65 6e 67 65 45 6c 65 6d 65 6e 74 49 64 29 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 2e 5f 76 69 73 75 61 6c 49 63 6f 6e 49 64 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 74 68 69 73 2e 5f 61 75 64 69 6f 50 6c 61 79 43 6f 6e 74 72 6f 6c 49 64 29 2e 68 69 64 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 54 65 78 74 20 3d 20 22 55 73 65 20 61 75 64 69 6f 20 6d 6f 64 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 533d $(this._visualChallengeElementId).show(); $(this._visualIconId).hide(); $(this._audioPlayControlId).hide(); tooltipText = "Use audio mode";
2024-12-04 11:43:01 UTC	4935	IN	Data Raw: 65 72 22 3b 0d 0a 43 6f 6e 74 65 6e 74 50 6c 61 63 65 68 6f 6c 64 65 72 4d 61 69 6e 43 6f 6e 74 65 6e 74 5f 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 2e 66 6f 63 75 73 4f 6e 45 72 72 6f 72 20 3d 20 22 74 22 3b 0d 0a 43 6f 6e 74 65 6e 74 50 6c 61 63 65 68 6f 6c 64 65 72 4d 61 69 6e 43 6f 6e 74 65 6e 74 5f 52 65 71 75 69 72 65 64 46 69 65 6c 64 56 61 6c 69 64 61 74 6f 72 55 73 65 72 49 64 65 6e 74 69 66 69 65 72 2e 65 72 72 6f 72 6d 65 73 73 61 67 65 20 3d 20 22 50 6c 65 61 73 65 20 74 79 70 65 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 6e 20 74 68 65 20 66 6f 72 6d 61 74 20 75 73 65 72 40 63 6f 6e 74 6f 73 6f 2e 6f 6e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 20 6f 72 20 75 Data Ascii: er";ContentPlaceholderMainContent_RequiredFieldValidatorUserIdentifier.focusOnError = "t";ContentPlaceholderMainContent_RequiredFieldValidatorUserIdentifier.errormessage = "Please type your email address in the format user@contoso.onmicrosoft.com or u
2024-12-04 11:43:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49874	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:58 UTC	709	OUT	GET /59b1754af7b14b369a166639ff7e80e8/ HTTP/1.1 Host: documents.wyr-law.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://documents.wyr-law.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; brcap=0 Sec-WebSocket-Key: AmX6QEGgD+b7/SAYuFmFHw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49870	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:58 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 88657856-001e-008d-2ccc-45d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114259Z-1746fd949bdw2rg8hC1EWR11u400000001ag000000008pxp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:59 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.5	49869	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:58 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 1a13e7cb-001e-0049-3bcd-455bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114259Z-1746fd949bd6zq92hC1EWRry48000000012g000000006pff x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:59 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49871	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:59 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: c77b1400-401e-0048-71d2-450409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114259Z-1746fd949bdxk6n6hC1EWRdr8c00000001300000000010ha x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:59 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49873	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:59 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: d3398a04-c01e-007a-0bce-45b877000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114259Z-1746fd949bd54zxghC1EWRzre400000001fg000000002pw3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:59 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49872	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:42:59 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:42:59 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:42:59 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 4edcd523-801e-0047-60d3-457265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114259Z-1746fd949bdlqd7fhC1EWR6vt0000000018g000000007a20 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:42:59 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49868	138.197.161.216	443	744	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:43:00 UTC	1255	OUT	GET /js/Common.js HTTP/1.1 Host: 8add78d1-59b1754a.wyr-law.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://8add78d1-59b1754a.wyr-law.com/?ru=https%3a%2f%2fdocuments.wyr-law.com%2fcommon%2freprocess%3fctx%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQUHWtmZvG7Oy8J1_oxN1NSahWjMmEj9C8wMr5gZJzEJFVUmZinl5tfVJRZ7JCTnFhSkloEVAdSc4tJ0L8o3TMlvNgtNSW1KLEkMz_vETMeDRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnTjeY4T14M5NrnOjZJ6aBsqyHCKVb8oMs-0qDDM3Cw7PTjIzDjFyCA7PajSw9k1sSyisNLNrMg4qlzfMKoqLDvf1sjKcAKb0AQ2plNsDB_YGDvYGWaxMxzgZDzAy_CD78yy_2e7u4--83jFr-OdVRwR6pxu7unqbpwcFuiZ6V2QmpdUaREUElWWUZ6ZW-TnUexamZJTlJ9tu0GA4YEAAwA1&mkt=en-US&hosted=0&device_platform=Windows+10&username=ryan.morris%40lcatterton.com Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 3hU966="NTliMTc1NGEtZjdiMS00YjM2LTlhMTYtNjYzOWZmN2U4MGU4Ojg1YTQ3MmY5LTIxMDgtNGE5YS05MzQzLTlkMWZjYzkyOGQ4MQ=="
2024-12-04 11:43:03 UTC	451	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Dec 2024 11:43:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cache-control: max-age=0 last-modified: Wed, 20 Nov 2024 11:21:17 GMT accept-ranges: bytes etag: "38e916513e3bdb1:0" access-control-allow-headers: * access-control-allow-methods: GET, POST, PUT, OPTIONS access-control-max-age: 86400 access-control-allow-origin: *
2024-12-04 11:43:03 UTC	1532	IN	Data Raw: 35 66 35 0d 0a ef bb bf 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 43 6f 6f 6b 69 65 56 61 6c 75 65 28 63 6f 6f 6b 69 65 4e 61 6d 65 29 0d 0a 7b 0d 0a 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 20 3d 3d 20 22 22 29 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 22 22 3b 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6e 61 6d 65 20 3d 20 63 6f 6f 6b 69 65 4e 61 6d 65 20 2b 20 22 3d 22 3b 0d 0a 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 41 72 72 61 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 27 3b 27 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 63 6f 6f 6b 69 65 41 72 Data Ascii: 5f5function GetCookieValue(cookieName){ if (document.cookie == undefined \|\| document.cookie == "") return ""; var name = cookieName + "="; var cookieArray = document.cookie.split(';'); for (var i = 0; i < cookieAr
2024-12-04 11:43:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.5	49876	13.107.246.63	443

Timestamp	Bytes transferred	Direction	Data
2024-12-04 11:43:01 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-12-04 11:43:01 UTC	494	IN	HTTP/1.1 200 OK Date: Wed, 04 Dec 2024 11:43:01 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 4ddf438b-c01e-0049-57cd-45ac27000000 x-ms-version: 2018-03-28 x-azure-ref: 20241204T114301Z-1746fd949bdl6zq5hC1EWRf3ws00000000w0000000003c6y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-12-04 11:43:01 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Target ID:	0
Start time:	06:41:56
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	06:41:58
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1840 --field-trial-handle=2068,i,18296401730116906,11361231261382304205,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	06:42:04
Start date:	04/12/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
https://lcatterton.adobesign.gr.com/ryani8QmoTxrrisAT5lc4kattertoTxni8Qc4koTxm