Edit tour

Windows Analysis Report
https://www.inamorataa-a.blogspot.com/

Overview

General Information

Sample URL:	https://www.inamorataa-a.blogspot.com/
Analysis ID:	1525848
Tags:	urlscan
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Found iframes

HTML body contains password input but no form action

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1772 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4084 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3108 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1272 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.inamorataa-a.blogspot.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-168048165&timestamp=1728048734219
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Blogger does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts/?hl=en&sjid=7064012949306410694-EU#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95464	HTTP Parser: No favicon
Source: https://support.google.com/chromebook/answer/1057090	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95464	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637	HTTP Parser: No favicon
Source: https://support.google.com/chromebook/answer/1057090	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgbInimEXhBQbLUH3N9jHMHOh_F_Xq3&passive=true&service=blogger&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1222203286%3A1728048728207984&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49769 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50114 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49769 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZPfL7ubmzxny4ds&MD=XroMmfpS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.inamorataa-a.blogspot.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: inamorataa-a.blogspot.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog HTTP/1.1Host: www.blogger.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog&bpli=1 HTTP/1.1Host: www.blogger.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-168048165&timestamp=1728048734219 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en-US HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=HrxRgtF46qYJSEo1gfs6heDlckz5ihIGS3msv7qMJQe1MhtX0rPH-zOEOOoJHMChX_LrMtRBcbuhAEOYj1PeshmTJgYiABC1vmuYsrN4lpuyWu-lrQ1kb1cDKOuOHq_XejJz1eZ_7LQ4BZhqA3QcPvkmrs_2SXv1xEy2ks-FVYYeddrf1A4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=iDJBi9KvXtXZwWCPBTJ8M1TBCbSs5PWbCtvGsRlMx-F12vN8bM0bVOyMvDNXL_-PZwwRfPXTxNYpbbn8bWlXJUTGDhcKSWU-lBDWqT_Qsn9UJpbbbsRLsMffE7-E9z4m0G8SooN25Bymn0O6acHqOrFmfTOtc6H-RznyPDoeCpTU73LNGzg
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=iDJBi9KvXtXZwWCPBTJ8M1TBCbSs5PWbCtvGsRlMx-F12vN8bM0bVOyMvDNXL_-PZwwRfPXTxNYpbbn8bWlXJUTGDhcKSWU-lBDWqT_Qsn9UJpbbbsRLsMffE7-E9z4m0G8SooN25Bymn0O6acHqOrFmfTOtc6H-RznyPDoeCpTU73LNGzg
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.1.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714257,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803729,10803751,10803805,10803950,97601634 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.1.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/chrome/answer/6130773?hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en-US&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638636455395256374-1581384181&p=account_iph&rd=1 HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule703150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703951v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703950v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _ga_H30R9PNQFN=GS1.1.1728048740.1.0.1728048740.0.0.0; _ga=GA1.3.687963939.1728048741; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule701401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700001v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700000v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule700101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule702100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703551v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703550v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048750.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule701901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704001v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048750.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /rules/rule704000v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZPfL7ubmzxny4ds&MD=XroMmfpS HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&sjid=7064012949306410694-EU HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iphAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048750.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /rules/rule701551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702400v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702401v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule700301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule702601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702600v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule703301v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703300v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048755.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule701750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule120603v8s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120128v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120607v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule230157v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230104v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230164v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230162v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230158v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule230165v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230168v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230167v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230166v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230169v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048755.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /rules/rule230171v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230170v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230172v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230174v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule230173v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule120119v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704101v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704100v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704201v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /rules/rule704200v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704150v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704151v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule226009v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /chrome/answer/95464 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048755.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048765.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /v1/survey/trigger/trigger_anonymous?key=AIzaSyAl4av1b2hx9nKATy1JsQKVPSpM2SO6JQM HTTP/1.1Host: scone-pa.clients6.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048765.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /chromebook/answer/1057090 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048765.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /v1/survey/event_anonymous?key=AIzaSyAl4av1b2hx9nKATy1JsQKVPSpM2SO6JQM HTTP/1.1Host: scone-pa.clients6.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chromebook HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048772.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chromebook&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714257,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801510,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10803447,10803680,10803729,10803751,10803805,10803950,97601634 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048772.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chromebook HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048772.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /chrome/answer/95314?hl=en&ref_topic=7439637 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048772.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048793.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; SUPPORT_CONTENT=638636455395256374-1581384181; _gid=GA1.3.307675728.1728048742; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1728048740.1.1.1728048793.0.0.0; _ga=GA1.3.687963939.1728048741
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /v1/survey/trigger/trigger_anonymous?key=AIzaSyAl4av1b2hx9nKATy1JsQKVPSpM2SO6JQM HTTP/1.1Host: scone-pa.clients6.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4

Source: chromecache_260.3.dr	String found in binary or memory: </script> <div class="side-container"><div id="helpguide"></div> <div data-page-data-key="fixed-sidebar-required" style="display:none">true</div> <div class="fixed-sidebar-container"> <div class="primary-nav"> <nav> <div class="sibling-nav" data-stats-ve="3" data-stats-imp=""><h2><a class="title-link" href="/chromebook/topic/3406211?hl=en&ref_topic=3399709">Sign in</a></h2><ul class="sibling-list"><li><div class="sibling-link-descriptor" id="/chromebook/answer/1059242?hl=en&ref_topic=3406211">1 of 6</div><a aria-describedby="/chromebook/answer/1059242?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/1059242?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Add a person to your Chromebook</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/1057090?hl=en&ref_topic=3406211">2 of 6</div><a aria-describedby="/chromebook/answer/1057090?hl=en&ref_topic=3406211" class="sibling-link sibling-link--current" href="#"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Use a Chromebook as a guest</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/2587994?hl=en&ref_topic=3406211">3 of 6</div><a aria-describedby="/chromebook/answer/2587994?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/2587994?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Lock or unlock your screen</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/3420029?hl=en&ref_topic=3406211">4 of 6</div><a aria-describedby="/chromebook/answer/3420029?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/3420029?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.1-.9-2-2-2zm-5 14H7v-2h7v2zm3-4H7v-2h10v2zm0-4H7V7h10v2z"></path><path d="M0 0h24v24H0z" fill="none"></path></svg>Sign out or turn off your Chromebook</a></li><li><div class="sibling-link-descriptor" id="/chromebook/answer/6375270?hl=en&ref_topic=3406211">5 of 6</div><a aria-describedby="/chromebook/answer/6375270?hl=en&ref_topic=3406211" class="sibling-link" href="/chromebook/answer/6375270?hl=en&ref_topic=3406211"><svg class="article" viewbox="0 0 24 24"><path d="M19 5v14H5V5h14m0-2H5c-1.1 0-2 .9-2 2v14c0 1.1.9 2 2 2h14c1.1 0 2-.9 2-2V5c0-1.
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: ;function jr(){this.part="snippet,id,contentDetails,localizations,statistics";this.Gk=new Vq({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: ;var oga=wa(["//www.youtube.com/player_api"]),pga=On(oga),kr=[],qga=!1;function lr(){if(!qga){window.onYouTubeIframeAPIReady=rga;var a=bp("SCRIPT");wn(a,pga);document.head.appendChild(a);qga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: ;var wra=wa(["//www.youtube.com/player_api"]),lA=4/3,xra=16/9,mA={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function nA(a){var b=a.Eb;var c=a.Nl===void 0?!1:a.Nl;a=a.playerVars===void 0?mA:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Eb=b;this.Nl=c;this.id=this.Eb.getId();this.playerVars=a;b=this.Eb.mediumThumbnail.width;c=this.Eb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===lA?lA:xra:lA;this.watch(this.Eb)} equals www.youtube.com (Youtube)
Source: chromecache_227.3.dr	String found in binary or memory: Kf=w(["https://sandbox.google.com/tools/feedback/"]),Lf=w(["https://www.google.cn/tools/feedback/"]),Mf=w(["https://help.youtube.com/tools/feedback/"]),Nf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Of=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Pf=w(["https://localhost.corp.google.com/inapp/"]),Qf=w(["https://localhost.proxy.googlers.com/inapp/"]),Rf=V(tf),Sf=[V(uf),V(vf)],Tf=[V(wf),V(xf),V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff)],Uf=[V(Gf),V(Hf)],Vf= equals www.youtube.com (Youtube)
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: Ua=Ua.split("-")[0].toLowerCase();if(Ra===Ua\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Fa(0);Eo("youtube_video_model/load/success");return Qa(c,0)}Sa(c);a.state=3;a.Fa(0);Eo("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_211.3.dr	String found in binary or memory: _.iq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.iq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.iq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.iq(_.rq(c))+"&hl="+_.iq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.iq(m)+"/chromebook/termsofservice.html?languageCode="+_.iq(d)+"&regionCode="+_.iq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: function rA(a){if(lo())z().rs==2?window.YT&&window.YT.Player?tA(a,a.o):(kr.push(function(f){tA(this,f)}.bind(a,a.o)),lr()):so("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_161.3.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.inamorataa-a.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: inamorataa-a.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com

Source: unknown

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728048685345&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=10886400; includeSubdomainsContent-Type: text/htmlDate: Fri, 04 Oct 2024 13:32:51 GMTServer: scaffolding on HTTPServer2Content-Length: 0X-XSS-Protection: 0X-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=10886400; includeSubdomainsContent-Type: text/htmlDate: Fri, 04 Oct 2024 13:32:54 GMTServer: scaffolding on HTTPServer2Content-Length: 0X-XSS-Protection: 0X-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundStrict-Transport-Security: max-age=10886400; includeSubdomainsContent-Type: text/htmlDate: Fri, 04 Oct 2024 13:33:32 GMTServer: scaffolding on HTTPServer2Content-Length: 0X-XSS-Protection: 0X-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_206.3.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_227.3.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_223.3.dr	String found in binary or memory: http://www.google.com/url?sa=D&q=
Source: chromecache_211.3.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_211.3.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_206.3.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_206.3.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_206.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_206.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_161.3.dr, chromecache_225.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_243.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_161.3.dr, chromecache_152.3.dr, chromecache_225.3.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_209.3.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_223.3.dr, chromecache_227.3.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_161.3.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_177.3.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_161.3.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_161.3.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_270.3.dr, chromecache_161.3.dr, chromecache_205.3.dr, chromecache_225.3.dr, chromecache_260.3.dr, chromecache_206.3.dr, chromecache_153.3.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_206.3.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_161.3.dr, chromecache_225.3.dr, chromecache_206.3.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_206.3.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_225.3.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_161.3.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_206.3.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_206.3.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_206.3.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_206.3.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_225.3.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_161.3.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_211.3.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_161.3.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_227.3.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_223.3.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_267.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_209.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_209.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_262.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.11.w
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_149.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_223.3.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_227.3.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_270.3.dr, chromecache_260.3.dr	String found in binary or memory: https://guidebooks.google.com
Source: chromecache_227.3.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_260.3.dr	String found in binary or memory: https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OY
Source: chromecache_153.3.dr	String found in binary or memory: https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug
Source: chromecache_153.3.dr	String found in binary or memory: https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Source: chromecache_227.3.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_223.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	String found in binary or memory: https://myaccount.google.com/privacypolicy?hl=
Source: chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_161.3.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://play.google.com
Source: chromecache_153.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_161.3.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_225.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_161.3.dr, chromecache_225.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_153.3.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_223.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	String found in binary or memory: https://policies.google.com/terms?hl=
Source: chromecache_153.3.dr	String found in binary or memory: https://safety.google/security-privacy/
Source: chromecache_227.3.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_227.3.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://schema.org
Source: chromecache_223.3.dr, chromecache_227.3.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_206.3.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_dark_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/ulp_continue_without_gmail_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_209.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_161.3.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_227.3.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_264.3.dr, chromecache_243.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_201.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_153.3.dr	String found in binary or memory: https://support.google.com
Source: chromecache_227.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_153.3.dr	String found in binary or memory: https://support.google.com/accounts?hl
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_153.3.dr	String found in binary or memory: https://support.google.com/accounts?p=learningcenter_7
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/?p=beta_forum_hc
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/?p=betadesktop
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop
Source: chromecache_270.3.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS
Source: chromecache_205.3.dr	String found in binary or memory: https://support.google.com/chrome/answer/95314
Source: chromecache_260.3.dr	String found in binary or memory: https://support.google.com/chromebook/answer/1057090
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_153.3.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://support.google.com/embed/tagging/install
Source: chromecache_227.3.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_227.3.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_211.3.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://supporttagging-autopush.sandbox.google.com/embed/tagging/install
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_161.3.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_223.3.dr, chromecache_227.3.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_209.3.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_161.3.dr, chromecache_225.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_176.3.dr, chromecache_260.3.dr, chromecache_199.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_227.3.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_243.3.dr, chromecache_199.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_260.3.dr	String found in binary or memory: https://www.google.com/chromebook/howto/
Source: chromecache_211.3.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_161.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_161.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_227.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_227.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_227.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_227.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_206.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_225.3.dr, chromecache_206.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_225.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_206.3.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_206.3.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_199.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_249.3.dr, chromecache_201.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_223.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_24dp.png
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_209.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_155.3.dr, chromecache_152.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_153.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_223.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/google_white_24dp.png
Source: chromecache_161.3.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_153.3.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_227.3.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_264.3.dr, chromecache_243.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_260.3.dr	String found in binary or memory: https://www.youtube.com/playlist?list=PLVy7dVK2S_UIkT4vZ5MGJmtA3Ir6-wyNN&amp;utm_source=help%20c
Source: chromecache_161.3.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_221.3.dr, chromecache_211.3.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50325 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50331
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50349
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50343
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50345
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50371
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50349 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50326
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50325
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 50372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50343 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50400 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 50331 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 50375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50402 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50379 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50323 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904

Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.109.210.53:443 -> 192.168.2.5:50114 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@27/210@42/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.inamorataa-a.blogspot.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4084 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3108 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4084 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3108 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
http://www.broofa.com	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://g.co/recover	0%	URL Reputation	safe
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://help.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://policies.google.com/terms	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/tools/feedback/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://policies.google.com/terms/location	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://developers.google.com/	0%	URL Reputation	safe
https://developers.google.com/identity/gsi/web/guides/gis-migration)	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
https://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://asx-frontend-staging.corp.google.com/inapp/	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
http://localhost.corp.google.com/inapp/	0%	URL Reputation	safe
https://families.google.com/intl/	0%	URL Reputation	safe
https://policies.google.com/technologies/location-data	0%	URL Reputation	safe
https://console.developers.google.com/	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	142.250.185.234	true	false	unknown
www3.l.google.com	142.250.186.174	true	false	unknown
play.google.com	172.217.18.110	true	false	unknown
plus.l.google.com	142.250.186.142	true	false	unknown
blogspot.l.googleusercontent.com	172.217.18.97	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.184.225	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
support.google.com	172.217.18.14	true	false	unknown
blogger.l.google.com	142.250.186.169	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.184.193	true	false	unknown
www.inamorataa-a.blogspot.com	unknown	unknown	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
inamorataa-a.blogspot.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
lh4.ggpht.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
www.blogger.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		unknown
https://www.google.com/generate_204	false		unknown
https://support.google.com/chrome/answer/6130773?hl=en	false		unknown
https://support.google.com/accounts?hl=en-US&p=account_iph	false		unknown
https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64	false		unknown
https://lh3.googleusercontent.com/VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36	false		unknown
https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250	false		unknown
https://lh3.googleusercontent.com/E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36	false		unknown
https://support.google.com/chromebook/answer/1057090	false		unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown
https://www.google.com/favicon.ico	false		unknown
https://www.blogger.com/blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog	false		unknown
https://play.google.com/log?format=json&hasfast=true	false		unknown
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10803447%2C10803680%2C10803729%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=chrome	false		unknown
https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64	false		unknown
https://support.google.com/chrome/answer/95464	false		unknown
https://lh3.googleusercontent.com/ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36	false		unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714257%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts	false		unknown
https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_264.3.dr, chromecache_243.3.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_227.3.dr	false	URL Reputation: safe	unknown
http://www.broofa.com	chromecache_155.3.dr, chromecache_152.3.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_223.3.dr, chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS	chromecache_270.3.dr	false		unknown
https://support.google.com	chromecache_153.3.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://apis.google.com/js/googleapis.proxy.js	chromecache_161.3.dr	false		unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/accounts/TOS	chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://policies.google.com/terms?hl=	chromecache_223.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	false		unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_161.3.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_221.3.dr, chromecache_211.3.dr	false		unknown
https://policies.google.com/terms/service-specific	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/playlist?list=PLVy7dVK2S_UIkT4vZ5MGJmtA3Ir6-wyNN&amp;utm_source=help%20c	chromecache_260.3.dr	false		unknown
https://g.co/recover	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://moltron-pa.clients6.google.com	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	false		unknown
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_249.3.dr, chromecache_201.3.dr	false	URL Reputation: safe	unknown
https://help.youtube.com/tools/feedback/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_161.3.dr, chromecache_225.3.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://policies.google.com/terms	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_243.3.dr, chromecache_199.3.dr, chromecache_153.3.dr	false		unknown
http://www.google.com/url?sa=D&q=	chromecache_223.3.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_161.3.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_221.3.dr, chromecache_211.3.dr	false		unknown
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid	chromecache_270.3.dr	false		unknown
https://support.google.com/chrome/answer/95314	chromecache_205.3.dr	false		unknown
https://policies.google.com/terms/location	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://content-googleapis-test.sandbox.google.com	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_161.3.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_201.3.dr	false	URL Reputation: safe	unknown
https://developers.google.com/	chromecache_206.3.dr	false	URL Reputation: safe	unknown
https://myaccount.google.com/privacypolicy?hl=	chromecache_223.3.dr, chromecache_205.3.dr, chromecache_260.3.dr	false		unknown
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_206.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_227.3.dr, chromecache_153.3.dr	false		unknown
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://youtube.com/t/terms?gl=	chromecache_221.3.dr, chromecache_211.3.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/	chromecache_211.3.dr	false		unknown
https://support.google.com/chrome/?p=betadesktop	chromecache_270.3.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_209.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/	chromecache_227.3.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_161.3.dr	false		unknown
https://safety.google/security-privacy/	chromecache_153.3.dr	false		unknown
https://support.google.com/communities/answer/7424249	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://schema.org	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_264.3.dr, chromecache_176.3.dr, chromecache_243.3.dr, chromecache_199.3.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_225.3.dr	false		unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://support.google.com/communities/answer/7425194	chromecache_153.3.dr	false		unknown
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_249.3.dr, chromecache_201.3.dr	false		unknown
https://content-googleapis-staging.sandbox.google.com	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://localhost.corp.google.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_161.3.dr	false		unknown
https://support.google.com/chrome/?p=beta_forum_hc	chromecache_270.3.dr	false		unknown
https://policies.google.com/privacy	chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://fonts.google.com/license/googlerestricted	chromecache_267.3.dr	false	URL Reputation: safe	unknown
https://clients6.google.com	chromecache_270.3.dr, chromecache_161.3.dr, chromecache_205.3.dr, chromecache_225.3.dr, chromecache_260.3.dr, chromecache_206.3.dr, chromecache_153.3.dr	false		unknown
https://play.google/intl/	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
http://localhost.corp.google.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://families.google.com/intl/	chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://support.google.com/embed/tagging/install	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://policies.google.com/technologies/location-data	chromecache_221.3.dr, chromecache_211.3.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown
https://console.developers.google.com/	chromecache_206.3.dr	false	URL Reputation: safe	unknown
https://support.google.com/inapp/%	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_227.3.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_270.3.dr, chromecache_205.3.dr, chromecache_260.3.dr, chromecache_153.3.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.74.202	unknown	United States	15169	GOOGLEUS	false
142.250.186.174	www3.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	support.google.com	United States	15169	GOOGLEUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
172.217.18.97	blogspot.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.184.225	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.161	unknown	United States	15169	GOOGLEUS	false
142.250.184.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
216.58.206.65	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
142.250.186.169	blogger.l.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.9
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525848
Start date and time:	2024-10-04 15:30:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.inamorataa-a.blogspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@27/210@42/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://support.google.com/chrome/answer/6130773?hl=en-US Browse: https://support.google.com/accounts?hl=en-US&p=account_iph Browse: https://support.google.com/chrome/answer/95464 Browse: https://support.google.com/chromebook/answer/1057090 Browse: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.186.142, 74.125.133.84, 2.19.126.163, 34.104.35.123, 192.229.221.95, 199.232.210.172, 142.250.186.67, 172.217.18.99, 216.58.212.138, 142.250.184.234, 142.250.185.202, 142.250.185.234, 142.250.184.202, 216.58.212.170, 142.250.185.170, 142.250.186.170, 142.250.186.42, 142.250.185.106, 172.217.23.106, 142.250.185.138, 216.58.206.42, 172.217.16.138, 142.250.181.234, 142.250.185.74, 142.250.186.163, 64.233.166.84, 216.58.206.72, 142.250.185.174, 142.250.185.251, 172.217.16.155, 172.217.16.219, 142.250.185.123, 142.250.186.123, 142.250.185.219, 216.58.206.91, 172.217.23.123, 142.250.186.155, 142.250.186.91, 142.250.186.59, 142.250.185.187, 142.250.185.91, 142.250.185.155, 172.217.18.27, 216.58.212.155, 142.250.186.106, 142.250.186.74, 172.217.18.106, 142.250.186.138, 216.58.206.74, 172.217.16.202, 172.217.18.10, 142.250.184.251, 172.217.18.123, 142.250.186.46, 142.250.185.67, 216.58.206.35, 172.217.18.110
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, storage.googleapis.com, otelrules.azureedge.net, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, gstatic.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.inamorataa-a.blogspot.com/

Input	Output
URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgb Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Email or phone", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Forgot email?", "Create account"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.blogger.com%2Fblogin.g%3FblogspotURL%3Dhttps%3A%2F%2Finamorataa-a.blogspot.com%2F%26type%3Dblog%26zx%3D1mjew5665oovr&hl=en-US&ifkv=ARpgrqcMAYiY2p-uvV4zhCjHBg6-uSvh8xueKQ0GrhPSQhgb Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or phone' are typical for a Google account login page."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone"}

URL: https://support.google.com/chrome/answer/6130773?hl=en Model: jbxai	{ "brand":["Google Chrome"], "contains_trigger_text":true, "trigger_text":"Browse Chrome as a guest", "prominent_button_name":"Sign in", "text_input_field_labels":["Import Chrome bookmarks & settings", "Open Chrome quickly on your phone or tablet", "Use Chrome with multiple profiles", "Set your homepage and startup page", "Create, find and edit bookmarks in Chrome", "Get your bookmarks, passwords and more on all your devices", "Browse Chrome as a guest", "Change the address bar's position", "Learn about third-party sign-in"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/chromebook/answer/1057090 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Use a Chromebook as a guest", "prominent_button_name":"Sign in", "text_input_field_labels":["Email", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph#topic=3382296 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Describe your issue", "prominent_button_name":"Sign in", "text_input_field_labels":["What is a Google Account?", "How do I create a new Google Account?", "Create a strong password & a more secure account", "Verify your account", "Control what others see about you across Google services", "Someone changed your password", "Be ready to find a lost Android device", "Manage your Location History", "Set up a recovery phone number or email address"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/chrome/answer/95464 Model: jbxai	{ "brand":["Google Chrome"], "contains_trigger_text":true, "trigger_text":"Browse in Incognito mode", "prominent_button_name":"Sign in", "text_input_field_labels":["Search the web in Chrome", "Manage Chrome side panel"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637 Model: jbxai	{ "brand":["Google Chrome"], "contains_trigger_text":true, "trigger_text":"Set your homepage and startup page", "prominent_button_name":"Sign in", "text_input_field_labels":["Have a new tab open", "Continue where you left off", "Open a specific set of pages"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/chrome/answer/6130773?hl=en Model: jbxai	{ "phishing_score":1, "brands":"Google Chrome", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google Chrome' is associated with Google, which is a well-known brand.", "The URL 'support.google.com' is a legitimate subdomain of 'google.com', which is the official domain for Google.", "The input field 'Import Chrome bookmarks & settings' is consistent with the services provided by Google Chrome.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[true], "url_match":true, "brand_input":"Google Chrome", "input_fields":"Import Chrome bookmarks & settings"}

URL: https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph#topic=3382296 Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google' is well-known and globally recognized.", "The URL 'support.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input field 'What is a Google Account?' is consistent with the type of support content Google would provide."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"What is a Google Account?"}

URL: https://support.google.com/chromebook/answer/1057090 Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google' is well-known and widely recognized.", "The URL 'support.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "The use of 'support' as a subdomain is consistent with Google's legitimate support pages.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The input field 'Email' is typical for a support page where users might need to log in or verify their identity."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"Email"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:31:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9685915300483128
Encrypted:	false
SSDEEP:	48:8V2dTTb3cHOidAKZdA19ehwiZUklqehAy+3:8VS3B/y
MD5:	1EB39AE9FD5DBBDD81A4A44CF81A7868
SHA1:	DB0EF439FED09D2045788E4364D19FC31054C2CD
SHA-256:	905C0BB79CD2BE2E3AC8B7F038EDA8DB5AD276856B8059FE21B88605F96C6550
SHA-512:	C40425D3D081820C935E0CD0B52C3A91015EFB693103BE57949871EF3C9AACA9AD84AA5EC416FBCD662DDB0C6531B25EE9E4F375FFC4A2DEDFA9BCA3323FB217
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:31:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985084666653102
Encrypted:	false
SSDEEP:	48:8S22dTTb3cHOidAKZdA1weh/iZUkAQkqehvy+2:8S2S3z9Q+y
MD5:	A5424A5E08267B97CCA0B8A2A024145F
SHA1:	43179557EE1964EBAAF93567CBF0EF573AF05899
SHA-256:	38D1BF3D181F0440813B675433CCD0CAC73413555630C8BFA5D6BB1C3F4065A1
SHA-512:	8E3267DD537DD69A938BD449AFDD22B35A6DC46B756F95E5E6DE35E67723F5B29BEA57F0DA593F1374FD79BEDDE8DB0B897CF9B9541928B124605CCEAF868229
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0019404227144655
Encrypted:	false
SSDEEP:	48:8xV2dTTb3sHOidAKZdA14tseh7sFiZUkmgqeh7sVy+BX:8xVS3DnLy
MD5:	7E0D1BD8FA618E9C3838F8930D0FDC35
SHA1:	8391A8AC79D7FEEE36232D800914C41AF4B28C7B
SHA-256:	4988F6D31095B8EA79BCEE86EE16ECA66368FBD6FAE614DF5186D188B9620D88
SHA-512:	9BB7A5F96E18245CD0C6C8F2C2393AEC60F30D7108629ADFF3BD158844E33FAFE532FFF523C3A6B0CD58C8477CDEB55ABC6B33BCCFBA520431A60DF40F5A5159
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:31:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9827754708446688
Encrypted:	false
SSDEEP:	48:832dTTb3cHOidAKZdA1vehDiZUkwqehjy+R:83S3wty
MD5:	7A5C517A47CFDF9A8BD3A6BE786011D9
SHA1:	6ECE86AD511E4CC587618FE7621C79D38B5D45E3
SHA-256:	25C00FBDF4AE3B8E66C48C28A20A754780176E5542CDBE914EF1865976749B91
SHA-512:	363280EDB4AD7104BF3010ED792C1F4DCB9273CE3826CF60D1487FAEC61C44A880C4A6149A2C16EA0A02F68D7A9007148D2B02D9710FE33E9AD28A45DAE6C833
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:31:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.972470993000464
Encrypted:	false
SSDEEP:	48:8m2dTTb3cHOidAKZdA1hehBiZUk1W1qehBy+C:8mS3w9hy
MD5:	DBC162B16899A000D7E289FD9DBAACC0
SHA1:	B01E6628478B29F1427BB5CD72B18107D3B8742E
SHA-256:	8F0F410CC09845782268DA1DE1F4AC0DC93D6CFE9F0E8850CA59E7B986C80D8B
SHA-512:	12E4CDE73872DE3908637DD74753A5ED47495055ABD34F27C6AB052EC349567B3E2DB7CE4B37BE416AFED9E2F9D6F1E8BAB147D1D0BA5566750C83CD8165EB01
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 4 12:31:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.983385191628513
Encrypted:	false
SSDEEP:	48:8N2dTTb3cHOidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8NS3+T/TbxWOvTbLy7T
MD5:	B6D1403BA990822A714CA36202BC6633
SHA1:	7BA0A1840EA17C3913D10BAEF53807DBFE20A806
SHA-256:	86A32A125AC1D5E482A5D7FC5B451A62E0D86FB2293CDD81B3CF8C9DBF251FEA
SHA-512:	AEF77C638C18A7F419E3BE6A8344269C4B6973712CC82CB34F2B25BAACE57833DEECF19FF160AB9D9C1ACBE0306A0A4CDED0106929295B2705730CA5B6A0B503
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......z.a...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IDY.k....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VDY.k....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VDY.k....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VDY.k..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDY.l...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............m@#.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3533581296433415
Encrypted:	false
SSDEEP:	96:mtOTKb1db1ZlNY5co7sRxiU0rqig7O7aZCUgpgXEt94k+g8IHh8u928DoCLQ:mtOT6TUvBrqig7mIg8IB8u88DA
MD5:	6776548F23C2A44FBD3C7343F0CB43E1
SHA1:	1E6871D4196BB00F0D161D5DC8872A8D940CEC30
SHA-256:	DDFC74A717ADCA6E6DB1BCF58D64FF7205F52BA4B61617A0137045088622C86E
SHA-512:	947B3AC76BC7B6DF6FD1C4AEA94E79D1E168E3B15BB4DC2A497E3DAFF60DAA58A490C89BA11A10910BB4B21C79A56CEAEDFFAE32A77D39E245422BE874BF7CF1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.fSHv1dvvroY.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTsVA9_hKyGtH1-UzkVaxmvYQjNv7Q"
Preview:	.gb_Q{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ka{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_La{fill:#f9ab00}.gb_F .gb_La{fill:#fdd663}.gb_Ma>.gb_La{fill:#d93025}.gb_F .gb_Ma>.gb_La{fill:#f28b82}.gb_Ma>.gb_Na{fill:white}.gb_Na,.gb_F .gb_Ma>.gb_Na{fill:#202124}.gb_Oa{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	dropped
Size (bytes):	14684
Entropy (8bit):	5.4684913224185765
Encrypted:	false
SSDEEP:	384:IYikmqAScZ+Ad7y0B6nfCHa3rFC+5aiWQLHO91NIuW:IqmqAeA1B2KgrrW2r
MD5:	D4298228161E149CDBC2CFF576C19B89
SHA1:	070DDF2550103C54935E4731780B38362F8A7306
SHA-256:	EC242F8B775BDD774749BFA25CEF86AC8B07FEC060E35D30F590ADCE789A1E60
SHA-512:	98075757529AD181BFA04A9D32346C3015A609601A7D4C662B0FA4EB722FA646DB3088D74CC01CD697CA1E14CD3777BC34CE2316FEF99C4B866AE3A545D53AE6
Malicious:	false
Reputation:	low
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.635234743489788
Encrypted:	false
SSDEEP:	3:HniCnmzth+2KvmCG94kn:BmB3fFP
MD5:	401D5E1CF1BAA24568307B37011EC364
SHA1:	071548EE0903A91A7B82D909945AF8013EBC205E
SHA-256:	E3020826A1C927C113F258C9EC695D776841985F4747D42DCAC94BEF1F07C0CD
SHA-512:	766D35602E89DA0734560F4DBB5ECE6C8AB390C7509A330F9153AC6F79CBF528B733079406045B92C4585E0BE9B6171918AA2E540000199C943E2F626CAA6051
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoJCgcNaUhHRxoA

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	570
Entropy (8bit):	7.507500083049312
Encrypted:	false
SSDEEP:	12:6v/7usW8F8q0XW32k3hFGIqpOpsFQRJWutLUe7XAO/b1SKT1:Bq0XW3H35p3R8utAeTAOZSy1
MD5:	0E7D27F6C5C957880E631FC98144B897
SHA1:	BEA8DFB7CF588CAF5B2C98A3744F9B367EEBF65B
SHA-256:	B2C36462B54E7D9344E9E6A18B6EA2CCAC84A684BA73CABB638B0C756017E919
SHA-512:	BFC17A0405C5509FE894C6A322782821B157E0570BD08CFB809BC5FC8358CFF099DE3B0EBC3C961E48C9B456DDB46EC30E6997D40702C1AEA4ECFBFDA5EA4912
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/JpgyhgrhpImok7VhCliiak4uAMQOyhV0oxJVwuihuQnLtmXQ60n9W-SloJpp05IoBDty=w36-h36
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8...MH.Q...o7V....K.!..a...u.:.I..z."h..^...].>. E...9."..6....,...Z....{..7..7.-........~.....B.^....n.w3.L}....@.c..F.qG.........j.......9..5.L. .t:.G..P...p.W.aX.P<..z..!.[..F...Q..]6....f.........B(..Z....z....f.z*.J...:A..........}R,.e1Y....j.9...l6/q..d2.,...<.O.....p.Y..y^.....o-.....c......Z..t:}'....px..-...3$.@.w-A.a1..x%..\2.C..Y[?.......F..dP...E>b.....D..-....n...o...#...m .. .y........S...$.H$.2..M.i../..........x'.(]M.....<...B..\|.V...5.e.r......`.Z...\\|..V.Q..89....IEND.B`.

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	141
Entropy (8bit):	6.003288945245843
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xtxshx/Fxpeh8uCKEnN3VIlqM2Om2h2ru/Sxl/B1p:6v/lhPXxAxjMh/CfN3V+2Kh2sSxtjp
MD5:	1220763DB56CFC86AFBC5D81EE8A9EA9
SHA1:	05414C177ABC67E5353445B1470F643A782EE0D9
SHA-256:	5279E86A981276A27B8EC0D13F34229B289BAC00CCE0932CD67E6A71F6439201
SHA-512:	4068F1A5C50E1723DCA31BDB65A25E9D42EB272116320D692B31F0FCE47AB4111FFA875895E1FC15724DAC8C12F98433F82C4B0F40848432FC1962C4FF28B12C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...TIDATx.c..T.to.(..(PT.......KP-...{...0-."..`..jASNX..r.Z..).@.I.{.p.R.q....od...Zw.._Y.....IEND.B`.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3653
Entropy (8bit):	7.928890449325803
Encrypted:	false
SSDEEP:	96:5kxUHWOwsRWCbRykZguODi897DRqAi4+1RMF7XmJQMEw:5fjAARyG389DRqAif1GsCbw
MD5:	9C63745DD58E622C67B763C56B04E0EC
SHA1:	3DF427B09C21120DA55F6EF396BC19C3A567F76D
SHA-256:	CCB7B6FC6814D838946C52D17A82BB3E6B9AD2C9DB3D6207CEB17C34241BC4FC
SHA-512:	D905BECD98E97E8CF7C9F5FA94804AA1154AFAA9C34DD671494EDC1562A9DE44B2472EDB17F4BD855463B4C7CF3D67B9006D5D2923A4E6688212E62651963D20
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/QjU1VKuWo9RWcQ9Rs1zpWgU-j5iZp6YXh69aAX9hTGC-EXgzUUnDVjc9GveZQ9Y2OYM=w64
Preview:	.PNG........IHDR...@...@......iq.....IDATx^.k...u...v.s./..Co.....B..%..7.!...!\.....N.Pvl..@.R.I.V,.1...CLR6..!$!....g....$..v...G?..4....xvV.$...kzzf?....{.t....#}$.y....^....]7.8..<.m.K'l..gF....p.%.Am...N.....g.r.cmJ...........".G..<.>j...:.........s.I6...qDg.B."P@.X...R-./..........'...V...P..u.E..37k.]..7.Z..6....;J...T.A...9a..{>....pa6..ZV../.....2\......D.H8w.=..w3.....u.e.a.G./.C.T9....8..M..-..0....a....7..... .~...V"..........+..M.-r....]...s\.F../...D.Vl.....r7m.5.?9........M...'%W...^.\|.RE.........x..#b...}.x#.q'W.`#.h.C.\.........M..I.:.v...[E.h.25......!..k..\|X.Xy.II'....7V.l.YT-V.L...HI..4..?...j..I#.....m.^.....\|...H.P...?kK.lH.<r...{V..-X,!q...P=8.T....}......._@.9T.......O.........Bi_.J...c.>#T...cUl..tJf.._.......7.......,.B.X.(....O...h-..w..$S.O..o..\.h..?..\|..a.Y.j;.Voa...1.U.U...A....1F.Up..*...`.:.L.....b....?....E..d..`Q TET.@..I.OA.TAL..Z.....p../-...{......pG.....%kw0gk.#.CJ.5.F.1.. "8"...DF..G..J..Ij.Y4.9.d{

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	dropped
Size (bytes):	3019964
Entropy (8bit):	7.960852973877143
Encrypted:	false
SSDEEP:	49152:RA5LG758mqDsNR4rmlFIBg/4vuaVB8v42psIu+djH03PYTjapvB8TdHI8tCl2GxE:CtG75DmdrmlFIS/2zrMsqH0fYTepeelI
MD5:	530E1468CB2FDBB27DB213E81FC43EAE
SHA1:	E2E94CB2AFE2AF4237A70B610A33260DF36E7814
SHA-256:	7A1BD9B4E306B69DF41292FCF1408EBBC9F7A505FECF5543D53A6124B072992B
SHA-512:	549F80CA50F89B0009DDE0C847FB6F47D1E27D157E646D0A7139F997FE0AC13695648CDEA6EE10EA772C999A2DB3051834270EB1DC728D807952252564001FEB
Malicious:	false
Reputation:	low
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8..........................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.Mt.F..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8868
Entropy (8bit):	5.130440294070798
Encrypted:	false
SSDEEP:	192:5H4HcHGr9uIHROschHoqPHyHRuHq/Hp+8HObKuHPHk:6rr+cf
MD5:	D0A7B8CC43AA9D9BC37980573186F668
SHA1:	67262D9435233DD70B6713ABE6DAC956ADFAE617
SHA-256:	F94934A2AB404905A25CAF02219F22337610B659D73A72C82EE8287D698BFD0B
SHA-512:	5FE3D2316D6661BF22D831263E0232F8AACCA2042D53255C3AC15E3C652EEEC60C8E29D6EA53FD587A41092248067E69786D42147151599CEC865E6C0094FECE
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v32/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755)
Category:	dropped
Size (bytes):	1460
Entropy (8bit):	5.274624539239422
Encrypted:	false
SSDEEP:	24:kMYD7DUuXIqMSsN7UYgtx/mQ7hz1BU6TZ6BdXDMvUKGbWxlGb+jSFFV87Ofk8tp8:o7DhXI6PoXwsKGb2lGb+jS9Mwrw
MD5:	481C149C4D3EE4A53C3E7CBA067371DF
SHA1:	E0FED275636D3492C922C44F010157FAF0936733
SHA-256:	9327A53F577C5FCEFDB162E02D8646CE5B70DF2201F4B3289384657B32BACE70
SHA-512:	EC5C5A03ED4E1A27BEE7E1C488A238D79A9787D944E364CCE516FB28C22256919E49C99BFCFEA0F7815AB4232A350914E26D33D20F5A81ED19A39DFD40E30C79
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.b_a=new _.pf(_.Dm);._.l();._.k("P6sQOc");.var g_a=!!(_.Mh[1]&16);var i_a=function(a,b,c,d,e){this.ea=a;this.xa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=h_a(this)},j_a=function(a){var b={};_.Ma(a.HS(),function(e){b[e]=!0});var c=a.uS(),d=a.yS();return new i_a(a.wP(),c.aa()1E3,a.bS(),d.aa()1E3,b)},h_a=function(a){return Math.random()Math.min(a.xaMath.pow(a.ka,a.aa),a.Ca)},SG=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var TG=function(a){_.W.call(this,a.Fa);this.da=a.Ea.JV;this.ea=a.Ea.metadata;a=a.Ea.cha;this.fetch=a.fetch.bind(a)};_.J(TG,_.W);TG.Ba=function(){return{Ea:{JV:_.e_a,metadata:_.b_a,cha:_.VZa}}};TG.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.Vm(a);var c=this.da.jV;return(c=c?j_a(c):null)&&SG(c)?_.zya(a,k_a(this,a,b,c)):_.Vm(a)};.var k_a=function(a,b,c,d){return c.then(function(e){return e},function(e)

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	176356
Entropy (8bit):	5.553112647292682
Encrypted:	false
SSDEEP:	3072:lIO54M8ArRcUl4/TLp7PinfKrB08+pQ2jDFVKq+wc/M1D6FUpvuRAlEPaz4JCmEL:lIOuAeUG/Tt7PinfKrB08+p5jDFVv+tu
MD5:	E4633D672F61E6EBA21547AFA0A12EB5
SHA1:	751C5E178238582AA3CB2E7E82673E3C49AFC9CC
SHA-256:	330462707832046BBEE4C445663F8B7E53D2B63814319DA13B4B639FC4DD07C1
SHA-512:	3C65E39EC2FC12D17D527E6E3D821E29811A5B1F802EA71D180B3AB5C53FB5473A5DF2A4E79F4C7215CA66B3D6211654DCD749136B3492E021DCD6D6266E1714
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.eBPYdy5TlKU.2019.O/rt=j/m=q_dnp,q_sf,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvCjRZ-bRAiOPLLf0QdNwYcTlfNSg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.jj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var kj,lj,nj,qj,tj,sj,mj,rj;kj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};lj=function(){_.Ka()};nj=function(){mj===void 0&&(mj=typeof WeakMap==="function"?kj(WeakMap):null);return mj};qj=function(a,b){(_.oj\|\|(_.oj=new mj)).set(a,b);(_.pj\|\|(_.pj=new mj)).set(b,a)};.tj=function(a){if(rj===void 0){const b=new sj([],{});rj=Array.prototype.concat.call([],b).length===1}rj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.uj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Nc};_.vj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.wj=function(a,b){a===0&&(a=_.vj(a,b));return a\|1};_.xj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.yj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Cj=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54472)
Category:	downloaded
Size (bytes):	1068399
Entropy (8bit):	5.727598993011014
Encrypted:	false
SSDEEP:	24576:42at9QpzNQkvl6QA41gZL3fAJeA0OUoMjX+H//1dy0ocL3a5crXBTlk:42at9QpzNQkvl6QARRfAJeA0OUoMpcXQ
MD5:	4990CA0EE93A7AC20A922E336C8858D6
SHA1:	DA07986656AE1C1D67AF480576F9619D09ACBB68
SHA-256:	248D1391F0A1E22E61F4E3671DFD1EC004B432B3E1504A58AD2524221391ADB3
SHA-512:	E2E38D6AE50B7C30E0A3B6DCA0DBE7FE8A521FD3C0B89032121A20026B79E1A452C019C2EA71F94DEA02DD480AB0458C2124CF5E8EABA2247493B295638FDD01
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/?hl=en&sjid=7064012949306410694-EU
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Official Google Account Help Center where you can find tips and tutorials on using Google Account and other answers to frequently asked questions." name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'R

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	downloaded
Size (bytes):	172469
Entropy (8bit):	5.55613740140449
Encrypted:	false
SSDEEP:	3072:lIO54M8ArRcUlfLp7PinfKrB08+pQ2jDFVKq+wc/M1D6FUpvuRAlEPaz4JCmE+ov:lIOuAeUNt7PinfKrB08+p5jDFVv+t/ML
MD5:	5B4D51E5ACA49BA4323EB7F48D21B72C
SHA1:	E94A5C15777DF7D7623C2CA94769A95D998CD6F8
SHA-256:	FB72E6C3459D8A0E7BB61452B8A1030A5A87E4C2E35D1CEB0A449CD53DAC2C79
SHA-512:	CD9CA151909096307BED28B3A0EFFAD433F702A7B0789B8CB6F8848436BC9DF974BCE8F3F04E1EE394572E75A1B1952DD3B89E63CA5AF30EE3F700C28A709CC7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.eBPYdy5TlKU.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvCjRZ-bRAiOPLLf0QdNwYcTlfNSg"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.jj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var kj,lj,nj,qj,tj,sj,mj,rj;kj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};lj=function(){_.Ka()};nj=function(){mj===void 0&&(mj=typeof WeakMap==="function"?kj(WeakMap):null);return mj};qj=function(a,b){(_.oj\|\|(_.oj=new mj)).set(a,b);(_.pj\|\|(_.pj=new mj)).set(b,a)};.tj=function(a){if(rj===void 0){const b=new sj([],{});rj=Array.prototype.concat.call([],b).length===1}rj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.uj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Nc};_.vj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.wj=function(a,b){a===0&&(a=_.vj(a,b));return a\|1};_.xj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.yj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Cj=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	downloaded
Size (bytes):	82296
Entropy (8bit):	5.592663724925133
Encrypted:	false
SSDEEP:	1536:brcg844kyv9f9wzJz6uKBLpLON1B5q0VOrGzIF7:AkyvFpLOHqmO2E7
MD5:	E08FA1D1755C4F8570B123C010325195
SHA1:	C496DDD8CBC293564E5FDF2D987833332F554660
SHA-256:	73C96E90B9C6A8E44AA7FA57F5A84A765AB2D1452E11B7B41882F2056B4BC393
SHA-512:	369B54AB94A768D44216962936D3DD948EAA688488D9C279FFCEEC2A2CBD4243FEFB2EADABB6C9D53243C3803EFBB5DC7E234CFC17EC5A9CA549AD4DE4141700
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	97
Entropy (8bit):	5.336991931003171
Encrypted:	false
SSDEEP:	3:yionv//thPlT/XtNsyxdxFxk+baSkpkl/2up:6v/lhPXNB9FxkkJeup
MD5:	114E0F27AB7C461224303644FA3EB89D
SHA1:	5504053F373E6496680125CB2D4A8A9F437968B8
SHA-256:	E3CA966E54B53DD010FF2DC0023813647AC9DA72774192E2937BF906AD1139E3
SHA-512:	A3A186FD9BFCE07D3B5979DC8AAF4917595993F7D3B52DFF7355CBCFC26AAFEA3FDE958BD186D5D0ECB18595F68F398B64E21F291A1C052573521768957209AD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...(IDATx.c.....9.......?.>.......FCi4..)..?.:....<....IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	141
Entropy (8bit):	6.003288945245843
Encrypted:	false
SSDEEP:	3:yionv//thPlT/Xtxshx/Fxpeh8uCKEnN3VIlqM2Om2h2ru/Sxl/B1p:6v/lhPXxAxjMh/CfN3V+2Kh2sSxtjp
MD5:	1220763DB56CFC86AFBC5D81EE8A9EA9
SHA1:	05414C177ABC67E5353445B1470F643A782EE0D9
SHA-256:	5279E86A981276A27B8EC0D13F34229B289BAC00CCE0932CD67E6A71F6439201
SHA-512:	4068F1A5C50E1723DCA31BDB65A25E9D42EB272116320D692B31F0FCE47AB4111FFA875895E1FC15724DAC8C12F98433F82C4B0F40848432FC1962C4FF28B12C
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/VYhF4U2_Ulo5TxrJblqA1dFmKF17woYZFvBzgdMXFCGOyf7EoT7mfBDj2f5cDrDO_9I=w36-h36
Preview:	.PNG........IHDR.............J~.s...TIDATx.c..T.to.(..(PT.......KP-...{...0-."..`..jASNX..r.Z..).@.I.{.p.R.q....od...Zw.._Y.....IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2051)
Category:	downloaded
Size (bytes):	14684
Entropy (8bit):	5.4684913224185765
Encrypted:	false
SSDEEP:	384:IYikmqAScZ+Ad7y0B6nfCHa3rFC+5aiWQLHO91NIuW:IqmqAeA1B2KgrrW2r
MD5:	D4298228161E149CDBC2CFF576C19B89
SHA1:	070DDF2550103C54935E4731780B38362F8A7306
SHA-256:	EC242F8B775BDD774749BFA25CEF86AC8B07FEC060E35D30F590ADCE789A1E60
SHA-512:	98075757529AD181BFA04A9D32346C3015A609601A7D4C662B0FA4EB722FA646DB3088D74CC01CD697CA1E14CD3777BC34CE2316FEF99C4B866AE3A545D53AE6
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2447)
Category:	downloaded
Size (bytes):	301933
Entropy (8bit):	5.737884618912723
Encrypted:	false
SSDEEP:	3072:e++ZO/z4F3z0SS42kNW0OYmPo7gk8/JLDsmvO/yalRHASRUdDEO0t/mVmElBZS9w:e++ZO/cKdvzIsolt/mVzlBZquqS
MD5:	A7B34DE69E9C13F7C79A805678E91E31
SHA1:	C9DC1D1C1A2B672D3854995FEE4A690C4C289E86
SHA-256:	1AEE00198B0BC25B0B82A04B934B397F82EFA10DE3A878966851D1BC9A6BEE66
SHA-512:	E74AF359CAA6A634405B3022A328AF5143A3C711FBE93E71F45CED0911DA914F78D93A28716698EB46FE985A6CAF339A1ACA473C6EFDABEE166C4932887F4DBA
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/survey_binary__en.js
Preview:	var HaTS_a,HaTS_aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},HaTS_ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},HaTS_ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},HaTS_b=HaTS_ca(this),HaTS_c=function(a,b){if(b)a:{var c=HaTS_b;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&HaTS_ba(c,a,{configurable:!0,writable:!0,value:b})}};.HaTS_c("Symbol",function(a){if(a)return a;var b=function(f,g){this.ng=f;HaTS_ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ng};var c="jscomp_symbol_"+(

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	604
Entropy (8bit):	7.56865329157797
Encrypted:	false
SSDEEP:	12:6v/7WYs1eiaCWtFZNDfdWpGK9/N0eYkbIkZlcVwNkc:N7ei+PR1WAMN0eYWInVZc
MD5:	80F03F4B309056CDA71A7E6469BCCEE6
SHA1:	0108A567FF39D0B9E273F336C1D8AC7AE5F700B2
SHA-256:	1D80F0E2A49BA079AE22007AEB759A5903D45DDF1BC5A707BF129BE328F3CC5A
SHA-512:	111C8A794367FC6283EC3C64A4B1E9DE5D70E9324AEC0E461B4407BCF9F563F0A4FCED4FDFA2826D9299B8851B08B44AD244E53FC36AF4D304815348FAC93E04
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH..Mk.Q.......:-&Y.n...ih..P.U.&...,.B.F...<....(...n.qeu...R.tk...j7......V....L.I].=..{.9...8..j.-,.$.leF...0qf.T7H....^3.M,.......PfP.......2.8VG..p.Y3HN..L..Q..dR....#.C.kw.G....W#H..3b.z$Z..8...v....[x'[..g...Y.7.:......#+0..ge30F....;h`.'..L...v..\.h.2..e.S.^.qN.}Z.Q....5..W.e`... .E...^OKs.O.."...).F.#..29... B.~.Y.......gD..@oxEv...$.....>.%..=....k.ajl.....&J.....-Q..F.->...T;u'.@6...v.0.r...>."..L.O.......m.....^...~..iW.c..w.$!.<`;]....9B.y..@.=<%.kkp..4El.43....\W.I.o..-].)6G9C+.pRg.+W..._.d.y..W.....IEND.B`.

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15996, version 1.0
Category:	downloaded
Size (bytes):	15996
Entropy (8bit):	7.989012096227512
Encrypted:	false
SSDEEP:	384:nH4UArsQ/nHYjtuHgovTC+H+b23+kMw/KjK0TQ59u98pgQXk:nYZQjtuHgYGbrMyjDiJXk
MD5:	CC536892EABDE0EAEB81493BDA8E189A
SHA1:	15C0180AD7BDF9D0F963747447BC9446FC42D2DC
SHA-256:	97399A2914C593DA2895D9729AA0170A1956E91EE54CF7550696691949558A37
SHA-512:	94F605C4C4FE76EBDB2D5428C6BA69F83B75C65B6932251C0C3E90F92CC1F421FD9F15E81D5985693DC564B8644D90A26DA3E9C63976CF5862ED54D5ED0C4320
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......>\|..........>...........................<..:..:.`..:.....p..~.....6.$..(. ..>..N.....5xn.u..b.....c..<..Rw.H..q.(.....9A...^.=h.%J...4.\.\.[....[....h.j..AP.....a..]N.o....6.a..uO..R.\|o...wO..t....s....^F...Oy....IN^..X...9sg...(;..L.....5.s~...?....%.0.f....b.. ..;.. "k+.v`.....1kq.\mqLp.]\|..Z\..O......=.......h..,u.................y.h.o.Z..%.....g#..B......V...3.r....J..>g.-rU?+.3A.....C...... .21..f...Z.......P..o..g\.b... v...6..0...b.....?..-WL...Z2...1..Q./....... ..C..G.^r....O......io;.o..4.<....7.Pm..!.Nu.=..Oc............e.w.g.....,...c...0V.P...R.){..u...>.fi..S.w.G...-..... $.8......w..hp...T@..Go....).......;.....B.)..p.\.?.-KC.S.5..pX9...'.!.-....R.Sg.>x.o.yP......S....a...m<.+".t%..3x.?3M;....k.....I&I.3g.26...p...}~....X.x..G.<)..k..U....AZ..A@....Cu..Tv{...\|v.04H.$Xc..E.)<...!........^..~.7P.u...xH..rX..8O....y.k(...0.p 0.%.U...Z...%...\|LlUJ.]L_...9..AX.$E.$.sa.(v8L!...rc.-....I..W..........^U...@.....3P............M..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6046), with no line terminators
Category:	downloaded
Size (bytes):	6046
Entropy (8bit):	5.353212952847172
Encrypted:	false
SSDEEP:	96:mtOTKb1db1ZlNY5co7sRxiU0rqig7O7aZCUgpgXEt94k+g8IHh8u928DoCLcY6FU:mtOT6TUvBrqig7mIg8IB8u88DMY6FrYr
MD5:	675F6DD50FF15ACD72C1C453ED3CF228
SHA1:	3C7D5F4A3FB9393C15A2B5DDBE816BFB41957144
SHA-256:	E032FD21B1B5B4C7F8D9BB173F235C484E46AABA11C620B60592D3F4B570A70B
SHA-512:	D83F707192C8C8C793E2043C760671E0A4AE1F649C3515DA063169077B8420BEBA2C5092DE310F2C606EB3FC3E76CEC384959525831EB6A820210B23A7028AF9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.fSHv1dvvroY.L.W.O/m=q_sf,qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTsVA9_hKyGtH1-UzkVaxmvYQjNv7Q"
Preview:	.gb_Q{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ka{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_La{fill:#f9ab00}.gb_F .gb_La{fill:#fdd663}.gb_Ma>.gb_La{fill:#d93025}.gb_F .gb_Ma>.gb_La{fill:#f28b82}.gb_Ma>.gb_Na{fill:white}.gb_Na,.gb_F .gb_Ma>.gb_Na{fill:#202124}.gb_Oa{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	3467
Entropy (8bit):	5.508385764606741
Encrypted:	false
SSDEEP:	96:ogbsxK3SrI2Jrutmxy9FALtcP+EGYkxhclzV9xCw:Psc3OIpDj2ZYkxhATxX
MD5:	231ABD6E6C360E709640B399EDF85476
SHA1:	6CB98F38D9B6FDCF2E7D7C7682A219082F2E1E75
SHA-256:	44B5D535663C65CD2E6228EF1F0C3DBA9C89EAE5C1BF079A6C4C64972DEE989D
SHA-512:	D45455810B34493A05BA2DD7ADF24C0C009F4CF0898AE9C57978D38C8F2654CEEFC11D1C151BA72B902E0FA87537D43C37957DCAEC1792B5277B54C8E7BCCA3C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var fya=function(){var a=_.He();return _.Nj(a,1)},au=function(a){this.Da=_.t(a,0,au.messageId)};_.J(au,_.v);au.prototype.Ha=function(){return _.Fj(this,1)};au.prototype.Ua=function(a){return _.Xj(this,1,a)};au.messageId="f.bo";var bu=function(){_.km.call(this)};_.J(bu,_.km);bu.prototype.xd=function(){this.NT=!1;gya(this);_.km.prototype.xd.call(this)};bu.prototype.aa=function(){hya(this);if(this.JC)return iya(this),!1;if(!this.UV)return cu(this),!0;this.dispatchEvent("p");if(!this.HP)return cu(this),!0;this.NM?(this.dispatchEvent("r"),cu(this)):iya(this);return!1};.var jya=function(a){var b=new _.gp(a.b5);a.vQ!=null&&_.Mn(b,"authuser",a.vQ);return b},iya=function(a){a.JC=!0;var b=jya(a),c="rt=r&f_uid="+_.rk(a.HP);_.fn(b,(0,_.bg)(a.ea,a),"POST",c)};.bu.prototype.ea=function(a){a=a.target;hya(this);if(_.jn(a)){this.iK=0;if(this.NM)this.JC=!1,this.dispatchEvent("r"

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	176356
Entropy (8bit):	5.553112647292682
Encrypted:	false
SSDEEP:	3072:lIO54M8ArRcUl4/TLp7PinfKrB08+pQ2jDFVKq+wc/M1D6FUpvuRAlEPaz4JCmEL:lIOuAeUG/Tt7PinfKrB08+p5jDFVv+tu
MD5:	E4633D672F61E6EBA21547AFA0A12EB5
SHA1:	751C5E178238582AA3CB2E7E82673E3C49AFC9CC
SHA-256:	330462707832046BBEE4C445663F8B7E53D2B63814319DA13B4B639FC4DD07C1
SHA-512:	3C65E39EC2FC12D17D527E6E3D821E29811A5B1F802EA71D180B3AB5C53FB5473A5DF2A4E79F4C7215CA66B3D6211654DCD749136B3492E021DCD6D6266E1714
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.jj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var kj,lj,nj,qj,tj,sj,mj,rj;kj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};lj=function(){_.Ka()};nj=function(){mj===void 0&&(mj=typeof WeakMap==="function"?kj(WeakMap):null);return mj};qj=function(a,b){(_.oj\|\|(_.oj=new mj)).set(a,b);(_.pj\|\|(_.pj=new mj)).set(b,a)};.tj=function(a){if(rj===void 0){const b=new sj([],{});rj=Array.prototype.concat.call([],b).length===1}rj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.uj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Nc};_.vj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.wj=function(a,b){a===0&&(a=_.vj(a,b));return a\|1};_.xj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.yj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Cj=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	dropped
Size (bytes):	3131
Entropy (8bit):	5.352056237104327
Encrypted:	false
SSDEEP:	48:o7hHD75byh9xqKP5jNQ8js63rAwrMNhYfmdpwoKLEy5aQW5Tx5v3MmFopMGIWO4x:oFD+95jOQr3AT7wRLDGD5flBb4Ew
MD5:	ADEF03127F74F5E6742B8CFA7B863F28
SHA1:	58D7C635582AF10E91EC047FD315FAF758AF51DA
SHA-256:	5FDD639E222F58AEB6178EB02583086BCC50ED219DEAA953D0E7984DD0E1FEDC
SHA-512:	3AC26E9569EE83298F386D551774F378D3E433A2C80C1D4BC7481C544605A2FA4943F6CBC8E97FBF8FE3C32C1EFB2A1CCAA01403819482FC7429538FDF2CA758
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var kA=function(a){_.W.call(this,a.Fa)};_.J(kA,_.W);kA.Ba=_.W.Ba;kA.prototype.jS=function(a){return _.Ye(this,{Xa:{lT:_.ol}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.ni(function(e){window._wjdc=function(f){d(f);e(dKa(f,b,a))}}):dKa(c,b,a)})};var dKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.lT.jS(c)};.kA.prototype.aa=function(a,b){var c=_.Dra(b).Tj;if(c.startsWith("$")){var d=_.jm.get(a);_.xq[b]&&(d\|\|(d={},_.jm.set(a,d)),d[c]=_.xq[b],delete _.xq[b],_.yq--);if(d)if(a=d[c])b=_.af(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.qu(_.Lfa,kA);._.l();._.k("SNUn3");._.cKa=new _.pf(_.wg);._.l();._.k("RMhBfe");.var eKa=function(a){var b=_.wq(a);return b?new _.ni(function(c,d){var e=function(){b=_.wq(a);var f=_.Sfa(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	downloaded
Size (bytes):	207260
Entropy (8bit):	5.534467332061904
Encrypted:	false
SSDEEP:	3072:LPIp9SXNKW4B1QM9Z0xoiCcuBcO9yyqoiAuxixEUDF2Dej7zdFeTVki:LIGKlnQa1cvOzDF2Dej7zdFeTP
MD5:	4D92C318CA64033247851B6313A2F379
SHA1:	3D7D2B6D8552B8F3ABFE5413DB3EB10F52655269
SHA-256:	F9F54CDF167871C406411C456BE7BE0FFB4D8845EE037E12DB301655708243DD
SHA-512:	D6392DC806FC8FD759EC3A5B123C19EA9B4FD7C7D1FC30450D0D1FB722B96C8CF5265D0019022181FC746C8BC7776A8951BBC4BD7B8D20D7BCCC48F2119ADEB3
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	432
Entropy (8bit):	5.312098001011863
Encrypted:	false
SSDEEP:	12:hYA0HqJmqGyG779hLFBkAAqJmPm/esHbuGU4Nbx4IQL:hYPcBXG1BvPz7uGU4NW
MD5:	21F548963A289C227C77F3AAFF176F4E
SHA1:	2A485E0569EDC7D7498805CA8B4558A798C373BC
SHA-256:	CA6D6A662BF9A812CF50DF9425665374E30BB5C3B41E837A4236DC330C533130
SHA-512:	82D2BD389FDDBD404F566961FE35E5C9CC4201EA233D51873834D3AD781E62023717AE83108FE970E95B491CF0104F9656AF76D9044DA693322D21CEFEC5DFC5
Malicious:	false
Reputation:	low
URL:	https://scone-pa.clients6.google.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SpvAvsXfWWo.O%2Fam%3DAACA%2Fd%3D1%2Frs%3DAHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script type="text/javascript" nonce="YvbYD5MT-RdwDSgnj4q1XA">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script type="text/javascript". src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async. defer nonce="YvbYD5MT-RdwDSgnj4q1XA"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755)
Category:	downloaded
Size (bytes):	1460
Entropy (8bit):	5.274624539239422
Encrypted:	false
SSDEEP:	24:kMYD7DUuXIqMSsN7UYgtx/mQ7hz1BU6TZ6BdXDMvUKGbWxlGb+jSFFV87Ofk8tp8:o7DhXI6PoXwsKGb2lGb+jS9Mwrw
MD5:	481C149C4D3EE4A53C3E7CBA067371DF
SHA1:	E0FED275636D3492C922C44F010157FAF0936733
SHA-256:	9327A53F577C5FCEFDB162E02D8646CE5B70DF2201F4B3289384657B32BACE70
SHA-512:	EC5C5A03ED4E1A27BEE7E1C488A238D79A9787D944E364CCE516FB28C22256919E49C99BFCFEA0F7815AB4232A350914E26D33D20F5A81ED19A39DFD40E30C79
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=P6sQOc"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("lOO0Vd");._.b_a=new _.pf(_.Dm);._.l();._.k("P6sQOc");.var g_a=!!(_.Mh[1]&16);var i_a=function(a,b,c,d,e){this.ea=a;this.xa=b;this.ka=c;this.Ca=d;this.Ga=e;this.aa=0;this.da=h_a(this)},j_a=function(a){var b={};_.Ma(a.HS(),function(e){b[e]=!0});var c=a.uS(),d=a.yS();return new i_a(a.wP(),c.aa()1E3,a.bS(),d.aa()1E3,b)},h_a=function(a){return Math.random()Math.min(a.xaMath.pow(a.ka,a.aa),a.Ca)},SG=function(a,b){return a.aa>=a.ea?!1:b!=null?!!a.Ga[b]:!0};var TG=function(a){_.W.call(this,a.Fa);this.da=a.Ea.JV;this.ea=a.Ea.metadata;a=a.Ea.cha;this.fetch=a.fetch.bind(a)};_.J(TG,_.W);TG.Ba=function(){return{Ea:{JV:_.e_a,metadata:_.b_a,cha:_.VZa}}};TG.prototype.aa=function(a,b){if(this.ea.getType(a.Od())!==1)return _.Vm(a);var c=this.da.jV;return(c=c?j_a(c):null)&&SG(c)?_.zya(a,k_a(this,a,b,c)):_.Vm(a)};.var k_a=function(a,b,c,d){return c.then(function(e){return e},function(e)

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	dropped
Size (bytes):	3467
Entropy (8bit):	5.508385764606741
Encrypted:	false
SSDEEP:	96:ogbsxK3SrI2Jrutmxy9FALtcP+EGYkxhclzV9xCw:Psc3OIpDj2ZYkxhATxX
MD5:	231ABD6E6C360E709640B399EDF85476
SHA1:	6CB98F38D9B6FDCF2E7D7C7682A219082F2E1E75
SHA-256:	44B5D535663C65CD2E6228EF1F0C3DBA9C89EAE5C1BF079A6C4C64972DEE989D
SHA-512:	D45455810B34493A05BA2DD7ADF24C0C009F4CF0898AE9C57978D38C8F2654CEEFC11D1C151BA72B902E0FA87537D43C37957DCAEC1792B5277B54C8E7BCCA3C
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var fya=function(){var a=_.He();return _.Nj(a,1)},au=function(a){this.Da=_.t(a,0,au.messageId)};_.J(au,_.v);au.prototype.Ha=function(){return _.Fj(this,1)};au.prototype.Ua=function(a){return _.Xj(this,1,a)};au.messageId="f.bo";var bu=function(){_.km.call(this)};_.J(bu,_.km);bu.prototype.xd=function(){this.NT=!1;gya(this);_.km.prototype.xd.call(this)};bu.prototype.aa=function(){hya(this);if(this.JC)return iya(this),!1;if(!this.UV)return cu(this),!0;this.dispatchEvent("p");if(!this.HP)return cu(this),!0;this.NM?(this.dispatchEvent("r"),cu(this)):iya(this);return!1};.var jya=function(a){var b=new _.gp(a.b5);a.vQ!=null&&_.Mn(b,"authuser",a.vQ);return b},iya=function(a){a.JC=!0;var b=jya(a),c="rt=r&f_uid="+_.rk(a.HP);_.fn(b,(0,_.bg)(a.ea,a),"POST",c)};.bu.prototype.ea=function(a){a=a.target;hya(this);if(_.jn(a)){this.iK=0;if(this.NM)this.JC=!1,this.dispatchEvent("r"

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	downloaded
Size (bytes):	6662978
Entropy (8bit):	7.958019049174792
Encrypted:	false
SSDEEP:	98304:vOtzAWupkd4f3qiFd74STXkQAW0ZwRy8gNxhFRfhdOReIgDgvVTiafAOZFMrj:GpA7ydWqyrp0uy8gLRqe1yi+ZFUj
MD5:	7F23B1A0498132624D50ADB2C7902239
SHA1:	0F7EB735C6EC74F004D9208531C281D49CB1FE9F
SHA-256:	93BC9E63A8F2725DCD5FA43414530EF566C878901618644621B948D0F7599460
SHA-512:	3CD26043223EAB955251CCA8032C7EAAAB9D68823C858D8C3EA35BAEC093FCFB29AE3DA2CC3A0E0F698D0E203AC47ED79C75DFA8BB47B77D51BE014203D00810
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/ykTW8EtjZIuwFj1YAJqxyuVX4OddosBiSDoo
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8................................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	downloaded
Size (bytes):	3019964
Entropy (8bit):	7.960852973877143
Encrypted:	false
SSDEEP:	49152:RA5LG758mqDsNR4rmlFIBg/4vuaVB8v42psIu+djH03PYTjapvB8TdHI8tCl2GxE:CtG75DmdrmlFIS/2zrMsqH0fYTepeelI
MD5:	530E1468CB2FDBB27DB213E81FC43EAE
SHA1:	E2E94CB2AFE2AF4237A70B610A33260DF36E7814
SHA-256:	7A1BD9B4E306B69DF41292FCF1408EBBC9F7A505FECF5543D53A6124B072992B
SHA-512:	549F80CA50F89B0009DDE0C847FB6F47D1E27D157E646D0A7139F997FE0AC13695648CDEA6EE10EA772C999A2DB3051834270EB1DC728D807952252564001FEB
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/LslJj1iFGATghl9ipuvfc2FuZlbaWAWtX7vz
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8..........................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.Mt.F..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (683)
Category:	downloaded
Size (bytes):	3131
Entropy (8bit):	5.352056237104327
Encrypted:	false
SSDEEP:	48:o7hHD75byh9xqKP5jNQ8js63rAwrMNhYfmdpwoKLEy5aQW5Tx5v3MmFopMGIWO4x:oFD+95jOQr3AT7wRLDGD5flBb4Ew
MD5:	ADEF03127F74F5E6742B8CFA7B863F28
SHA1:	58D7C635582AF10E91EC047FD315FAF758AF51DA
SHA-256:	5FDD639E222F58AEB6178EB02583086BCC50ED219DEAA953D0E7984DD0E1FEDC
SHA-512:	3AC26E9569EE83298F386D551774F378D3E433A2C80C1D4BC7481C544605A2FA4943F6CBC8E97FBF8FE3C32C1EFB2A1CCAA01403819482FC7429538FDF2CA758
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var kA=function(a){_.W.call(this,a.Fa)};_.J(kA,_.W);kA.Ba=_.W.Ba;kA.prototype.jS=function(a){return _.Ye(this,{Xa:{lT:_.ol}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.ni(function(e){window._wjdc=function(f){d(f);e(dKa(f,b,a))}}):dKa(c,b,a)})};var dKa=function(a,b,c){return(a=a&&a[c])?a:b.Xa.lT.jS(c)};.kA.prototype.aa=function(a,b){var c=_.Dra(b).Tj;if(c.startsWith("$")){var d=_.jm.get(a);_.xq[b]&&(d\|\|(d={},_.jm.set(a,d)),d[c]=_.xq[b],delete _.xq[b],_.yq--);if(d)if(a=d[c])b=_.af(a);else throw Error("Jb`"+b);else b=null}else b=null;return b};_.qu(_.Lfa,kA);._.l();._.k("SNUn3");._.cKa=new _.pf(_.wg);._.l();._.k("RMhBfe");.var eKa=function(a){var b=_.wq(a);return b?new _.ni(function(c,d){var e=function(){b=_.wq(a);var f=_.Sfa(a,b);f?c(f.getAttribute("jsdata")):window.document.readyState=="complete"?(f=["Unable to find deferred jsdata wit

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	dropped
Size (bytes):	5050
Entropy (8bit):	5.30005628600801
Encrypted:	false
SSDEEP:	96:o75BuBxJfma7bGZABddEgf8nI4zLm4KGo8Vh1EabPVTq8fv/xRw:WHMmaX9r8Igp7nBlHo
MD5:	D9F15F1AEAF15673336FAA3507D1A2A7
SHA1:	FC79D00AF2E2D44FEBA701F12ECD4AFCA327F464
SHA-256:	AA3574ADCF3826390918BC2D5DCD88D7BC63238A6022DEF3487A67A731C30E7A
SHA-512:	D756961B6BFC478274E390B94D613BD837DA011D680FC6D67779A8E12C7F082EF977FC15D02C076F92BC1D2CE7EFDE48F82B4EC1BD12CF38AEDDAB1917E36041
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.oNa=_.z("wg1P6b",[_.XA,_.Fn,_.Nn]);._.k("wg1P6b");.var f6a;f6a=_.mh(["aria-"]);._.yJ=function(a){_.X.call(this,a.Fa);this.Ka=this.xa=this.aa=this.viewportElement=this.Na=null;this.Jc=a.Ea.ef;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Qi();a=-1*parseInt(_.Fo(this.Qi().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Fo(this.Qi().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.cf(this.getData("isMenuDynamic"),!1);b=_.cf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Wc(0),_.ku(this,.g6a(this,this.aa.el())));_.oF(this.oa())&&(a=this.oa().el(),b=this.we.bind(this),a.__soy_skip_handler=b)};_.J(_.yJ,_.X);_.yJ.Ba=function(){return{Ea:{ef:_.cF,focus:_.OE,Fc:_.uu}}};_.yJ.prototype.IF=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.qz)?(a=a.data.qz,this.Ca=a==="MOUS

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	570
Entropy (8bit):	7.507500083049312
Encrypted:	false
SSDEEP:	12:6v/7usW8F8q0XW32k3hFGIqpOpsFQRJWutLUe7XAO/b1SKT1:Bq0XW3H35p3R8utAeTAOZSy1
MD5:	0E7D27F6C5C957880E631FC98144B897
SHA1:	BEA8DFB7CF588CAF5B2C98A3744F9B367EEBF65B
SHA-256:	B2C36462B54E7D9344E9E6A18B6EA2CCAC84A684BA73CABB638B0C756017E919
SHA-512:	BFC17A0405C5509FE894C6A322782821B157E0570BD08CFB809BC5FC8358CFF099DE3B0EBC3C961E48C9B456DDB46EC30E6997D40702C1AEA4ECFBFDA5EA4912
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V.W....sRGB.........IDAT8...MH.Q...o7V....K.!..a...u.:.I..z."h..^...].>. E...9."..6....,...Z....{..7..7.-........~.....B.^....n.w3.L}....@.c..F.qG.........j.......9..5.L. .t:.G..P...p.W.aX.P<..z..!.[..F...Q..]6....f.........B(..Z....z....f.z*.J...:A..........}R,.e1Y....j.9...l6/q..d2.,...<.O.....p.Y..y^.....o-.....c......Z..t:}'....px..-...3$.@.w-A.a1..x%..\2.C..Y[?.......F..dP...E>b.....D..-....n...o...#...m .. .y........S...$.H$.2..M.i../..........x'.(]M.....<...B..\|.V...5.e.r......`.Z...\\|..V.Q..89....IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9768, version 1.0
Category:	downloaded
Size (bytes):	9768
Entropy (8bit):	7.975118282088062
Encrypted:	false
SSDEEP:	192:Wiy1McDcSTowj8gYHJHNr/LQ9BHkV1lnJAN7+hzY+XmRVPBWzFBZ0x0Zbs:CMcDowj8guHNr09FkV1lJBs+yVPBmscw
MD5:	49831701CBADCC981121971FD0DB8673
SHA1:	A74A7BE2195AA44D304F82681CE9BD7ED5FE12B4
SHA-256:	F5A2670F86A2248805A64CB46CD1F59BF05E9A8201B81C09F579F94820404354
SHA-512:	67D4DC6672C16D085E7CE81FC0D64581B4C5A1578F2F4866FADD8F4DF7F391A9CB741FDA8892BCFD3F2FAF116606EC2C22998F2C1D2E650A89619C1584CDAB52
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2
Preview:	wOF2......&(......_...%...........................H.....r.`..r....(.......6.$..\|. .....E....S%.X......;..... ..K...Q......5...._....D.lO...:.............xj.P.=.b.p..._.K..\|....P.)..R.Y..$.d...z.q.....?........$.....\|k.......3Ih..p....{w.1j...Glt...``.v.m.6)....+.\|.fx.V..b...P..fQPP.AJ.!..,l...+0V7....8.....4)g.t).S......d.ZO0.z...s.... y/.4.4..#H4...=ERu;.n...jm.0eE/......h..&...R^i2.z...O./.....n.^..f..b.X\|.X(/..wg..7.pM.";.{.X.......Y......1.Bbq......K6>#...~............A4..EC1k.h>k....A..XDB....$.6....[..?.q2.^...R.....6.5[....e..[..^6........r....hz..'.....2....X+.?....@..H.* j.h..M_.hR.(..\|y!.<.O..(fj......B....\U.6'..S......w.&J......$...$?...Z.r...........N.....@..`.1!..$A.."...8T 5.........@F. ....[..$ .\.C.\|!.AP.((...7..k>...h.e.........@..v...s.J......A...R..1'.SDP.*.F....tI;...0...k.O. }....@c.2.4.U.\|V......."G.{..\|...q..kA.. .F..@n.<.../..._.<......Px..M..$0..TB.u%....M...Z5\.`....Q..r,@.6.;&(.`\|.'...W..o:.P\\.V....(..w.j\|vjb)...(..^.px..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2287)
Category:	dropped
Size (bytes):	172469
Entropy (8bit):	5.55613740140449
Encrypted:	false
SSDEEP:	3072:lIO54M8ArRcUlfLp7PinfKrB08+pQ2jDFVKq+wc/M1D6FUpvuRAlEPaz4JCmE+ov:lIOuAeUNt7PinfKrB08+p5jDFVv+t/ML
MD5:	5B4D51E5ACA49BA4323EB7F48D21B72C
SHA1:	E94A5C15777DF7D7623C2CA94769A95D998CD6F8
SHA-256:	FB72E6C3459D8A0E7BB61452B8A1030A5A87E4C2E35D1CEB0A449CD53DAC2C79
SHA-512:	CD9CA151909096307BED28B3A0EFFAD433F702A7B0789B8CB6F8848436BC9DF974BCE8F3F04E1EE394572E75A1B1952DD3B89E63CA5AF30EE3F700C28A709CC7
Malicious:	false
Reputation:	low
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.jj=class extends _.Q{constructor(){super()}};.}catch(e){_._DumpException(e)}.try{.var kj,lj,nj,qj,tj,sj,mj,rj;kj=function(a){try{return a.toString().indexOf("[native code]")!==-1?a:null}catch(b){return null}};lj=function(){_.Ka()};nj=function(){mj===void 0&&(mj=typeof WeakMap==="function"?kj(WeakMap):null);return mj};qj=function(a,b){(_.oj\|\|(_.oj=new mj)).set(a,b);(_.pj\|\|(_.pj=new mj)).set(b,a)};.tj=function(a){if(rj===void 0){const b=new sj([],{});rj=Array.prototype.concat.call([],b).length===1}rj&&typeof Symbol==="function"&&Symbol.isConcatSpreadable&&(a[Symbol.isConcatSpreadable]=!0)};_.uj=function(a,b,c,d){a=_.zb(a,b,c,d);return Array.isArray(a)?a:_.Nc};_.vj=function(a,b){a=(2&b?a\|2:a&-3)\|32;return a&=-2049};_.wj=function(a,b){a===0&&(a=_.vj(a,b));return a\|1};_.xj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.yj=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.Cj=function(a,b,c,d,e,f,g){const h=a.ha;var k=!!(2&b);e=k?

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15988, version 1.0
Category:	downloaded
Size (bytes):	15988
Entropy (8bit):	7.985554788162145
Encrypted:	false
SSDEEP:	384:JfFDqxG/bHq3qmBgWpwqOu9ulbiyuY+ifPqlBOpMEyNKF:1FuI/3mBgWpwLlmsaBOSuF
MD5:	CB4F5F85FAE1369135CB93997B0C7507
SHA1:	2FD7A68C2A0291BD74B6A6C6E229B60876B1C1F8
SHA-256:	06E60764F2F683EF1562780A928735CA90BD7FF7B7376D2818C8445BE9C29669
SHA-512:	9275475936E2840008A6D2FF86C1080D484178E964EB3C06D5A12D70F79F5E8E09C97126C139C86BE95EC15C9971142F2455E002C0B336344D3060C16D3B9B04
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2
Preview:	wOF2......>t..........>...........................<.....:.`..:.....(........6.$..(. ..&..N...X...!.q.........h.?=.H..q............uT7]/.....(K.ZRfl.d..=)....)..P..[...>J../.....z .tud;...w....Z8....k#.........uW.Y.8..C.d.N...\..-\|.zy........`..j.a...QjF&....?.w.\B.H..B8.B.!...B..:5.T..bR1P3j.X..i......(ox~.=c.7...1@".......A1Q,.\.N.yw.].....zW...}:.g$...MA..[{9S..\|@... .?...?..Kh=.{.#..;.P.........8.}..[K%.x@#....7..PBv.(...p....C.....~.........Dp......k.6.8 ~...\|..9FF..0.c.cG.qy... ...RK.R.....H.M6.6)/. .EX...9fIr..V...........}....y.....X.h.....=r.L.5..../.1X#".X,.D&...,%H.?.......mjs..$RXA>...a.\.\S<.....5)..."..J!.:.uh.(..cVX.:D,......!(.....w.^...Xp..=..ze.S+...y$....`.y../...j#.g..5.#r$"V..k...j.....E$..O.L..!.F....7..7.X/U.e...v.16.......R....G.J...pP..;.........Q....=.i.?GG&....B......+....E.....c.W.[.X,H($.J./..........L..@..c....(:.:...K...?..B...# .... ...^...q._FA.O..P.\|n-...XVT..}.8M...QD......#..s..b...@.L!..? -C..04 ..SK..O$...n.;.*....'

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	7.642704506233666
Encrypted:	false
SSDEEP:	24:VYCc25934kGef0S/yvIaL/8Q4HBy9vdek:VHcOePQ0dL/EyYk
MD5:	089AD8854F62CA8726D4129B81310E8F
SHA1:	ABF76DF8618639A4AB1EE2B3D12BAA01BDF507B0
SHA-256:	CC23E907B15D21B0C59B7F18D5444C2A777F58871306896533D7FC6283FC96AA
SHA-512:	E1F40A3908CF56379B0276D7F56CD3430548ED643A61FF9C8B27A866C5436CAD4AA6FE4F5012B591C61F3C8893D34905FDEDAB40A1A45AA58E697061E1EAD2F2
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH....N.Q......A.4..G......<.DHdM.1>....@`-..E..'`!"...h$...tjg...t...0..z....;g.=...5.^P.z.$p!..G2.y......t....,2G.!.D.-gs.~+.`R6.!aV.@./...~..0.Wx......ra.....xqG.@V..-u..z.O<....g..J-....\|g......mT%.F..._..1..Q........z%..`R..0W...@....J?....g.l.6.q.`@.9.f.C....j....k.P:B..9...+Py.Es..m.h<."...F.3.[m...9..a..B.M".I..8l %.J/Dmc.B.~).P...f#vA.q...R...0k..U....`..00d..[...X.A....../Pd..P.8...wB....K..A!.C...M..[...$T.........P..=....w.}E..-....K.b...%...2e....".e..U.Q.Q...[T.)..s...cra__.....VG.;Q..[.F.q......p.p.8..6.>=.._1....?....h...u4.......;.6Zmp .W./F..+..-b......:..b.#...O..+P.b..c..../...-.%....61..o.$i..Y..X..Mc.:.b....[...mw...2@...9p....c...g.`....d.W..<.......".......IEND.B`.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	124
Entropy (8bit):	5.636521244861347
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljjhiMMS8R/m5DsotL/uvlrq22g1p:6v/lhPZdwRe5DsG/uvl+Wp
MD5:	37DD4A0C4EBDDD1F95D8B09A356068A0
SHA1:	F559CD13D8AA2DDB63689C98FEC6044B1C356E41
SHA-256:	2EE94D2E255F58C5684196BE872CDBF2AB0B3C88A3BD5D6ACB7574992803A13D
SHA-512:	AE8A24C446048CB742C2D9A149BD7CBA4FFA065A3ADDB059559395AEA26B3478ACF70DA85AC782A79B40BD50A2665B9A86E1D20CA0963888F4295EA017BBA19F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=....CIDATx.c........dAii.\|Z...4.?.......d[2j.M-.....>jxEE........p..Q0..j.\.jOL.....IEND.B`.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2345)
Category:	dropped
Size (bytes):	207233
Entropy (8bit):	5.534033591355626
Encrypted:	false
SSDEEP:	3072:LPIp9SXNKW4BEQM9Z0xoiCcuBcO9yyqoiAuxixEUDF2Dej7zdFeTVZi:LIGKlqQa1cvOzDF2Dej7zdFeTC
MD5:	3498D141CDBAF3CBBEFBFB47E0F5798E
SHA1:	95201B9CBA3B1537BB31A9A830EB62B839F7F705
SHA-256:	C5CE3F89F8B2A9D0725CE7E385FE863990B710CC69E0C1F2D1FC388633AB46E6
SHA-512:	96998C9622A89A02C1063C549B62463630F6996A76E06289DD79FFDB54029B502466E0B07ACD22B7D2C0A50BCF4BA30A07A6DCC30B21CB3E22392830F64771A5
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. ,[50,"__e",[46,"a"],[36,[13,[41,"$0"],[3,"$0",["require","internal.getEventData"]],["$0","event"]]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}.,."__e":{"2":true,"4":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}.,."__e":{"read_event_data":{"eventDataAccess":"specific","keyPatterns":["event"]}}...}....,"security_groups":{."google":[."__cid".,."__e"..]...}....};.....var ba,ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	dropped
Size (bytes):	4066
Entropy (8bit):	5.369564168658135
Encrypted:	false
SSDEEP:	96:G6mTOIiY1medWRQrf7VF6vtDgXJyA7oxcoT4w:3mTOImedWOVF6vtUJyA8xJt
MD5:	4D3D9750CA5EB8A7D20993397BC5A6B8
SHA1:	DDB05A2C8AB1FD4537EEB2433BDF507CEE8CB8D2
SHA-256:	FCD1C642992A0BAF9038B3710DA080282AF0C80C113E1CE8F984F8143A2B2B32
SHA-512:	482DD926971FACA341058B35D333CEF64EAC460FC29B0B17AF5CD515253BCE973BBCAABADE3C4D125E07DE3BC75DE52059D5B229C44C5F95A30B845651EF64CA
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.vg(_.bqa);._.k("sOXFj");.var wu=function(a){_.W.call(this,a.Fa)};_.J(wu,_.W);wu.Ba=_.W.Ba;wu.prototype.aa=function(a){return a()};_.qu(_.aqa,wu);._.l();._.k("oGtAuc");._.Bya=new _.pf(_.bqa);._.l();._.k("q0xTif");.var vza=function(a){var b=function(d){_.Zn(d)&&(_.Zn(d).Lc=null,_.Gu(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Su=function(a){_.nt.call(this,a.Fa);this.Qa=this.dom=null;if(this.rl()){var b=_.Cm(this.Wg(),[_.Hm,_.Gm]);b=_.pi([b[_.Hm],b[_.Gm]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.ku(this,b)}this.Ra=a.lm.Dea};_.J(Su,_.nt);Su.Ba=function(){return{lm:{Dea:function(a){return _.Ue(a)}}}};Su.prototype.Bp=function(a){return this.Ra.Bp(a)};.Su.prototype.getData=function(a){return this.Ra.getData(a)};Su.prototype.uo=function(){_.Nt(this.d

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/related_item_external_avatar.png
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5132, version 1.0
Category:	downloaded
Size (bytes):	5132
Entropy (8bit):	7.959814059351413
Encrypted:	false
SSDEEP:	96:HZkx6Qo+1cdqdwbpAO1sLJQOJyuUtGhrAzzLfptGiz:5kUQhckwlKLPk9t1zLfCiz
MD5:	7C438C68BED5CD5FBC47B724BF853634
SHA1:	4AEA344FD136A23926156212AE2AA156672BE4EA
SHA-256:	B7B835E506F41E07EE76C30AA7B140EE3B80C7D4F083282CD849C0AD19F705A5
SHA-512:	844D79F159661161F959A19F7B8E79642E958415BF6AD710CD405E4A5E60499F4D2A3DE58BCFB2CB2E657E8578C48EED8184E01B7620609790AE700C2ED0B30E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2
Preview:	wOF2..............-d.................................4..B.`..j......J..f..6.$..H. .....V...8'EFm7i.p......2.6f.h-.2..S.Q.Rl..;F.B....JDo..{J.OnK..CI.........Gh.\....?wr..!"[b...T.,_....o...ad..q.#...L.1..AAd`.....V.7]....Jw/..Hw...`.~.Kk.mm!.m.%.B.J.>}.....<.l.++...N.............!FQ...!..9..Z..{{....I....r..z..m......=.9 ..NF...!X.y L.....Z%:d#.B..........UQOEE.D.c.}..S.,.@.........@....HQ.X.DI..dH.TH.tH.,......R.."#.T....(( ........ ..H...9.S..^s.5D.8n....P....Ko.....8xHX.....#....0~.m.D@qB.@1...1.. ...r.m..H. .eU..'.s4...)..(<.@.L."....-.e.......MB..A.\|...K...-.br.]5../{.#8..+....k......W(......x.....j.V3q.....g.oc...(.1...q....9....6DoX...c..R...tap.D.......ab....-.3.8.a.#...[2....$lS./W.,..x.3.1....,...[.DAIW!M...}.cG....J.....r.....J...,2. (.Xl[.u.6g..f..p .q..Mu..P.....)g@].^.6..f^........9.J4.Xva.^..0...0=8...8..=...P.t.S..-)..c.rP..0... %7.tg.b..g.......K.C..]!S.`.Q.....V(V.+..m.>...'...Uq".]....N..C/.~..!.....&......^(..v. .W.v/o..!..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	dropped
Size (bytes):	23298
Entropy (8bit):	5.429186219736739
Encrypted:	false
SSDEEP:	384:+BitNeB9HVPQmqySWyvbbb/XEm6k1JTM2qzhOF0bCjOgiQBH2f+wl9nyf0zHwx:+BiHeB9Hecebbb/PONOFnjOgPBHgSywx
MD5:	A5C41D7BA22E9CF451810802AE5AC2E8
SHA1:	858F35134A0BD7BAECB1B1A30EC3645642214554
SHA-256:	D29364A1E9EDE91152F2CB84962B73644741817C9C6A615C1FB70A885DD1CB8D
SHA-512:	DEA28AD362B51832D33CD9E936C0A255FA32C20DFFC6E806DA7AAF657D3490AF079C40FE21E10B2FDC971EB066E51ABDA182DEDC156759CCE06440E456FEB316
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xu.prototype.da=_.ca(40,function(){return _.tj(this,3)});_.cz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b};_.cz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.dz=function(){this.ka=!0;var a=_.xj(_.fk(_.Be("TSDtV",window),_.Cya),_.xu,1,_.sj())[0];if(a){var b={};for(var c=_.n(_.xj(a,_.Dya,2,_.sj())),d=c.next();!d.done;d=c.next()){d=d.value;var e=_.Lj(d,1).toString();switch(_.vj(d,_.yu)){case 3:b[e]=_.Jj(d,_.nj(d,_.yu,3));break;case 2:b[e]=_.Lj(d,_.nj(d,_.yu,2));break;case 4:b[e]=_.Mj(d,_.nj(d,_.yu,4));break;case 5:b[e]=_.Nj(d,_.nj(d,_.yu,5));break;case 6:b[e]=_.Rj(d,_.ff,6,_.yu);break;default:throw Error("jd`"+_.vj(d,_.yu));}}}else b={};this.ea=b;this.token=.a?a.da():null};_.dz.prototype.aa=function(a){if(!this.ka\|\|a.key in this.ea)a=a.ctor(this.ea[a.key]);else if(_.Be("nQyAE",window)){var b=_.Fya(a.flagName);if(b===null)a=a.de

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54331)
Category:	downloaded
Size (bytes):	1194227
Entropy (8bit):	5.710638479414009
Encrypted:	false
SSDEEP:	24576:FNjat9QpvNQkvl6Dd1gZL3fAJeA0OUoM4oXH49/Fi0ocL3a5nrXCY35Q0lzAfW9E:FNjat9QpvNQkvl6DgRfAJeA0OUoM/fXS
MD5:	543F28623C37255288B30792B5CA20EC
SHA1:	720654373C4C428CD2D33A6D13CE9DCC620942D9
SHA-256:	5A9A8DCE83C26B6DCD1531203D1B9E0C989CE83D6F6EB8F8C7C67CE9B8E097C4
SHA-512:	1DC5DF45EE7BEBD3E3F3365745F92E82561D7E194379138DCAAD0BA69347764D8A7C0E502A8882395F342AD329E4E20F2CB6ECB7AB28FCE9E0041DB7D4B3B8F8
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/95314?hl=en&ref_topic=7439637
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Set your homepage and startup page - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="You can customize Google Chrome to open any page for the homepage or startup page. These two pages aren.t the same unless you set them to be. Your startup page is the one that shows when you first" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/95314?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	downloaded
Size (bytes):	208050
Entropy (8bit):	5.527674696451517
Encrypted:	false
SSDEEP:	3072:HA2OL7g8WMo3NeigxLnrZyLXeE/s8vSz3gTSMzdGOCKqc6qmO+9maDhDWJPUBm1Z:ROL7Po3Ysjen8vP5GOCKaAGDWJPUBm1Z
MD5:	A2EF31B8E39640D0D3D29B306DEA5EF9
SHA1:	8844EA1F371F29F3AF0FE76AB743E048D828666E
SHA-256:	869D133DAD03DD71305565BF3D217CB4721E2B8030EAEBF84970A134A8FBEF6F
SHA-512:	AEA8983B67D88D34F469FF547AA37717230C49B07354C186762BAFCA7805002C92D2ECCD544240008797E4BE22B4CD016008273D5558D15CB74D1066138F5DB4
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.zh=(window.gapi\|\|{}).load;._.Lo=_.kf(_.vf,"rw",_.lf());.var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Lo[a];No(a)}};_.Oo=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Po=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Mo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.vf.oa){var k=d.id;if(k){f=(f=_.Lo[k])?f.state:void 0;if(f===1\|\|f===4)break a;No(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	dropped
Size (bytes):	9210
Entropy (8bit):	5.393248075042016
Encrypted:	false
SSDEEP:	192:t7mFYxV97I4Ia0U44rS3mt8IV7ydti6M5/1JlNg:t7vB7Il2t+dEF1JlNg
MD5:	2ED5BC88509286438B682EFF23518005
SHA1:	D5C8FD77BA3ED7F977A4AD0C85CF026D0F74F3E2
SHA-256:	F878D44B5CAC6BC95D638C13D0814C10E7D6CC145351ABA7945F53D8CB167979
SHA-512:	12F5415A482286C53631D09B5F50BA4AAA0957DB61904430E5B728777A15DC62428ED560847AB1DFEC459E302FB4D009D32CC1770EAD5425023CA48DF4640AA4
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.vNa=_.z("SD8Jgb",[]);._.GX=function(a,b){if(typeof b==="string")a.Nc(b);else if(b instanceof _.Ip&&b.ia&&b.ia===_.A)b=_.Za(b.Ku()),a.empty().append(b);else if(b instanceof _.Ua)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Wf");};_.HX=function(a){var b=_.Lo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Jo([_.Qk("span")]);_.Mo(b,"jsslot","");a.empty().append(b);return b};_.bMb=function(a){return a===null\|\|typeof a==="string"&&_.Ji(a)};._.k("SD8Jgb");._.MX=function(a){_.X.call(this,a.Fa);this.Va=a.controller.Va;this.od=a.controllers.od[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.oa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.J(_.MX,_.X);_.MX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.pv},header:{jsname:"tJHJj",ctor:_.pv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	downloaded
Size (bytes):	744317
Entropy (8bit):	5.79260992412225
Encrypted:	false
SSDEEP:	6144:G5bdWK/20rOQKKQtvqUGSGDdPSxdZqmguaH:4OeKGSpguA
MD5:	35B8F8659F1244A9A76E65FBFA108437
SHA1:	054BECFCE2029BACF5F654A67682E6226A7D28E5
SHA-256:	996648912EE557C6962A31F45B89850BD087469E566D5DDE0B26907650A8ED94
SHA-512:	5B4E42BCC73BCC1FE7ECF4C766F2E4E762EC150EEBB1208BEBD4E864E22F3E788A68A2007E3EC75078B3B88B6AD852D03BCE13BB6A52D951DAF555BACFBB4A18
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlEhnX95ggBUQXbahey0vezQKO9ccg/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x2860c1e4, 0x20c6d860, 0x39e13c40, 0x14501e80, 0xe420, 0x20, 0x18000000, 0x1d000003, 0xc, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Na,Ta,gaa,iaa,jb,qaa,waa,Caa,Haa,Kaa,Jb,Laa,Ob,Qb,Rb,Maa,Naa,Sb,Oaa,Paa,Qaa,Yb,Vaa,Xaa,ec,fc,gc,bba,cba,gba,jba,lba,mba,qba,tba,nba,sba,rba,pba,oba,uba,yba,Cba,Dba,Aba,Hc,Ic,Gba,Iba,Mba,Nba,Oba,Pba,Lba,Qba,Sba,dd,Uba,Vba,Xba,Zba,Yba,aca,bca,cca,dca,fca,eca,hca,ica,jca,kca,nca

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (553)
Category:	dropped
Size (bytes):	744317
Entropy (8bit):	5.79260992412225
Encrypted:	false
SSDEEP:	6144:G5bdWK/20rOQKKQtvqUGSGDdPSxdZqmguaH:4OeKGSpguA
MD5:	35B8F8659F1244A9A76E65FBFA108437
SHA1:	054BECFCE2029BACF5F654A67682E6226A7D28E5
SHA-256:	996648912EE557C6962A31F45B89850BD087469E566D5DDE0B26907650A8ED94
SHA-512:	5B4E42BCC73BCC1FE7ECF4C766F2E4E762EC150EEBB1208BEBD4E864E22F3E788A68A2007E3EC75078B3B88B6AD852D03BCE13BB6A52D951DAF555BACFBB4A18
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x2860c1e4, 0x20c6d860, 0x39e13c40, 0x14501e80, 0xe420, 0x20, 0x18000000, 0x1d000003, 0xc, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var baa,daa,Na,Ta,gaa,iaa,jb,qaa,waa,Caa,Haa,Kaa,Jb,Laa,Ob,Qb,Rb,Maa,Naa,Sb,Oaa,Paa,Qaa,Yb,Vaa,Xaa,ec,fc,gc,bba,cba,gba,jba,lba,mba,qba,tba,nba,sba,rba,pba,oba,uba,yba,Cba,Dba,Aba,Hc,Ic,Gba,Iba,Mba,Nba,Oba,Pba,Lba,Qba,Sba,dd,Uba,Vba,Xba,Zba,Yba,aca,bca,cca,dca,fca,eca,hca,ica,jca,kca,nca

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	dropped
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	downloaded
Size (bytes):	696771
Entropy (8bit):	5.594986131773961
Encrypted:	false
SSDEEP:	6144:TN3KfgnkxgOYoRvEoQvSXwojVlmGa/ZLdip7ZkvgTa5PB1+UO5Hx+B8U2+:TUMkxgOENagFxdigU+
MD5:	C2E7729AE263B2A05CC5280B068A8F96
SHA1:	B8E104DB04F93E3367BEB977D519E6B5CA3CB4FD
SHA-256:	3CCE1C4AD35E70377F248FFEF55CA237529CBC65DF6C184B7DA8E2D48093EC4C
SHA-512:	7965FEDDD6624B5D7A54F78AB9168D0CEB6F01621930FB80D9D53B8164D575EEA76927DA9EEB04CC8A0A3D337CFA23C3E67C32D0EC7A5138BB41E1963113D74C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,XVq9Qb,STuCOe,njlZCf,m9oV,vjKJJ,y5vRwf,iyZMqd,NTMZac,mzzZzc,rCcCxc,vvMGie,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,z0u0L,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,qPfo0c,cYShmd,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,WpP9Yc,lwddkf,gJzDyc,SpsfSb,aC1iue,tUnxGc,aW3pY,ZakeSe,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,MY7mZe,xBaz7b,GwYlN,eVCnO,EIOG1e,LDQI"
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (681)
Category:	downloaded
Size (bytes):	4066
Entropy (8bit):	5.369564168658135
Encrypted:	false
SSDEEP:	96:G6mTOIiY1medWRQrf7VF6vtDgXJyA7oxcoT4w:3mTOImedWOVF6vtUJyA8xJt
MD5:	4D3D9750CA5EB8A7D20993397BC5A6B8
SHA1:	DDB05A2C8AB1FD4537EEB2433BDF507CEE8CB8D2
SHA-256:	FCD1C642992A0BAF9038B3710DA080282AF0C80C113E1CE8F984F8143A2B2B32
SHA-512:	482DD926971FACA341058B35D333CEF64EAC460FC29B0B17AF5CD515253BCE973BBCAABADE3C4D125E07DE3BC75DE52059D5B229C44C5F95A30B845651EF64CA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.vg(_.bqa);._.k("sOXFj");.var wu=function(a){_.W.call(this,a.Fa)};_.J(wu,_.W);wu.Ba=_.W.Ba;wu.prototype.aa=function(a){return a()};_.qu(_.aqa,wu);._.l();._.k("oGtAuc");._.Bya=new _.pf(_.bqa);._.l();._.k("q0xTif");.var vza=function(a){var b=function(d){_.Zn(d)&&(_.Zn(d).Lc=null,_.Gu(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},Su=function(a){_.nt.call(this,a.Fa);this.Qa=this.dom=null;if(this.rl()){var b=_.Cm(this.Wg(),[_.Hm,_.Gm]);b=_.pi([b[_.Hm],b[_.Gm]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.ku(this,b)}this.Ra=a.lm.Dea};_.J(Su,_.nt);Su.Ba=function(){return{lm:{Dea:function(a){return _.Ue(a)}}}};Su.prototype.Bp=function(a){return this.Ra.Bp(a)};.Su.prototype.getData=function(a){return this.Ra.getData(a)};Su.prototype.uo=function(){_.Nt(this.d

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1495
Entropy (8bit):	7.805540701547832
Encrypted:	false
SSDEEP:	24:eSsgtr0PJdUBfYQu2zJqpGxNhYWmkcnJ/SJKk6fpEBVtjS:mPTUSpYJ2GfZ+9rZBItS
MD5:	77EED678795C902617CF40F681DD3DE5
SHA1:	3F82E4EA45C4351C0C1CAA583FBD79405F54FA29
SHA-256:	9D0BEE65FF59D8CDECA5DF9E472112B5C12BB9A6509FDD4CFEC5F637A23AB167
SHA-512:	87E1489734B42295781C94D2661CAF00026CDD02DC927797A888124333866FB2FF8F06C4F3FB17CBADC19E62E23EFA113377CD10A1125658441C0B762620B874
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/EhnJKCYnCpUVMQvn9LxVpGRY4fJAjUYOfZGt
Preview:	.PNG........IHDR...$...$.............pHYs...%...%.IR$.....sRGB.........gAMA......a....lIDATx..X_L.E.....3..5m)W."....BMA.^4..M..x....<..............M.M..&.T9ci}@8RmH.k.&..As@..q........rV._2..ov~..7.ov.{..9..mw..n.U........Q...j_..r........-......\|N...C.f.Y".mow.....F...1[6...G;..aq.B.pCCguM..&..d..C...b....r.J.!.X....L[....Qp......Ls4.........B....K.uW'.M..8u.....ws..~Sj..Z.z..[.h..T=R....R....W......&....(+.j.s:....).h....m.LYi.....j.....x..N".r.....I..i..f..z. .....)9(M.Z.c....mEN..R.E...\...PH....:..?:f.z.YiR..\|t..j..._.D...<C.........O}...{w$..1D,.Z...>..O. s.&h9...n...0.....F0<.......6.I..V.if.HE1H.............0...d.ML.Vfq.q8.f......`C.pna.3w...S"...c..!2.k......%9e...m3*.p....Q..Wy..s.i(\.A.(.X..`....ip..a..v.{..)...9..d!....(....z?...o...M^.....Y..............dP........E.(!(...s..k0.....h...VV...e..A..8...]:.B...$!.m)............NkOm.. ....)..q.QBL... .~....}.....m%.P.n.E......\eQ..V......Ul.......Q..d.F".+-....

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54423)
Category:	downloaded
Size (bytes):	1189110
Entropy (8bit):	5.709811756255663
Encrypted:	false
SSDEEP:	24576:aKKat9QpuNQkvl6Gu1gZL3fAJeA0OUoMae9Hzo3qmi0ocL3a5nrXN3ZHQ0lzAlWs:aKKat9QpuNQkvl6GDRfAJeA0OUoMrfXe
MD5:	71EB179856D9A5D2091DB4A1D4A28555
SHA1:	9F33EE597E58CB0C09F770EEF3FCC5C946B89C1B
SHA-256:	D761FBEF58F8D538D6904A9A0595BA8CC586605C3136F4BFB2D5894A0913BF30
SHA-512:	30862E6AD0FCB7E8E3EEC4FABB3B9655322555912DF053586749131DDE689093F9C585B3D32F7AA61B56C6DDD12E4C32E39EBDF170FBF14CB035CA715613A6EB
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/95464
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse in Incognito mode - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="You can browse the web more privately in Incognito mode. On your computer, open Chrome. At the top right, click More" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/95464?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	7.56865329157797
Encrypted:	false
SSDEEP:	12:6v/7WYs1eiaCWtFZNDfdWpGK9/N0eYkbIkZlcVwNkc:N7ei+PR1WAMN0eYWInVZc
MD5:	80F03F4B309056CDA71A7E6469BCCEE6
SHA1:	0108A567FF39D0B9E273F336C1D8AC7AE5F700B2
SHA-256:	1D80F0E2A49BA079AE22007AEB759A5903D45DDF1BC5A707BF129BE328F3CC5A
SHA-512:	111C8A794367FC6283EC3C64A4B1E9DE5D70E9324AEC0E461B4407BCF9F563F0A4FCED4FDFA2826D9299B8851B08B44AD244E53FC36AF4D304815348FAC93E04
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ijcidTpqWgtkjN0azDJbXnh5I2b83D65HHi2N7SqGXCXYM4-MYEcCCibdKBGNKTiug=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH..Mk.Q.......:-&Y.n...ih..P.U.&...,.B.F...<....(...n.qeu...R.tk...j7......V....L.I].=..{.9...8..j.-,.$.leF...0qf.T7H....^3.M,.......PfP.......2.8VG..p.Y3HN..L..Q..dR....#.C.kw.G....W#H..3b.z$Z..8...v....[x'[..g...Y.7.:......#+0..ge30F....;h`.'..L...v..\.h.2..e.S.^.qN.}Z.Q....5..W.e`... .E...^OKs.O.."...).F.#..29... B.~.Y.......gD..@oxEv...$.....>.%..=....k.ajl.....&J.....-Q..F.->...T;u'.@6...v.0.r...>."..L.O.......m.....^...~..iW.c..w.$!.<`;]....9B.y..@.=<%.kkp..4El.43....\W.I.o..-].)6G9C+.pRg.+W..._.d.y..W.....IEND.B`.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1495
Entropy (8bit):	7.805540701547832
Encrypted:	false
SSDEEP:	24:eSsgtr0PJdUBfYQu2zJqpGxNhYWmkcnJ/SJKk6fpEBVtjS:mPTUSpYJ2GfZ+9rZBItS
MD5:	77EED678795C902617CF40F681DD3DE5
SHA1:	3F82E4EA45C4351C0C1CAA583FBD79405F54FA29
SHA-256:	9D0BEE65FF59D8CDECA5DF9E472112B5C12BB9A6509FDD4CFEC5F637A23AB167
SHA-512:	87E1489734B42295781C94D2661CAF00026CDD02DC927797A888124333866FB2FF8F06C4F3FB17CBADC19E62E23EFA113377CD10A1125658441C0B762620B874
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.............pHYs...%...%.IR$.....sRGB.........gAMA......a....lIDATx..X_L.E.....3..5m)W."....BMA.^4..M..x....<..............M.M..&.T9ci}@8RmH.k.&..As@..q........rV._2..ov~..7.ov.{..9..mw..n.U........Q...j_..r........-......\|N...C.f.Y".mow.....F...1[6...G;..aq.B.pCCguM..&..d..C...b....r.J.!.X....L[....Qp......Ls4.........B....K.uW'.M..8u.....ws..~Sj..Z.z..[.h..T=R....R....W......&....(+.j.s:....).h....m.LYi.....j.....x..N".r.....I..i..f..z. .....)9(M.Z.c....mEN..R.E...\...PH....:..?:f.z.YiR..\|t..j..._.D...<C.........O}...{w$..1D,.Z...>..O. s.&h9...n...0.....F0<.......6.I..V.if.HE1H.............0...d.ML.Vfq.q8.f......`C.pna.3w...S"...c..!2.k......%9e...m3*.p....Q..Wy..s.i(\.A.(.X..`....ip..a..v.{..)...9..d!....(....z?...o...M^.....Y..............dP........E.(!(...s..k0.....h...VV...e..A..8...]:.B...$!.m)............NkOm.. ....)..q.QBL... .~....}.....m%.P.n.E......\eQ..V......Ul.......Q..d.F".+-....

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	5.336991931003171
Encrypted:	false
SSDEEP:	3:yionv//thPlT/XtNsyxdxFxk+baSkpkl/2up:6v/lhPXNB9FxkkJeup
MD5:	114E0F27AB7C461224303644FA3EB89D
SHA1:	5504053F373E6496680125CB2D4A8A9F437968B8
SHA-256:	E3CA966E54B53DD010FF2DC0023813647AC9DA72774192E2937BF906AD1139E3
SHA-512:	A3A186FD9BFCE07D3B5979DC8AAF4917595993F7D3B52DFF7355CBCFC26AAFEA3FDE958BD186D5D0ECB18595F68F398B64E21F291A1C052573521768957209AD
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/E2q6Vj9j60Dw0Z6NZFEx5vSB9yoZJp7C8suuvQXVA_2weMCXstGD7JEvNrzX3wuQrPtL=w36-h36
Preview:	.PNG........IHDR.............J~.s...(IDATx.c.....9.......?.>.......FCi4..)..?.:....<....IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.664959056860514
Encrypted:	false
SSDEEP:	3:HniCnmzth+2K2mCGUpYk1G94kn:BmB3tYP
MD5:	A83BBFA2EE366E0DDD852BF6285A337E
SHA1:	98039160B0267199D10E4FE77546283DD2417187
SHA-256:	FF80EB8EC06E1ED5A6D0A0592CF148409DEC1594F9C6AAF0C4B8AEAEB0C86147
SHA-512:	79666D1140B8C1F0C46B834BE3BD937CAEFAC82E14FE380068F6769770414EC576AA2106A4B32CF329698C30164DCAA9D5378A1DF1300D3E5C9CEA7F7D3115F1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoSCgcNlJCS+hoACgcNaUhHRxoA

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	downloaded
Size (bytes):	122495
Entropy (8bit):	5.474178038108451
Encrypted:	false
SSDEEP:	1536:KAIcfKjbgtJUz66xnuZOinr6vt1Xh9qEbxtxkdvv/58t9NXyjmxK/Ve2Ew6SwUtg:PIyKynnmvzXptxsn5Ew6SwUjW8o
MD5:	67A9D1759AC090A6DA57E7E74EC2C9E3
SHA1:	514744B4E09AF96AD6A78D3548E9D8DC952EDD9B
SHA-256:	1645C6965B96EE7AC8A1A1E1CD499855CC599C7240408E8DCE9D769B90CE1523
SHA-512:	91625199E500BA0791C7AA81DD9D7AE542E78799E7D10BB873AEFB10B1F3CADE2E54B58C053B4656392353A83C7731C6750AC001046BBF17A63A67FDC78BE85A
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5693)
Category:	dropped
Size (bytes):	696771
Entropy (8bit):	5.594986131773961
Encrypted:	false
SSDEEP:	6144:TN3KfgnkxgOYoRvEoQvSXwojVlmGa/ZLdip7ZkvgTa5PB1+UO5Hx+B8U2+:TUMkxgOENagFxdigU+
MD5:	C2E7729AE263B2A05CC5280B068A8F96
SHA1:	B8E104DB04F93E3367BEB977D519E6B5CA3CB4FD
SHA-256:	3CCE1C4AD35E70377F248FFEF55CA237529CBC65DF6C184B7DA8E2D48093EC4C
SHA-512:	7965FEDDD6624B5D7A54F78AB9168D0CEB6F01621930FB80D9D53B8164D575EEA76927DA9EEB04CC8A0A3D337CFA23C3E67C32D0EC7A5138BB41E1963113D74C
Malicious:	false
Reputation:	low
Preview:	"use strict";_F_installCss(".r4WGQb{position:relative}.Dl08I>:first-child{margin-top:0}.Dl08I>:last-child{margin-bottom:0}.IzwVE{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-family:\"Google Sans\",roboto,\"Noto Sans Myanmar UI\",arial,sans-serif;font-size:1.25rem;font-weight:400;letter-spacing:0rem;line-height:1.2}.l5PPKe{color:#1f1f1f;color:var(--gm3-sys-color-on-surface,#1f1f1f);font-size:1rem}.l5PPKe .dMNVAe{margin:0;padding:0}.l5PPKe>:first-child{margin-top:0;padding-top:0}.l5PPKe>:last-child{margin-bottom:0;padding-bottom:0}.Dl08I{margin:0;padding:0;position:relative}.Dl08I>.SmR8:only-child{padding-top:1px}.Dl08I>.SmR8:only-child::before{top:0}.Dl08I>.SmR8:not(first-child){padding-bottom:1px}.Dl08I>.SmR8::after{bottom:0}.Dl08I>.SmR8:only-child::before,.Dl08I>.SmR8::after{border-bottom:1px solid #c4c7c5;border-bottom:1px solid var(--gm3-sys-color-outline-variant,#c4c7c5);content:\"\";height:0;left:0;position:absolute;width:100%}.aZvCDf{margin-top:8px;margin-left

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	9210
Entropy (8bit):	5.393248075042016
Encrypted:	false
SSDEEP:	192:t7mFYxV97I4Ia0U44rS3mt8IV7ydti6M5/1JlNg:t7vB7Il2t+dEF1JlNg
MD5:	2ED5BC88509286438B682EFF23518005
SHA1:	D5C8FD77BA3ED7F977A4AD0C85CF026D0F74F3E2
SHA-256:	F878D44B5CAC6BC95D638C13D0814C10E7D6CC145351ABA7945F53D8CB167979
SHA-512:	12F5415A482286C53631D09B5F50BA4AAA0957DB61904430E5B728777A15DC62428ED560847AB1DFEC459E302FB4D009D32CC1770EAD5425023CA48DF4640AA4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=AvtSve,CMcBD,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,cYShmd,eVCnO,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,qPfo0c,qmdT9,rCcCxc,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.vNa=_.z("SD8Jgb",[]);._.GX=function(a,b){if(typeof b==="string")a.Nc(b);else if(b instanceof _.Ip&&b.ia&&b.ia===_.A)b=_.Za(b.Ku()),a.empty().append(b);else if(b instanceof _.Ua)b=_.Za(b),a.empty().append(b);else if(b instanceof Node)a.empty().append(b);else throw Error("Wf");};_.HX=function(a){var b=_.Lo(a,"[jsslot]");if(b.size()>0)return b;b=new _.Jo([_.Qk("span")]);_.Mo(b,"jsslot","");a.empty().append(b);return b};_.bMb=function(a){return a===null\|\|typeof a==="string"&&_.Ji(a)};._.k("SD8Jgb");._.MX=function(a){_.X.call(this,a.Fa);this.Va=a.controller.Va;this.od=a.controllers.od[0]\|\|null;this.header=a.controller.header;this.nav=a.controller.nav;var b;(b=this.oa().find("button:not([type])").el())==null\|\|b.setAttribute("type","button")};_.J(_.MX,_.X);_.MX.Ba=function(){return{controller:{Va:{jsname:"n7vHCb",ctor:_.pv},header:{jsname:"tJHJj",ctor:_.pv},nav:{jsname:"DH6Rkf",ct

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2447)
Category:	dropped
Size (bytes):	301933
Entropy (8bit):	5.737884618912723
Encrypted:	false
SSDEEP:	3072:e++ZO/z4F3z0SS42kNW0OYmPo7gk8/JLDsmvO/yalRHASRUdDEO0t/mVmElBZS9w:e++ZO/cKdvzIsolt/mVzlBZquqS
MD5:	A7B34DE69E9C13F7C79A805678E91E31
SHA1:	C9DC1D1C1A2B672D3854995FEE4A690C4C289E86
SHA-256:	1AEE00198B0BC25B0B82A04B934B397F82EFA10DE3A878966851D1BC9A6BEE66
SHA-512:	E74AF359CAA6A634405B3022A328AF5143A3C711FBE93E71F45CED0911DA914F78D93A28716698EB46FE985A6CAF339A1ACA473C6EFDABEE166C4932887F4DBA
Malicious:	false
Reputation:	low
Preview:	var HaTS_a,HaTS_aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},HaTS_ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},HaTS_ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},HaTS_b=HaTS_ca(this),HaTS_c=function(a,b){if(b)a:{var c=HaTS_b;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&HaTS_ba(c,a,{configurable:!0,writable:!0,value:b})}};.HaTS_c("Symbol",function(a){if(a)return a;var b=function(f,g){this.ng=f;HaTS_ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.ng};var c="jscomp_symbol_"+(

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	downloaded
Size (bytes):	126135
Entropy (8bit):	5.498654960721984
Encrypted:	false
SSDEEP:	3072:AkyvF6US20FCdrgVr3dfPeIofdhIUsTx0wVnX9Mb:AkygUS29rWPeIofdCVnX9Mb
MD5:	C299A572DF117831926BC3A0A25BA255
SHA1:	673F2AC4C7A41AB95FB14E2687666E81BC731E95
SHA-256:	F847294692483E4B7666C0F98CBE2BD03B86AE27B721CAE332FEB26223DDE9FC
SHA-512:	B418A87A350DBC0DEF9FAF3BE4B910CB21AE6FFFC6749EECEA486E3EB603F5AF92F70B936C3D440009482EDE572EE9736422CF89DCDD2B758DFA829216049179
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3817)
Category:	dropped
Size (bytes):	122495
Entropy (8bit):	5.474178038108451
Encrypted:	false
SSDEEP:	1536:KAIcfKjbgtJUz66xnuZOinr6vt1Xh9qEbxtxkdvv/58t9NXyjmxK/Ve2Ew6SwUtg:PIyKynnmvzXptxsn5Ew6SwUjW8o
MD5:	67A9D1759AC090A6DA57E7E74EC2C9E3
SHA1:	514744B4E09AF96AD6A78D3548E9D8DC952EDD9B
SHA-256:	1645C6965B96EE7AC8A1A1E1CD499855CC599C7240408E8DCE9D769B90CE1523
SHA-512:	91625199E500BA0791C7AA81DD9D7AE542E78799E7D10BB873AEFB10B1F3CADE2E54B58C053B4656392353A83C7731C6750AC001046BBF17A63A67FDC78BE85A
Malicious:	false
Reputation:	low
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},t=ca(this),v=function(a,b){if(b)a:{var c=t;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.v("Symbol",function(a){if(a)return a;var b=function(g,f){this.$jscomp$symbol$id_=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.$jscomp$symbol$id_};var c="jscomp_symbol_"+(Math.random

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8232, version 1.0
Category:	downloaded
Size (bytes):	8232
Entropy (8bit):	7.970977891824873
Encrypted:	false
SSDEEP:	192:M+IfXuoEfn8duoxJzlW4ANhYkck2pyrtGLBTeK3Ei6eLLO:M+cPg7/h2poEBTeKU4O
MD5:	11C1994DAED4419F53EA81BFA9D131E4
SHA1:	E61AED6167B0B196B9534B6B2B2A3252A283FD3B
SHA-256:	74BA235EBCCF81EF6B13BED997897CD6329DF2A19B9C0BC90AA2D5EC26E3036C
SHA-512:	2B6B5AE24A2CE29B2919D5663724D96936176506B11C72BE3EFEA7D8D54E4BBE3CC7EEAAF581F043E580889F406DB1784C9BA94051EB45E7302960386AB7A95E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2
Preview:	wOF2...... (......N...............................0..@..H.`..H....8....X..6.$..,. .....E...pD%.m. p.@.~vGp42......(..o.t....9.@.$..so...06..:...v..h.(....X.2.^......5. A...).q....?....n...Ify...\|g...2.MvHvS..i.$.,...m.> ..`$`...* .!.Fa4...io.X...].[_t/...w..d..N\|?..Ia.E....M......L.'..je.Y{I...9.P..V.w.....[..Gr:.K....+...Wu.....)..4......;....#..X....@Zm.=..n......5I\|.q..bA....G.G.....?.)......(..p.N.?.g...)Li:)....q....Ct.]........X.\}.....l..m\2...?....R...$....n../sB....OV.{'.Z..J..0.}.QK.C..-5..^.O...l.V.L...k\|.z...w..d..W.K=\..t...G2RL.}....F.....0. ...!R.Cd)...@.. ...j:..#.......T...h.....1l..o."`.b...y.%. v..q....N.B @k..I.....v.<...v...!.Hm_'D...;.@.......i...T.QF._...\|U6.^..F .~..;e3...bA........H..L...N..&......<.....8..q(VbG,.t..P..}H{.&\uK......?8..f."=.#."b3.G......o\|&..J...^.u...=.n. ....c...nH\(" !......Z.....Z09.D<x.@.#. .h.."${.2......@.).....F.9.o0..........,.>x....%.`+.a7......!.C....Pb.....cy.5..:j&mS.R.I.%[..\y..10....

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1885)
Category:	dropped
Size (bytes):	82296
Entropy (8bit):	5.592663724925133
Encrypted:	false
SSDEEP:	1536:brcg844kyv9f9wzJz6uKBLpLON1B5q0VOrGzIF7:AkyvFpLOHqmO2E7
MD5:	E08FA1D1755C4F8570B123C010325195
SHA1:	C496DDD8CBC293564E5FDF2D987833332F554660
SHA-256:	73C96E90B9C6A8E44AA7FA57F5A84A765AB2D1452E11B7B41882F2056B4BC393
SHA-512:	369B54AB94A768D44216962936D3DD948EAA688488D9C279FFCEEC2A2CBD4243FEFB2EADABB6C9D53243C3803EFBB5DC7E234CFC17EC5A9CA549AD4DE4141700
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);.var ba,fa,ha,na,oa,sa,ua,wa;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};fa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=ha(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&fa(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)r

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.271783084011668
Encrypted:	false
SSDEEP:	48:o726BiFP89yAxKz1TtMxII+eXww7D2bc+rw:oyMyAAz1WNd8vw
MD5:	45EA91A811A594F81B7F760DD14BE237
SHA1:	2C97782C6D5D0BCFB3676FF24AA1008251090DAE
SHA-256:	7488FF4710E7592F66BE1FAC090F73CB8F1D2D0794B57DEAC1798C5B309EE76F
SHA-512:	4F79A36857D5A8AF1E2F938EF92EA75C384DE4789972B068BE82EADAA442C538A65035CCE8665A7283137E2075B8FE4C1C9E7B2A36585491683B4869005B772A
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.vg(_.Ila);_.iA=function(a){_.W.call(this,a.Fa);this.aa=a.Xa.cache};_.J(_.iA,_.W);_.iA.Ba=function(){return{Xa:{cache:_.gt}}};_.iA.prototype.execute=function(a){_.Bb(a,function(b){var c;_.$e(b)&&(c=b.eb.kc(b.kb));c&&this.aa.LG(c)},this);return{}};_.qu(_.Ola,_.iA);._.l();._.k("ZDZcre");.var jH=function(a){_.W.call(this,a.Fa);this.Xl=a.Ea.Xl;this.j4=a.Ea.metadata;this.aa=a.Ea.wt};_.J(jH,_.W);jH.Ba=function(){return{Ea:{Xl:_.OG,metadata:_.b_a,wt:_.LG}}};jH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Bb(a,function(c){var d=b.j4.getType(c.Od())===2?b.Xl.Rb(c):b.Xl.fetch(c);return _.Bl(c,_.PG)?d.then(function(e){return _.Dd(e)}):d},this)};_.qu(_.Tla,jH);._.l();._.k("K5nYTd");._.a_a=new _.pf(_.Pla);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var RG=function(a){_.W.call(this,a.Fa);this.aa=a.Ea.yQ};_.J(RG,_.W);RG.Ba=func

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.875266466142591
Encrypted:	false
SSDEEP:	3:DZFJu0+WVTBCq2Bjdw2KsJJuYHSKnZ:lFJuuVTBudw29nu4SKZ
MD5:	87B6333E98B7620EA1FF98D1A837A39E
SHA1:	105DE6815B0885357DE1414BFC0D77FCC9E924EF
SHA-256:	DCD3C133C5C40BECD4100BBE6EDAE84C9735E778E4234A5E8395C56FF8A733BA
SHA-512:	867D7943D813685FAA76394E53199750C55817E836FD19C933F74D11E9657CE66719A6D6B2E39EE1DE62358BCE364E38A55F4E138DF92337DE6985DDCD5D0994
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	Cj0KBw0ZARP6GgAKKQ3oIX6GGgQISxgCKhwIClIYCg5AIS4jJF8qLSY/Ky8lLBABGP////8PCgcN05ioBxoA

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	downloaded
Size (bytes):	32503
Entropy (8bit):	5.378470744333275
Encrypted:	false
SSDEEP:	768:OnTTScxIXeijt4aRZf4AEqTzQh2HIVVcYTVf79pew6cVEkAXtuWsmsG:iA4w4A4h2HIVVcMVf72QA9jOG
MD5:	4B57F7BBD8FC87404F78F523644DF13F
SHA1:	D6457E0A338060E3C1EF4E848DBE572BFA9E8D03
SHA-256:	F5008D381E89701B186FD210E1B5368E2526711DE011A336B5923F56954A69F7
SHA-512:	54381495CE18ED489BCB5740B90BCCAE0003D057443FC4AAB099BE1EF5915268EF59D74DF15130145F7FB43CD7F89B9953A88A0CEE4DCF191EFEB773A369BA6A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Cua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.gp("//www.google.com/images/cleardot.gif");_.rp(c)}this.ka=c};_.h=Cua.prototype;_.h.Zc=null;_.h.rZ=1E4;_.h.jA=!1;_.h.sQ=0;_.h.JJ=null;_.h.gV=null;_.h.setTimeout=function(a){this.rZ=a};_.h.start=function(){if(this.jA)throw Error("dc");this.jA=!0;this.sQ=0;Dua(this)};_.h.stop=function(){Eua(this);this.jA=!1};.var Dua=function(a){a.sQ++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.om((0,_.bg)(a.hH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.bg)(a.Kja,a),a.aa.onerror=(0,_.bg)(a.Jja,a),a.aa.onabort=(0,_.bg)(a.Ija,a),a.JJ=_.om(a.Lja,a.rZ,a),a.aa.src=String(a.ka))};_.h=Cua.prototype;_.h.Kja=function(){this.hH(!0)};_.h.Jja=function(){this.hH(!1)};_.h.Ija=function(){this.hH(!1)};_.h.Lja=function(){this.hH(!1)};._.h.hH=function(a){Eua(this);a?(this.jA=!1,this.da.call(this.ea,!0)):this.sQ<=0?Dua(this):(this.jA=!1,

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486176
Encrypted:	false
SSDEEP:	3:D9inuS3Ehn:D99S3En
MD5:	107BF651FDD1A7EF726FC43FCAF8D760
SHA1:	0EAA8D77E711E35D087260CB1941D13108FD9BEF
SHA-256:	0EF957DD18374BD7D939D7F427C6D76139F6557A9D517E5712C1FA253E5634C4
SHA-512:	C2E1A476727C0EEC3D5C18381F7CA0C9FC7825B89A26F53A2CBE1620D6A6AD782C47E0B7074F0DA25695F1EE5AA28428F2091125029799D4581CDF2715538B1B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	ChIKBw2UkJL6GgAKBw1pSEdHGgA=

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53662), with no line terminators
Category:	downloaded
Size (bytes):	53662
Entropy (8bit):	5.038809295005517
Encrypted:	false
SSDEEP:	768:oxtpkxt4xtNZoLNlSa2b+GeVrQ+8eOx+pv2mkFG:oxtpkxt4xtSNrQ1eOx+pv28
MD5:	8FADD7500A0408B2CF6AF9D13CACD5D9
SHA1:	EC12FC5D53F047F8A1428F2A7A418CC3938ACF51
SHA-256:	708F36DBC1EF3609A2CA6035525635B86F106DAB474C1A5CE587560547705782
SHA-512:	FAC8098B8CBE50C97E09F3FDCA0CE0BFB2557C0E219EEB745A6920F32841601A2C642E36C3DFEADB05178D70F6E51DAFAF836164DCFA3AB334342E4F7AFBCE7D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/survey_light_ltr.css
Preview:	.scSharedMaterialbordercontainer{letter-spacing:.00625em;font-family:"Google Sans Text",Roboto,Arial,sans-serif;font-size:1rem;font-weight:400;line-height:1.5rem;-webkit-box-sizing:border-box;box-sizing:border-box;display:-webkit-box;display:-webkit-flex;display:-webkit-box;display:-webkit-flex;display:flex;height:100%;left:0;min-height:3.5rem;pointer-events:none;position:absolute;right:0;top:0;width:100%}.scSharedMaterialbordercontainer-dense{min-height:3rem}.scSharedMaterialborderfilled{background:#e3e3e3;border-bottom:1px solid #444746;-webkit-border-radius:4px 4px 0 0;border-radius:4px 4px 0 0}.scSharedMaterialborderfilled-focused{border-bottom:0}.scSharedMaterialborderfilled-error{border-bottom-color:#8c1d18}.scSharedMaterialborderfilled-bottom{background-color:#0b57d0;bottom:0;height:.125rem;left:0;opacity:0;position:absolute;-webkit-transform:matrix(0,0,0,1,0,0);-webkit-transform:matrix(0,0,0,1,0,0);transform:matrix(0,0,0,1,0,0);-webkit-transform-origin:130px 1px;-webkit-transfo

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	792
Entropy (8bit):	7.642704506233666
Encrypted:	false
SSDEEP:	24:VYCc25934kGef0S/yvIaL/8Q4HBy9vdek:VHcOePQ0dL/EyYk
MD5:	089AD8854F62CA8726D4129B81310E8F
SHA1:	ABF76DF8618639A4AB1EE2B3D12BAA01BDF507B0
SHA-256:	CC23E907B15D21B0C59B7F18D5444C2A777F58871306896533D7FC6283FC96AA
SHA-512:	E1F40A3908CF56379B0276D7F56CD3430548ED643A61FF9C8B27A866C5436CAD4AA6FE4F5012B591C61F3C8893D34905FDEDAB40A1A45AA58E697061E1EAD2F2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH....N.Q......A.4..G......<.DHdM.1>....@`-..E..'`!"...h$...tjg...t...0..z....;g.=...5.^P.z.$p!..G2.y......t....,2G.!.D.-gs.~+.`R6.!aV.@./...~..0.Wx......ra.....xqG.@V..-u..z.O<....g..J-....\|g......mT%.F..._..1..Q........z%..`R..0W...@....J?....g.l.6.q.`@.9.f.C....j....k.P:B..9...+Py.Es..m.h<."...F.3.[m...9..a..B.M".I..8l %.J/Dmc.B.~).P...f#vA.q...R...0k..U....`..00d..[...X.A....../Pd..P.8...wB....K..A!.C...M..[...$T.........P..=....w.}E..-....K.b...%...2e....".e..U.Q.Q...[T.)..s...cra__.....VG.;Q..[.F.q......p.p.8..6.>=.._1....?....h...u4.......;.6Zmp .W./F..+..-b......:..b.#...O..+P.b..c..../...-.%....61..o.$i..Y..X..Mc.:.b....[...mw...2@...9p....c...g.`....d.W..<.......".......IEND.B`.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w250
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (522)
Category:	downloaded
Size (bytes):	5050
Entropy (8bit):	5.30005628600801
Encrypted:	false
SSDEEP:	96:o75BuBxJfma7bGZABddEgf8nI4zLm4KGo8Vh1EabPVTq8fv/xRw:WHMmaX9r8Igp7nBlHo
MD5:	D9F15F1AEAF15673336FAA3507D1A2A7
SHA1:	FC79D00AF2E2D44FEBA701F12ECD4AFCA327F464
SHA-256:	AA3574ADCF3826390918BC2D5DCD88D7BC63238A6022DEF3487A67A731C30E7A
SHA-512:	D756961B6BFC478274E390B94D613BD837DA011D680FC6D67779A8E12C7F082EF977FC15D02C076F92BC1D2CE7EFDE48F82B4EC1BD12CF38AEDDAB1917E36041
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,iAskyc,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.oNa=_.z("wg1P6b",[_.XA,_.Fn,_.Nn]);._.k("wg1P6b");.var f6a;f6a=_.mh(["aria-"]);._.yJ=function(a){_.X.call(this,a.Fa);this.Ka=this.xa=this.aa=this.viewportElement=this.Na=null;this.Jc=a.Ea.ef;this.ab=a.Ea.focus;this.Fc=a.Ea.Fc;this.ea=this.Qi();a=-1*parseInt(_.Fo(this.Qi().el(),"marginTop")\|\|"0",10);var b=parseInt(_.Fo(this.Qi().el(),"marginBottom")\|\|"0",10);this.Ta={top:a,right:0,bottom:b,left:0};a=_.cf(this.getData("isMenuDynamic"),!1);b=_.cf(this.getData("isMenuHoisted"),!1);this.Ga=a?1:b?2:0;this.ka=!1;this.Ca=1;this.Ga!==1&&(this.aa=this.Sa("U0exHf").children().Wc(0),_.ku(this,.g6a(this,this.aa.el())));_.oF(this.oa())&&(a=this.oa().el(),b=this.we.bind(this),a.__soy_skip_handler=b)};_.J(_.yJ,_.X);_.yJ.Ba=function(){return{Ea:{ef:_.cF,focus:_.OE,Fc:_.uu}}};_.yJ.prototype.IF=function(a){var b=a.source;this.Na=b;var c;((c=a.data)==null?0:c.qz)?(a=a.data.qz,this.Ca=a==="MOUS

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	267347
Entropy (8bit):	5.56929521403068
Encrypted:	false
SSDEEP:	6144:NycIGKlqj9idMvO5QEDF2Dej7DsZFVVl2S/:kcwUj9iolB
MD5:	629527557862F775EB25EC4FC4BAECEB
SHA1:	112FE79DD77C3EE804960D13EDA1320CB93B892A
SHA-256:	10DF5A5CB71A531A6ECD47BD747AFFDDDECE08314CD9516865E2CF9D2346EBB3
SHA-512:	C1318CC49FC8402010F4A1D964B150D71488F0D9A0A6C76BD12E060FF7D4D2D6B865C531C3EBFE3834717890A32E603BBFC2E5AD397DC677F1BC17F91A3777A0
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	5.636521244861347
Encrypted:	false
SSDEEP:	3:yionv//thPl5ljjhiMMS8R/m5DsotL/uvlrq22g1p:6v/lhPZdwRe5DsG/uvl+Wp
MD5:	37DD4A0C4EBDDD1F95D8B09A356068A0
SHA1:	F559CD13D8AA2DDB63689C98FEC6044B1C356E41
SHA-256:	2EE94D2E255F58C5684196BE872CDBF2AB0B3C88A3BD5D6ACB7574992803A13D
SHA-512:	AE8A24C446048CB742C2D9A149BD7CBA4FFA065A3ADDB059559395AEA26B3478ACF70DA85AC782A79B40BD50A2665B9A86E1D20CA0963888F4295EA017BBA19F
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36
Preview:	.PNG........IHDR..............w=....CIDATx.c........dAii.\|Z...4.?.......d[2j.M-.....>jxEE........p..Q0..j.\.jOL.....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/5IedHXKVmgXlBYdRn7TlVJmLJbdas2tNrD44
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	dropped
Size (bytes):	1858
Entropy (8bit):	5.297658905867848
Encrypted:	false
SSDEEP:	48:o7vjoGL3AeFkphnpiu7cOyBfO/3d/rYrv3Zrw:ofrLxFuLdyp2AVw
MD5:	B42DB3D22B12B8E3BE1B82961FE2870E
SHA1:	D9CFD11C1C2DE17A7E9301F11AD875B610B96576
SHA-256:	75DC40A81CEACB57940F84D2B29E021974C3004B245CC7198362CA944E9C4058
SHA-512:	EC0708797586F8F85EC8A0BBECA707D73778D93C12986B92965D1828B254D39485926354AEC4D73474BC5755E392B813D8045B19369FAE23B30BBD12E17F7053
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.QZ=function(a){_.W.call(this,a.Fa);this.window=a.Ea.window.get();this.Mc=a.Ea.Mc};_.J(_.QZ,_.W);_.QZ.Ba=function(){return{Ea:{window:_.tu,Mc:_.HE}}};_.QZ.prototype.Po=function(){};_.QZ.prototype.addEncryptionRecoveryMethod=function(){};_.RZ=function(a){return(a==null?void 0:a.Jo)\|\|function(){}};_.SZ=function(a){return(a==null?void 0:a.r3)\|\|function(){}};_.VPb=function(a){return(a==null?void 0:a.Qp)\|\|function(){}};._.WPb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.XPb=function(a){setTimeout(function(){throw a;},0)};_.QZ.prototype.qO=function(){return!0};_.qu(_.Dn,_.QZ);._.l();._.k("ziXSP");.var j_=function(a){_.QZ.call(this,a.Fa)};_.J(j_,_.QZ);j_.Ba=_.QZ.Ba;j_.prototype.Po=function(a,b,c){var d;if((d=this.window.chrome)==nu

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1694)
Category:	dropped
Size (bytes):	32503
Entropy (8bit):	5.378470744333275
Encrypted:	false
SSDEEP:	768:OnTTScxIXeijt4aRZf4AEqTzQh2HIVVcYTVf79pew6cVEkAXtuWsmsG:iA4w4A4h2HIVVcMVf72QA9jOG
MD5:	4B57F7BBD8FC87404F78F523644DF13F
SHA1:	D6457E0A338060E3C1EF4E848DBE572BFA9E8D03
SHA-256:	F5008D381E89701B186FD210E1B5368E2526711DE011A336B5923F56954A69F7
SHA-512:	54381495CE18ED489BCB5740B90BCCAE0003D057443FC4AAB099BE1EF5915268EF59D74DF15130145F7FB43CD7F89B9953A88A0CEE4DCF191EFEB773A369BA6A
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{.var Cua=function(a,b){this.da=a;this.ea=b;if(!c){var c=new _.gp("//www.google.com/images/cleardot.gif");_.rp(c)}this.ka=c};_.h=Cua.prototype;_.h.Zc=null;_.h.rZ=1E4;_.h.jA=!1;_.h.sQ=0;_.h.JJ=null;_.h.gV=null;_.h.setTimeout=function(a){this.rZ=a};_.h.start=function(){if(this.jA)throw Error("dc");this.jA=!0;this.sQ=0;Dua(this)};_.h.stop=function(){Eua(this);this.jA=!1};.var Dua=function(a){a.sQ++;navigator!==null&&"onLine"in navigator&&!navigator.onLine?_.om((0,_.bg)(a.hH,a,!1),0):(a.aa=new Image,a.aa.onload=(0,_.bg)(a.Kja,a),a.aa.onerror=(0,_.bg)(a.Jja,a),a.aa.onabort=(0,_.bg)(a.Ija,a),a.JJ=_.om(a.Lja,a.rZ,a),a.aa.src=String(a.ka))};_.h=Cua.prototype;_.h.Kja=function(){this.hH(!0)};_.h.Jja=function(){this.hH(!1)};_.h.Ija=function(){this.hH(!1)};_.h.Lja=function(){this.hH(!1)};._.h.hH=function(a){Eua(this);a?(this.jA=!1,this.da.call(this.ea,!0)):this.sQ<=0?Dua(this):(this.jA=!1,

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/homepage_header_background_v2.svg
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4444, version 1.0
Category:	downloaded
Size (bytes):	4444
Entropy (8bit):	7.943236702796996
Encrypted:	false
SSDEEP:	96:sMbEnnGk3N4NvIF1VgJRrSIFiLt8L06PejMUD4Ghm4syPtGjO4:5bEn/N4NvAAjrXQZ8L06PejXD1PVGjt
MD5:	2AEF37096667EFB04AA7F0C1BEDA5366
SHA1:	5CDF7572F100940C6FC1A27E4C997BDB3B6C95B7
SHA-256:	00BBA6533EE69E05126BF0F9E8B81C2A2EFFF265E2B04786E9EC52613AE37C73
SHA-512:	2CF60175E4EAFDAFB65E343B8923081F92F410AC402C5B06956F288B11913F3861184E8156573D67F8D4079E5CBD864AE4339EC20BCF030C8B7B3946777B1DD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2
Preview:	wOF2.......\....../.................................. ....`.......,.;..8..6.$..B. .........D..x.8...u%.?%.1v..A5.).S.JU.m..j..Y^...n.............x.i.H.N..!X..H...^.4...h.v..x".$3i".5.Q5.H$J5..y~...}Ox.F?..``%J...p..+......~...h..{.{...."K..8..g.._...w..{.....U.B.....?..Gp"0.g...G.......n...U.z......?..nv!....{5..D..v$...$.._Z......E/....5..{..}0y.'....K...S.]......'....d_>a..).b...y.$\Y...u=............<e...7.0>...SD.....'.H.(.C2.@TJ!F6..\|H.&H..H.A.).........!..&MYl.......%(G.z.........k......."..F.~.wC.q>.._... i1A.^....Il...!v....bP.!.&...i...Wz)..GQ.\|..K...jp...%....'/....h..C.}wq&TS..C..........5..F.js....3....m..\|.`.K-m..zk..\]..m....XSNi%.......K..#.?...P....?a...g........L.}..~z...\|._.S................../.[q=...x..PC.... ......8.....)..?6.~..P...\|B.hJ....~C[.2B.....}.>..[..:.N8.j.!t..,@'..\J..{.IR$.ri..T..T....l.R.....Y.I.@f.g]......lL.DL.DTb".......{Ff .0{...c.M.t.e..J4.....#V..f..z. .*..`.....q..%.....;.."{E.....u.C..P.:.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
URL:	https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (468)
Category:	downloaded
Size (bytes):	1858
Entropy (8bit):	5.297658905867848
Encrypted:	false
SSDEEP:	48:o7vjoGL3AeFkphnpiu7cOyBfO/3d/rYrv3Zrw:ofrLxFuLdyp2AVw
MD5:	B42DB3D22B12B8E3BE1B82961FE2870E
SHA1:	D9CFD11C1C2DE17A7E9301F11AD875B610B96576
SHA-256:	75DC40A81CEACB57940F84D2B29E021974C3004B245CC7198362CA944E9C4058
SHA-512:	EC0708797586F8F85EC8A0BBECA707D73778D93C12986B92965D1828B254D39485926354AEC4D73474BC5755E392B813D8045B19369FAE23B30BBD12E17F7053
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZDZcre,ZZ4WUe,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.QZ=function(a){_.W.call(this,a.Fa);this.window=a.Ea.window.get();this.Mc=a.Ea.Mc};_.J(_.QZ,_.W);_.QZ.Ba=function(){return{Ea:{window:_.tu,Mc:_.HE}}};_.QZ.prototype.Po=function(){};_.QZ.prototype.addEncryptionRecoveryMethod=function(){};_.RZ=function(a){return(a==null?void 0:a.Jo)\|\|function(){}};_.SZ=function(a){return(a==null?void 0:a.r3)\|\|function(){}};_.VPb=function(a){return(a==null?void 0:a.Qp)\|\|function(){}};._.WPb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.XPb=function(a){setTimeout(function(){throw a;},0)};_.QZ.prototype.qO=function(){return!0};_.qu(_.Dn,_.QZ);._.l();._.k("ziXSP");.var j_=function(a){_.QZ.call(this,a.Fa)};_.J(j_,_.QZ);j_.Ba=_.QZ.Ba;j_.prototype.Po=function(a,b,c){var d;if((d=this.window.chrome)==nu

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3653
Entropy (8bit):	7.928890449325803
Encrypted:	false
SSDEEP:	96:5kxUHWOwsRWCbRykZguODi897DRqAi4+1RMF7XmJQMEw:5fjAARyG389DRqAif1GsCbw
MD5:	9C63745DD58E622C67B763C56B04E0EC
SHA1:	3DF427B09C21120DA55F6EF396BC19C3A567F76D
SHA-256:	CCB7B6FC6814D838946C52D17A82BB3E6B9AD2C9DB3D6207CEB17C34241BC4FC
SHA-512:	D905BECD98E97E8CF7C9F5FA94804AA1154AFAA9C34DD671494EDC1562A9DE44B2472EDB17F4BD855463B4C7CF3D67B9006D5D2923A4E6688212E62651963D20
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....IDATx^.k...u...v.s./..Co.....B..%..7.!...!\.....N.Pvl..@.R.I.V,.1...CLR6..!$!....g....$..v...G?..4....xvV.$...kzzf?....{.t....#}$.y....^....]7.8..<.m.K'l..gF....p.%.Am...N.....g.r.cmJ...........".G..<.>j...:.........s.I6...qDg.B."P@.X...R-./..........'...V...P..u.E..37k.]..7.Z..6....;J...T.A...9a..{>....pa6..ZV../.....2\......D.H8w.=..w3.....u.e.a.G./.C.T9....8..M..-..0....a....7..... .~...V"..........+..M.-r....]...s\.F../...D.Vl.....r7m.5.?9........M...'%W...^.\|.RE.........x..#b...}.x#.q'W.`#.h.C.\.........M..I.:.v...[E.h.25......!..k..\|X.Xy.II'....7V.l.YT-V.L...HI..4..?...j..I#.....m.^.....\|...H.P...?kK.lH.<r...{V..-X,!q...P=8.T....}......._@.9T.......O.........Bi_.J...c.>#T...cUl..tJf.._.......7.......,.B.X.(....O...h-..w..$S.O..o..\.h..?..\|..a.Y.j;.Voa...1.U.U...A....1F.Up..*...`.:.L.....b....?....E..d..`Q TET.@..I.OA.TAL..Z.....p../-...{......pG.....%kw0gk.#.CJ.5.F.1.. "8"...DF..G..J..Ij.Y4.9.d{

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54380)
Category:	downloaded
Size (bytes):	1186991
Entropy (8bit):	5.708006909162274
Encrypted:	false
SSDEEP:	24576:rspat9QpmNQkvl6eLYp1gZL3fAJeA0OUoM8E8HModq5i0ocL3a5crXaGIBQ0lzAE:rspat9QpmNQkvl6eLYMRfAJeA0OUoM8X
MD5:	9A10ACF266C0A10C3BDF8434516CBB35
SHA1:	41418BDC3633CC3611436D254D25F376EA2BD33E
SHA-256:	9233E0A531C82EB1A963CB077AEE0591C01C2CD6296DF6EABBA627C6FD9180B8
SHA-512:	CAD18A65B46FEFE990A9D91EC097081D239A242A5AC871A8B7D6663EC1A84734AFAE5C3BB7FA44DC057D42B58953A5A048D88D8512ED195D9413689B8CB493FB
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chromebook/answer/1057090
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Use a Chromebook as a guest - Chromebook Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="To use a Chromebook without signing in, you can browse as a guest. Guest mode is useful if you want to: Let someone borrow your Chromebook. Borrow someone else.s Chromebook. Use a shared or pu" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chromebook/answer/1057090?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+046

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1920 x 1080
Category:	dropped
Size (bytes):	6662978
Entropy (8bit):	7.958019049174792
Encrypted:	false
SSDEEP:	98304:vOtzAWupkd4f3qiFd74STXkQAW0ZwRy8gNxhFRfhdOReIgDgvVTiafAOZFMrj:GpA7ydWqyrp0uy8gLRqe1yi+ZFUj
MD5:	7F23B1A0498132624D50ADB2C7902239
SHA1:	0F7EB735C6EC74F004D9208531C281D49CB1FE9F
SHA-256:	93BC9E63A8F2725DCD5FA43414530EF566C878901618644621B948D0F7599460
SHA-512:	3CD26043223EAB955251CCA8032C7EAAAB9D68823C858D8C3EA35BAEC093FCFB29AE3DA2CC3A0E0F698D0E203AC47ED79C75DFA8BB47B77D51BE014203D00810
Malicious:	false
Reputation:	low
Preview:	GIF89a..8..........!..NETSCAPE2.0.....!..gif.ski.!.......,......8................................H........L..............L.....J.....j..........N....................(8HXhx..........)9IYiy..........:JZjz..........+;K[k{..........,<L\l\|..........-=M]m}...........>N^n~........../?O_o..........0......<.0....:\|.1...+Z..1....;z..2..$K.<.2..,[.\|.3..4k..3..<{...4..D..=.4..L.:}.5..T.Z..5..\.z..6..d.=.6..l.}.7..t...7..\|....8......>.8....;~.9...+[..9...;{..:...K.>.:...[.~.;...k..;...{...<.....?.<....;..=....[..=....{..>.....?.>.......?.......?.........`...H`....`....`..>.a..NHa..^.a..n.a..~.b.".Hb.&..b...b....c.2.Hc.6.c.:..c.>..d.B.Id.F..d.J..d.N>.e.RNIe.V^.e.Zn.e.^~.f.b.If.f..f.j..f.n..g.r.Ig.v.g.z..g.~..h...Jh....h....h..>.i..NJi..^.i..n.i..~.j...Jj....j....j....k...Jk...k....k....l...Kl....l.....l..>.m..NKm..^.m..n.m..~.n..Kn..n...n...o...Ko...o....o....p...Lp....p../.p..?.q..OLq.._.q..o.q....r.".Lr.&..r...r....s.2.Ls.6.s.:..s.>..t.B.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	616
Entropy (8bit):	5.009629159026319
Encrypted:	false
SSDEEP:	12:Uc11FPrZO6ZRoT6pHAcF3a8xRjzrZ6ZmOHc9n+5cMK00k14enEPCedG:3FtOYsKB3xxzYmOOk4TfenEPCD
MD5:	1868068BDC2622CF2C4C607102970B6A
SHA1:	B254679B639C5D7F26BA8662A70E5D7587333ECD
SHA-256:	354AA87B02FCDDFAFEE3DB7BA65775E92D271256B7CE8DF3C0BB43467EBA7B3F
SHA-512:	A6C2CB698F7CA900EB1132C876CA70A5933EA4F201F4C6621C8F357A3DD916C8F9A834631C38436BAF83137903704D349917D9EA25B179AEE90262769F44A85F
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons+Extended
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons Extended';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2) format('woff2');.}...material-icons-extended {. font-family: 'Material Icons Extended';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2907)
Category:	downloaded
Size (bytes):	23298
Entropy (8bit):	5.429186219736739
Encrypted:	false
SSDEEP:	384:+BitNeB9HVPQmqySWyvbbb/XEm6k1JTM2qzhOF0bCjOgiQBH2f+wl9nyf0zHwx:+BiHeB9Hecebbb/PONOFnjOgPBHgSywx
MD5:	A5C41D7BA22E9CF451810802AE5AC2E8
SHA1:	858F35134A0BD7BAECB1B1A30EC3645642214554
SHA-256:	D29364A1E9EDE91152F2CB84962B73644741817C9C6A615C1FB70A885DD1CB8D
SHA-512:	DEA28AD362B51832D33CD9E936C0A255FA32C20DFFC6E806DA7AAF657D3490AF079C40FE21E10B2FDC971EB066E51ABDA182DEDC156759CCE06440E456FEB316
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.xu.prototype.da=_.ca(40,function(){return _.tj(this,3)});_.cz=function(a,b){this.key=a;this.defaultValue=!1;this.flagName=b};_.cz.prototype.ctor=function(a){return typeof a==="boolean"?a:this.defaultValue};_.dz=function(){this.ka=!0;var a=_.xj(_.fk(_.Be("TSDtV",window),_.Cya),_.xu,1,_.sj())[0];if(a){var b={};for(var c=_.n(_.xj(a,_.Dya,2,_.sj())),d=c.next();!d.done;d=c.next()){d=d.value;var e=_.Lj(d,1).toString();switch(_.vj(d,_.yu)){case 3:b[e]=_.Jj(d,_.nj(d,_.yu,3));break;case 2:b[e]=_.Lj(d,_.nj(d,_.yu,2));break;case 4:b[e]=_.Mj(d,_.nj(d,_.yu,4));break;case 5:b[e]=_.Nj(d,_.nj(d,_.yu,5));break;case 6:b[e]=_.Rj(d,_.ff,6,_.yu);break;default:throw Error("jd`"+_.vj(d,_.yu));}}}else b={};this.ea=b;this.token=.a?a.da():null};_.dz.prototype.aa=function(a){if(!this.ka\|\|a.key in this.ea)a=a.ctor(this.ea[a.key]);else if(_.Be("nQyAE",window)){var b=_.Fya(a.flagName);if(b===null)a=a.de

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	267364
Entropy (8bit):	5.569530230522313
Encrypted:	false
SSDEEP:	6144:NycIGKlq31idMvO5QEDF2Dej7DsZFVVl2SB:kcwU31iolH
MD5:	3D2CB547DD4B112CA65ACEA8D0ECF55E
SHA1:	77C8B54F32B17C5C87AB8327FFEAFA5A24255EE7
SHA-256:	39CA4132787C7FA3997EE7585506AE6436724418603BF5D2BE545D1A3F00DED2
SHA-512:	78635D1E543ED82A6AB9F7EE9545B9B5EAF51A4C72111DB3EEC5D508910E76D2F2CDEB5EB79212D0949E228B41181CE5F53EEE32F63540204A82890F99B927E8
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":"undefined"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":6,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":111},{"function":"__ogt_1p_data_v2","priority":6,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_fir

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54472)
Category:	downloaded
Size (bytes):	1068422
Entropy (8bit):	5.728816962535251
Encrypted:	false
SSDEEP:	24576:vlat9QpKNQkvl6Vzx1gZL3fAJeA0OUoMIX+Hf/sfy0ocL3a5crXC6YhM:vlat9QpKNQkvl6VzURfAJeA0OUoM/cXp
MD5:	C2CB5DD58DD7B868482E124B02E6D6A7
SHA1:	585A27FCD4137C7679253A1A9306E9CA04D1A15C
SHA-256:	B079CE83698D259095166CE301357E5CE9A784CA701A0107E76375DC674A3686
SHA-512:	A0972D5648B4E92589C9A1EFA2E8F94035FE70FA029B90C70E433D041F2541CCAD5B9E7A87CFB784DFE76052A9D5483D1B6A1E2C9914DF8B17D77ED0B09447AC
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts?hl=en&visit_id=638636455395256374-1581384181&rd=2&p=account_iph
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Official Google Account Help Center where you can find tips and tutorials on using Google Account and other answers to frequently asked questions." name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'R

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1195)
Category:	dropped
Size (bytes):	208050
Entropy (8bit):	5.527674696451517
Encrypted:	false
SSDEEP:	3072:HA2OL7g8WMo3NeigxLnrZyLXeE/s8vSz3gTSMzdGOCKqc6qmO+9maDhDWJPUBm1Z:ROL7Po3Ysjen8vP5GOCKaAGDWJPUBm1Z
MD5:	A2EF31B8E39640D0D3D29B306DEA5EF9
SHA1:	8844EA1F371F29F3AF0FE76AB743E048D828666E
SHA-256:	869D133DAD03DD71305565BF3D217CB4721E2B8030EAEBF84970A134A8FBEF6F
SHA-512:	AEA8983B67D88D34F469FF547AA37717230C49B07354C186762BAFCA7805002C92D2ECCD544240008797E4BE22B4CD016008273D5558D15CB74D1066138F5DB4
Malicious:	false
Reputation:	low
Preview:	gapi.loaded_1(function(_){var window=this;._.zh=(window.gapi\|\|{}).load;._.Lo=_.kf(_.vf,"rw",_.lf());.var Mo=function(a,b){(a=_.Lo[a])&&a.state<b&&(a.state=b)};var No=function(a){a=(a=_.Lo[a])?a.oid:void 0;if(a){var b=_.gf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Lo[a];No(a)}};_.Oo=function(a){a=a.container;typeof a==="string"&&(a=document.getElementById(a));return a};_.Po=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Qo=function(a,b){var c={},d=a.yc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Mo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.vf.oa){var k=d.id;if(k){f=(f=_.Lo[k])?f.state:void 0;if(f===1\|\|f===4)break a;No(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5844
Entropy (8bit):	5.415349535776294
Encrypted:	false
SSDEEP:	96:GhOEazFZMOEaK3qOEanOEaxVc+u+OEa7NJhOXa7FZMOXa93qOXagOXaeVc+u+OXA:GuPK3Ngdk3tA93OokLfLy13Eq8tZ
MD5:	3C381348DA6E25F8F2F5C62ACA414D5A
SHA1:	FA92E3CA538EE1DDAC023A9AD6C0551B9CBB40C6
SHA-256:	52B65CA72EBF03D7D7CD82BD244A092680E3064034C46DFEDAE259620AA85979
SHA-512:	606E36871A12EDB3BC041F5F0CABCCF0A19873A99664198EBD01AF420B41615FA1970EAD15C0AF52B4B6FC12CF76C0704820709F172EB9A02EEF58CEA832B8C0
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v22/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (395)
Category:	downloaded
Size (bytes):	1608
Entropy (8bit):	5.271783084011668
Encrypted:	false
SSDEEP:	48:o726BiFP89yAxKz1TtMxII+eXww7D2bc+rw:oyMyAAz1WNd8vw
MD5:	45EA91A811A594F81B7F760DD14BE237
SHA1:	2C97782C6D5D0BCFB3676FF24AA1008251090DAE
SHA-256:	7488FF4710E7592F66BE1FAC090F73CB8F1D2D0794B57DEAC1798C5B309EE76F
SHA-512:	4F79A36857D5A8AF1E2F938EF92EA75C384DE4789972B068BE82EADAA442C538A65035CCE8665A7283137E2075B8FE4C1C9E7B2A36585491683B4869005B772A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.DiBjXr_73PE.es5.O/ck=boq-identity.AccountsSignInUi.nq70RHujW6U.L.B1.O/am=5MFgKBi2MQjEE54DekBRIOQAAAgAAAAAAIANAAB0DA/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EIOG1e,EN3i8d,Fndnac,GwYlN,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MY7mZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,P6sQOc,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,WpP9Yc,XVq9Qb,YHI3We,YTxL4,YgOFye,ZakeSe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,cYShmd,eVCnO,f8Gu1e,gJzDyc,hc6Ubd,inNHtf,iyZMqd,lsjVmc,ltDFwf,lwddkf,m9oV,mvkUhe,mzzZzc,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rCcCxc,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,vjKJJ,vvMGie,ws9Tlc,xBaz7b,xQtZb,xiZRqc,y5vRwf,yRXbo,ywOR5c,z0u0L,zbML3c,ziZ8Mc,zr1jrb,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlFIKWGfY55w79ziwX5oEv9sngM4fQ/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:GwYlN;EmZ2Bf:zr1jrb;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb;UpnZUd:nnwwYc;Uvc8o:VDovNc;XdiAjb:NLiXbe;YIZmRd:A1yn5d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;dowIGb:ebZ3mb;eBAeSb:zbML3c;iFQyKf:vfuNJf;lOO0Vd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qafBPd:yDVVkb;qddgKe:xQtZb;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,ZDZcre,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.vg(_.Ila);_.iA=function(a){_.W.call(this,a.Fa);this.aa=a.Xa.cache};_.J(_.iA,_.W);_.iA.Ba=function(){return{Xa:{cache:_.gt}}};_.iA.prototype.execute=function(a){_.Bb(a,function(b){var c;_.$e(b)&&(c=b.eb.kc(b.kb));c&&this.aa.LG(c)},this);return{}};_.qu(_.Ola,_.iA);._.l();._.k("ZDZcre");.var jH=function(a){_.W.call(this,a.Fa);this.Xl=a.Ea.Xl;this.j4=a.Ea.metadata;this.aa=a.Ea.wt};_.J(jH,_.W);jH.Ba=function(){return{Ea:{Xl:_.OG,metadata:_.b_a,wt:_.LG}}};jH.prototype.execute=function(a){var b=this;a=this.aa.create(a);return _.Bb(a,function(c){var d=b.j4.getType(c.Od())===2?b.Xl.Rb(c):b.Xl.fetch(c);return _.Bl(c,_.PG)?d.then(function(e){return _.Dd(e)}):d},this)};_.qu(_.Tla,jH);._.l();._.k("K5nYTd");._.a_a=new _.pf(_.Pla);._.l();._.k("sP4Vbe");.._.l();._.k("kMFpHd");.._.l();._.k("A7fCU");.var RG=function(a){_.W.call(this,a.Fa);this.aa=a.Ea.yQ};_.J(RG,_.W);RG.Ba=func

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16396, version 1.0
Category:	downloaded
Size (bytes):	16396
Entropy (8bit):	7.985827035156134
Encrypted:	false
SSDEEP:	384:Lha7McMVhiB+XmITjsy+wHXjov+sc8idzmAKUcLIS:Va7McSPXpjsy+wHzu+nZdKDUcLr
MD5:	A2EDB5C7EB3C7EF98D0EB329C6FB268F
SHA1:	5F3037DC517AFD44B644C712C5966BFE3289354C
SHA-256:	BA191BF3B5C39A50676E4ECAE47ADFF7F404F9481890530CDBF64252FBB1A57E
SHA-512:	CC5644CAF32302521CA5D6FD3C8CC81A6BBF0C44A56C00F0A19996610D65CF40D5BAE6446610F05A601F63DEA343A9000E76F93A0680CFBF1E4CF15A3563A62C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v22/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......@...........?...........................<..l..:.`..:........d.....6.$..(. .....N.....5x.-.v.?..,...<Sn..O/.<.... ......{r2D!v@..?...."..F..\3...-5B....x.).x.$ze._c.l.)~Y..YE.J.e.uW.%).?..T.].q_7y.4...$....t.F #t8.j...GO..k..&.Ecb.X..m#.........k.s.Fr...<q~.@].PHN?..w.h.f...!h..A,H......H.R.T.R.......)...m..}u...".)(J.......>!. .V-....E^.bQ.....U.....u.s?$3.L$...y.........LpB.H.=...."R]\|=..._.o..W....N.j2.L.D.....{.<..s.W1I. zHx:..I.......G..~.6..E.&I4.J..h.Y...uM..D.z.u..)......<...T.......U...k...O......C.!vCy....&..y......t....e...(#.......%v..;.XTS...,....A.w.....K...vv.AI..~y..t..f.....D!...h.."e...h.pQ..{...\..G.......K.[.R....{.%]].0...!i.. ....w......4...`G.2...GD.wZV"...I.......tGQ.<..d..P...o.{......].hI#.....(..0_d..%....E.....?.\|...)...U."b....1bT.....~.U.[.NJ%....hW....s.;.Vm.}]..2............<...\|q.yW.x....sar!.J. .D...z..GcH.~k.r. >..kY...$2D..B@0.5.6.:...T.xr.~. `M...;.?..b6.Puc,.P.....F.pU.a.f_.xS.....IV.r~......6"..AX.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54338)
Category:	downloaded
Size (bytes):	1188641
Entropy (8bit):	5.707623391042696
Encrypted:	false
SSDEEP:	24576:r7zat9QptNQkvl6Ht1gZL3fAJeA0OUoMUHgHhk7vi0ocL3a5nrXWg6pQ0lzATWVc:r7zat9QptNQkvl6HQRfAJeA0OUoMTfXX
MD5:	A9C1E19EDBA4DA375B2432D2DA6BA433
SHA1:	F2709CCB7A1DB0AF23FAE9A207440EC370E61896
SHA-256:	F83DFE8846AB67C1D5DBAD8909590372330A65E3E5ECF7EA966CFED322E79D0D
SHA-512:	0410B82B74CF4A4047A0D300FC0C8BEB55C34EB4F00A7A5B1B1C43EB6EC9AD98843C84D9ADB560F1395657A9E5EC8863AF2775ACA6A653010E332F8D185A9622
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/6130773?hl=en
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Important: Only log into sensitive websites on devices of people that you trust. Owners may be able to gain access to your data. In Guest mode, you won't find or change any other Chrome profile's inf" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKO

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 4, 2024 15:31:35.194276094 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:35.194284916 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:35.787946939 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:44.803524971 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:44.803527117 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:45.398389101 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:47.054740906 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 15:31:47.054929018 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:31:54.138684988 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.138732910 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.138842106 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.139123917 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.139136076 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.232337952 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:54.232386112 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:54.232455015 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:54.236639023 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:54.236654997 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:54.796588898 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.796689987 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.847959995 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.847997904 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.848409891 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.871500969 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.915406942 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.924757957 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:54.924839973 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:54.968926907 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.968956947 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.968976974 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.969027996 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.969059944 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:54.969084978 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.969095945 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:54.997222900 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:54.997243881 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:54.997669935 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:55.053384066 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:55.054303885 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.054335117 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.054419994 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.054455042 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.054502010 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.056252956 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.056274891 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.056356907 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.056374073 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.056426048 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.140374899 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.140403032 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.140494108 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.140577078 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.140624046 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.140798092 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.142033100 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.142056942 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.142110109 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.142137051 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.142163038 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.142363071 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.144624949 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.144650936 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.144936085 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.144953012 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.146429062 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.146508932 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.146533966 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.146576881 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.146595001 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.146624088 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.149442911 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.226975918 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.227035999 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.227078915 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.227103949 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.227133989 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.227153063 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.228122950 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.228167057 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.228193045 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.228204966 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.228241920 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.228262901 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.229140997 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.229188919 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.229206085 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.229217052 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.229247093 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.229269028 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.230108976 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.230149984 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.230192900 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.230204105 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.230233908 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.230246067 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.231168032 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.231209040 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.231240034 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.231249094 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.231275082 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.231291056 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.239869118 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.239913940 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.239959002 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.239988089 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.240004063 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.240016937 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.240021944 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.240045071 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.240072966 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.240179062 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.240222931 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.242825985 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.265117884 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.265147924 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.265166998 CEST	49704	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.265173912 CEST	443	49704	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.326056957 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.326090097 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.326139927 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.326786995 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.326802969 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.330348969 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.330384016 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.330463886 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.330579996 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.330593109 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.331737041 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.331774950 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.332004070 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.332814932 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.332856894 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.333319902 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.338409901 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.338438034 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.338594913 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.338608980 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.339241982 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.339252949 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.339308023 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.339445114 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:55.339453936 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.975713015 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.976958036 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.991628885 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:55.993210077 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.018779993 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.022106886 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.022205114 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.037766933 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.038882017 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.069017887 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.265376091 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.265399933 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.265918016 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.265923977 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.266165972 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.266180992 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.266556978 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.266561031 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.275578022 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.275595903 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.276098013 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.276103973 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.276424885 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.276446104 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.276969910 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.276973963 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.277823925 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.277837038 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.278208017 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.278213024 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.366998911 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.367022038 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.367082119 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.367082119 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.367130041 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.376082897 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.376591921 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.376683950 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.378891945 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.378923893 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.378994942 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.378993988 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.379041910 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.379631042 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.379717112 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.379771948 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.380075932 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.380098104 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.380146980 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.380156994 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.380285978 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.387891054 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:56.433852911 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.433881044 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.433892012 CEST	49711	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.433898926 CEST	443	49711	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.435316086 CEST	49712	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.435362101 CEST	443	49712	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.435431957 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.437916040 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.437973022 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.438005924 CEST	49713	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.438024998 CEST	443	49713	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.439341068 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.439352989 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.439380884 CEST	49714	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.439394951 CEST	443	49714	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.439544916 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.439579010 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.439595938 CEST	49710	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.439604998 CEST	443	49710	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.537298918 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.537354946 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.537439108 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.540268898 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.540313959 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.541980982 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.568600893 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.568639994 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.568705082 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.568823099 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.568840981 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.569314003 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.569348097 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.569690943 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.569703102 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.569940090 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.570108891 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.570121050 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.590612888 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.590651989 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.590807915 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.591147900 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.591159105 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.591686010 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:56.591715097 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:56.617516041 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617547035 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617553949 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617569923 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617577076 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617578983 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617719889 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:56.617719889 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:56.617779016 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617815018 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.617856979 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:56.617880106 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:56.618431091 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.618489981 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:56.618545055 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:57.208408117 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.209471941 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.209507942 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.210431099 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.210436106 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.220766068 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.221117020 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.221163988 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.221529961 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.221543074 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.244322062 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.244695902 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.244714022 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.245117903 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.245122910 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.268955946 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.269323111 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.269362926 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.269738913 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.269745111 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.309895039 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.309964895 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.310029984 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.310291052 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.310314894 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.310326099 CEST	49718	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.310332060 CEST	443	49718	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.313674927 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.313719034 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.313785076 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.313939095 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.313952923 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.323282957 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.323338032 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.323390961 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.323518991 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.323535919 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.323545933 CEST	49716	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.323551893 CEST	443	49716	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.326159000 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.326169014 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.326239109 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.326380968 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.326390982 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.344964027 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.345036030 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.345088959 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.345282078 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.345299006 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.345319986 CEST	49719	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.345326900 CEST	443	49719	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.348073959 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.348100901 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.348258018 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.348532915 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.348546982 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.376220942 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.376286983 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.376349926 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.376548052 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.376568079 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.376579046 CEST	49717	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.376584053 CEST	443	49717	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.380119085 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.380152941 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.380234003 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.380481958 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:57.380496025 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:57.461311102 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:57.461349964 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:57.461359978 CEST	49705	443	192.168.2.5	20.109.210.53
Oct 4, 2024 15:31:57.461368084 CEST	443	49705	20.109.210.53	192.168.2.5
Oct 4, 2024 15:31:58.017693043 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.018174887 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.018204927 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.020030975 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.020042896 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.020886898 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.021347046 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.021373034 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.021823883 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.021835089 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.031579971 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.031968117 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.031985044 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.032382011 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.032387018 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.104511023 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.105005026 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.105037928 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.105535030 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.105540991 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.117012024 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.117078066 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.117146015 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.117321014 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.117342949 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.117356062 CEST	49726	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.117362022 CEST	443	49726	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.120230913 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.120302916 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.120397091 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.120531082 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.120557070 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.120745897 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.120815039 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.120965958 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.120965958 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.121026039 CEST	49727	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.121046066 CEST	443	49727	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.123096943 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.123135090 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.123230934 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.123363018 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.123379946 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.141971111 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.142050028 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.142196894 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.142244101 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.142271042 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.142286062 CEST	49725	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.142292976 CEST	443	49725	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.144962072 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.144994020 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.145090103 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.145459890 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.145476103 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.209244013 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.209315062 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.209434986 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.209592104 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.209614992 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.209628105 CEST	49728	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.209633112 CEST	443	49728	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.212219000 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.212316990 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.212512016 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.212975025 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.212987900 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.772427082 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.773055077 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.773088932 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.774733067 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.774744034 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.786462069 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.787224054 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.787249088 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.787417889 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.787424088 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.799628973 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.799985886 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.800007105 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:58.800352097 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:58.800359011 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.027926922 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.027951956 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.027995110 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.028023958 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.028083086 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028311014 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028311014 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028311014 CEST	49732	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028311014 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028331995 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.028335094 CEST	49731	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.028343916 CEST	443	49732	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.028348923 CEST	443	49731	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.030170918 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.030601025 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.030621052 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.031064987 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.031073093 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.032063961 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.032104969 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.032182932 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.032377958 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.032383919 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.032393932 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.032418013 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.032465935 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.035571098 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.035582066 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.126601934 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.126705885 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.126760960 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.132152081 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.132242918 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.132292032 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.316294909 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.316348076 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.316366911 CEST	49730	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.316375017 CEST	443	49730	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.320916891 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.320956945 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.320972919 CEST	49733	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.320981026 CEST	443	49733	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.326575994 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.326623917 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:31:59.326679945 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.333846092 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.333872080 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:31:59.333925009 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.336872101 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.336888075 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:31:59.337693930 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:31:59.337701082 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:31:59.368561983 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.368607998 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.368662119 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.372982025 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.373019934 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.373075962 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.373886108 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.373898983 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.377355099 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.377377987 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.589934111 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:31:59.589979887 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:31:59.590045929 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:31:59.590449095 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:31:59.590471983 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:31:59.766212940 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.766752958 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.774986029 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.775007010 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.775881052 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.775890112 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.776684046 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.776705980 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.777512074 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.777518988 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.873977900 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.874062061 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.874116898 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.877019882 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.877089024 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.877322912 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.889369965 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.889394999 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.889408112 CEST	49735	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.889414072 CEST	443	49735	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.894704103 CEST	49736	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.894727945 CEST	443	49736	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.973938942 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:31:59.973999977 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:31:59.974087954 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.034575939 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.034616947 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.039606094 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.039664984 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.039783001 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.040225983 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.040239096 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.244817972 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.245385885 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.245400906 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.245836973 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.245850086 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.245910883 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.245919943 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.245960951 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.246550083 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.247190952 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.248145103 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.248246908 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.248516083 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.248648882 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.248653889 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.252053022 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.252079010 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.252791882 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.252799988 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.253160000 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.253189087 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.254018068 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.254023075 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.254873991 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:00.255373001 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:00.255415916 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:00.256489038 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:00.256553888 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:00.258279085 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:00.258368015 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:00.294450998 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.300189018 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.300709009 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.300730944 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.301265001 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.301280022 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.301331043 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.301340103 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.301525116 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.302021980 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.302382946 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.302464008 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.311867952 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:00.311878920 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:00.356692076 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.356728077 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:00.356733084 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.356760025 CEST	443	49738	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.356762886 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.356865883 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.357558966 CEST	49739	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.357578993 CEST	443	49739	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.364708900 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.364759922 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.364850044 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.365214109 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.365228891 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.367664099 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.367753029 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.368077993 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.368285894 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.368304014 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.368314028 CEST	49740	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.368319988 CEST	443	49740	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.372348070 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.372386932 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.372574091 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.373136997 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.373148918 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.405865908 CEST	49738	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.622165918 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.622554064 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.622694969 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.622708082 CEST	443	49737	172.217.18.97	192.168.2.5
Oct 4, 2024 15:32:00.622724056 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.622755051 CEST	49737	443	192.168.2.5	172.217.18.97
Oct 4, 2024 15:32:00.677906990 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.678419113 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.678436041 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.678910971 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.678916931 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.723326921 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.723813057 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.723836899 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.724406958 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.724414110 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.746552944 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.750657082 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.750657082 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.750695944 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.750720978 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.779110909 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.779190063 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.779488087 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.784786940 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.784806967 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.784818888 CEST	49742	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.784825087 CEST	443	49742	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.789098024 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.789135933 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.789418936 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.789418936 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.789448977 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.832536936 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.832603931 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.832689047 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.832932949 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.832958937 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.832973003 CEST	49743	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.832978964 CEST	443	49743	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.835912943 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.835957050 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.836133003 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.836313963 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.836323977 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.924665928 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.924753904 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.924825907 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.925199986 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.925199986 CEST	49715	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.925223112 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.925231934 CEST	443	49715	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.929018021 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:00.929058075 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:00.930547953 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:00.930547953 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.930586100 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:00.932121038 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.932121038 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:00.932154894 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:00.932702065 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:00.932714939 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.002944946 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.002991915 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.003159046 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.003518105 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.003528118 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.004612923 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.013540983 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.013591051 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.014446020 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.014456987 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.037853956 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.039688110 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.039705038 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.040652037 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.040657997 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.131495953 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.131706953 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.131841898 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.156593084 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.156663895 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.156851053 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.425120115 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.470957041 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.491379976 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.535810947 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.592158079 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:01.592226028 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:01.600079060 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.604744911 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.604757071 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.605669022 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.605673075 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.606828928 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.606849909 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.608198881 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.608215094 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.609342098 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.609350920 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.612032890 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.612040043 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.612950087 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.612976074 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.612998962 CEST	49744	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.613008976 CEST	443	49744	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.616688013 CEST	49745	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.616707087 CEST	443	49745	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.631361961 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:01.631378889 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:01.631819963 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:01.657933950 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.657975912 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.658039093 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.659333944 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.659395933 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.659471035 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.666299105 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.673883915 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:01.706439018 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.706506968 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.706552029 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.706731081 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.706793070 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.706841946 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.712136984 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.712198019 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.712245941 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.717576027 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.723299980 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.723335028 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.724245071 CEST	49746	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.724267006 CEST	443	49746	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.724478006 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.724508047 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.724526882 CEST	49747	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.724534988 CEST	443	49747	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.731657028 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.731704950 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.731772900 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.732332945 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.732347012 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.732392073 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.732702971 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.732714891 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.733335018 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.733349085 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.733453035 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.733478069 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.733874083 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.733881950 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.734532118 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.734544039 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.734581947 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.735197067 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.735197067 CEST	49749	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.735224009 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.735238075 CEST	443	49749	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.735282898 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.735335112 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.752711058 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.752757072 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.752825022 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.753123999 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:01.753139019 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:01.800000906 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.800170898 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.800787926 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.800805092 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:01.840518951 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:01.896418095 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:01.943403959 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.082242966 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.082329988 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.082382917 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.082638025 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.082659960 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.082673073 CEST	49748	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.082678080 CEST	443	49748	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.119332075 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:02.119484901 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:02.119534969 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:02.122451067 CEST	49750	443	192.168.2.5	216.58.206.65
Oct 4, 2024 15:32:02.122463942 CEST	443	49750	216.58.206.65	192.168.2.5
Oct 4, 2024 15:32:02.137495041 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:02.137538910 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:02.137612104 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:02.137919903 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:02.137933016 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:02.303818941 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.303874969 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.303951979 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.304471016 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.304491043 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.375797033 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.387434959 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.413989067 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.414028883 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.414561033 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.415163040 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.415174961 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.421921015 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.421960115 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.422951937 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.422960997 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.424380064 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.424411058 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.425369978 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.425385952 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.430468082 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.431191921 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.431229115 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.432389975 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.432395935 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.467027903 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.488953114 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.488966942 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.489710093 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.489713907 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.515827894 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.516016960 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.516087055 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.522937059 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.523005962 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.523071051 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.526387930 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.526475906 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.526535034 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.527280092 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.527304888 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.527318954 CEST	49753	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.527324915 CEST	443	49753	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.535290956 CEST	49751	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.535329103 CEST	443	49751	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.536346912 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.536494970 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.536578894 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.537116051 CEST	49754	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.537131071 CEST	443	49754	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.543888092 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.543905020 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.543914080 CEST	49752	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.543920040 CEST	443	49752	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.558911085 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.558968067 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.559043884 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.565814972 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.565835953 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.572201014 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.572249889 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.572319984 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.572840929 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.572853088 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.579312086 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.579327106 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.579391956 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.580684900 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.580708981 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.580765963 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.584624052 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.584639072 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.584810019 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.584819078 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.591730118 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.591789961 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.591837883 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.592087984 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.592103004 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.592114925 CEST	49755	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.592120886 CEST	443	49755	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.595184088 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.595200062 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.595323086 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.595613003 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:02.595623970 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:02.810429096 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:02.810980082 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:02.811002970 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:02.812005043 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:02.812077999 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:02.970367908 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.970458031 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.971770048 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:02.971787930 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.971992970 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:02.973429918 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:03.019413948 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:03.060971975 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.061131001 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:03.061252117 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.103437901 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:03.106821060 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.106843948 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:03.153492928 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.240256071 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.240427971 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.244890928 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.255110025 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.255155087 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.255419016 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.255436897 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.255685091 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.255691051 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.255906105 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.255912066 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.255984068 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.256030083 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.256342888 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.256350994 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.262245893 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:03.262327909 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:03.262386084 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:03.263273001 CEST	49757	443	192.168.2.5	184.28.90.27
Oct 4, 2024 15:32:03.263298035 CEST	443	49757	184.28.90.27	192.168.2.5
Oct 4, 2024 15:32:03.267986059 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.268973112 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.268999100 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.269459009 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.269464970 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.287019014 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.333434105 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.336477995 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.336502075 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.336631060 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.336639881 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.355571032 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.355657101 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.355705976 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.355909109 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.355931044 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.355942965 CEST	49760	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.355948925 CEST	443	49760	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.356635094 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.356794119 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.356843948 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.356966019 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.356986046 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.357332945 CEST	49758	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.357341051 CEST	443	49758	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.381457090 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.381531000 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.381639004 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.385235071 CEST	49761	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.385261059 CEST	443	49761	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.395231962 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.395277977 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.395347118 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.397097111 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.397108078 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.399377108 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.399441004 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.399585009 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.399725914 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.399734020 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.402199030 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.402221918 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.402277946 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.402674913 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.402689934 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.403157949 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.403229952 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.403276920 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.403604031 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.403623104 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.403631926 CEST	49759	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.403637886 CEST	443	49759	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.405630112 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.405638933 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.405807972 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.406047106 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.406054974 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.464937925 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.465013981 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.465069056 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.466233015 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.466233015 CEST	49762	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.466257095 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.466269016 CEST	443	49762	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.492141008 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.492202997 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.492326021 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.492554903 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:03.492568016 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:03.718750954 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:03.719161987 CEST	49703	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:03.720113993 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:03.720207930 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:03.720297098 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:03.721298933 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:03.721352100 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:03.732153893 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:03.732243061 CEST	443	49703	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:03.885905981 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:03.891050100 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:03.891180992 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.892339945 CEST	49756	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:03.892364025 CEST	443	49756	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:04.062732935 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.063492060 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.063510895 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.064132929 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.064137936 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.071582079 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.071997881 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.072065115 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.072438955 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.072453976 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.074938059 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.075284004 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.075308084 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.075752020 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.075762987 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.086620092 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.087045908 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.087129116 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.087474108 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.087490082 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.331749916 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.331938028 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.331998110 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332009077 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332092047 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332092047 CEST	49765	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332124949 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332146883 CEST	443	49765	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332185984 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332278013 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332359076 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332360029 CEST	49764	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.332401991 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332432985 CEST	443	49764	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.332941055 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.333611965 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.333765030 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.333842039 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.333882093 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.333911896 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.334397078 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.334404945 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.334599972 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.334631920 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.334657907 CEST	49767	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.334673882 CEST	443	49767	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.335865021 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.335897923 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.336003065 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.336013079 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.336047888 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.336158991 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.336170912 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.336185932 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.336419106 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.336431026 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.337994099 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.338027954 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.338275909 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.338403940 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.338422060 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.341691971 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.341783047 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.437566996 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.437654018 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.437876940 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.438175917 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.438220024 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.438249111 CEST	49768	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.438265085 CEST	443	49768	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.441310883 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.441361904 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.441488028 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.441658974 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.441675901 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.518507004 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.518585920 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.518701077 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.518927097 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.518980026 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.519012928 CEST	49766	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.519030094 CEST	443	49766	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.521851063 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.521903038 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.521982908 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.522208929 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:04.522219896 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:04.594613075 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.594650030 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.595319986 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.595393896 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.596482992 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.596513987 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.597042084 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.597048044 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.873585939 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.873657942 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.873675108 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.873714924 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.873758078 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.873806953 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.885678053 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:04.885725975 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:04.885812998 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:04.886322975 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:04.886336088 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:04.900063038 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.900089979 CEST	443	49769	23.1.237.91	192.168.2.5
Oct 4, 2024 15:32:04.900104046 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:04.900141001 CEST	49769	443	192.168.2.5	23.1.237.91
Oct 4, 2024 15:32:05.090338945 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.090961933 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.090987921 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.093580961 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.093594074 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.116960049 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.117474079 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.117511034 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.118092060 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.118097067 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.140371084 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.141067028 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.141098976 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.141558886 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.141563892 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.195081949 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.195164919 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.195352077 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.195400000 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.195422888 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.195437908 CEST	49773	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.195442915 CEST	443	49773	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.197947979 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.197983027 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.198153019 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.198328018 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.198343992 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.223952055 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.229661942 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.229748964 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.229907990 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.229971886 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.229993105 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.230906010 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.230912924 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.241939068 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.241977930 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.241993904 CEST	49771	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.242001057 CEST	443	49771	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.244561911 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.244600058 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.244661093 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.244957924 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.244972944 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.246416092 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.246490002 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.246560097 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.246676922 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.246696949 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.246706963 CEST	49772	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.246712923 CEST	443	49772	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.251216888 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.251252890 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.251420021 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.251533985 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.251545906 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.293052912 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.293597937 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.293629885 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.294063091 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.294068098 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.328639030 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.328722954 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.328797102 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.329478025 CEST	49774	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.329499960 CEST	443	49774	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.333184004 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.333231926 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.333359003 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.333463907 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.333473921 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.400897026 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.400976896 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.401129961 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.401263952 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.401279926 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.401294947 CEST	49775	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.401302099 CEST	443	49775	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.404711008 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.404753923 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.404901981 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.405376911 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.405390024 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.551105976 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:05.551389933 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:05.551403999 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:05.551873922 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:05.552259922 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:05.552365065 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:05.552428961 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:05.592760086 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:05.592776060 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:05.836869001 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.837430954 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.837461948 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.838116884 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.838124990 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.903215885 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.903769970 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.903805017 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.904309034 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.904314995 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.913263083 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.913965940 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.913994074 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.914731979 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.914740086 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.964337111 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.964431047 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.964662075 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.964736938 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.964754105 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.964786053 CEST	49777	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.964792013 CEST	443	49777	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.968617916 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.968660116 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.968822002 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.969705105 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.969722033 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.976641893 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.977139950 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.977164984 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:05.977754116 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:05.977761030 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.008179903 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.008265972 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.008335114 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.008598089 CEST	49779	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.008615971 CEST	443	49779	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.011776924 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.011817932 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.011955023 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.012144089 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.012152910 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.025909901 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.025988102 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.026045084 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.026278973 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.026295900 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.026305914 CEST	49778	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.026312113 CEST	443	49778	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.030219078 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.030257940 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.030457020 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.031291962 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.031303883 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.089642048 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.090250015 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.090281010 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.090807915 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.090812922 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.093334913 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.093411922 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.093483925 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.094171047 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.094171047 CEST	49780	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.094197989 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.094218969 CEST	443	49780	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.097038031 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.097081900 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.097254992 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.097449064 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.097460985 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.205471039 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.205574036 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.205630064 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.205943108 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.205970049 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.205984116 CEST	49781	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.205990076 CEST	443	49781	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.208856106 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.208889961 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.208973885 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.209173918 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.209182978 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.456373930 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:06.457271099 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:06.457321882 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:06.458096027 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:06.458112955 CEST	443	49776	142.250.186.169	192.168.2.5
Oct 4, 2024 15:32:06.458122015 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:06.458158970 CEST	49776	443	192.168.2.5	142.250.186.169
Oct 4, 2024 15:32:06.634526968 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.635174036 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.635201931 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.635829926 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.635835886 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.644486904 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.646100044 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.646100044 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.646132946 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.646142960 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.693578959 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.694051027 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.694082975 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.694555998 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.694571018 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.735738039 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.735811949 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.735867977 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.736076117 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.736098051 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.736108065 CEST	49782	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.736114025 CEST	443	49782	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.739072084 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.739114046 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.739212036 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.739440918 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.739454031 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.745796919 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.745866060 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.746002913 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.746301889 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.746301889 CEST	49783	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.746325016 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.746347904 CEST	443	49783	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.749537945 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.749583006 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.750485897 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.750658035 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.750670910 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.769810915 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.770306110 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.770358086 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.770771027 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.770778894 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.840183020 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.840336084 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.840468884 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.840548992 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.840548992 CEST	49784	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.840569019 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.840576887 CEST	443	49784	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.843626976 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.843672037 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.843779087 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.844023943 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.844038010 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.844089985 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.844499111 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.844526052 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.844916105 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.844923019 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.874389887 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.874475002 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.874572039 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.874737024 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.874752998 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.874763966 CEST	49785	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.874769926 CEST	443	49785	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.877998114 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.878032923 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.878233910 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.878446102 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.878462076 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.980159998 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.980241060 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.980328083 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.980567932 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.980587959 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.980602026 CEST	49786	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.980607986 CEST	443	49786	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.986391068 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.986444950 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:06.986511946 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.987198114 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:06.987216949 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.386562109 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.388575077 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.388598919 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.391061068 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.392627954 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.392651081 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.397906065 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.397929907 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.398689032 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.398696899 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.500570059 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.500643969 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.500719070 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.502775908 CEST	49789	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.502799988 CEST	443	49789	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.505825043 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.505889893 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.505971909 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.508188963 CEST	49788	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.508208990 CEST	443	49788	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.517730951 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.517780066 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.518018007 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.520962954 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.521008015 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.521106958 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.521354914 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.521368027 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.525388956 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.525424004 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.542623997 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.557295084 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.583755970 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.585803986 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.585820913 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.597896099 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.602912903 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.602922916 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.625910044 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.625926971 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.656938076 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.671932936 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.671947956 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.689277887 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.689357996 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.690035105 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.690047979 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.710465908 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.710539103 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.710589886 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.713558912 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.713603020 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.713637114 CEST	49790	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.713649035 CEST	443	49790	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.722606897 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.722659111 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.722881079 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.724941015 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.724956036 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.773217916 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.773415089 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.773478031 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.809619904 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.809698105 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.809792042 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.865469933 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.865499973 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.865516901 CEST	49791	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.865523100 CEST	443	49791	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.870102882 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.870125055 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.870136023 CEST	49792	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.870141029 CEST	443	49792	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.919975996 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.920020103 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:07.920089960 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.977598906 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:07.977618933 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.037575006 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.037631035 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.038003922 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.065609932 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.065632105 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.168087959 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.168701887 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.168740988 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.169164896 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.169173956 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.170031071 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.170392036 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.170423031 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.170942068 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.170947075 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.270891905 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.270956993 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.271106005 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.271203041 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.271224976 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.271238089 CEST	49794	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.271244049 CEST	443	49794	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.272089958 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.272156954 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.272325039 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.272488117 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.272510052 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.272521019 CEST	49795	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.272526026 CEST	443	49795	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.274447918 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.274492025 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.274586916 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.274790049 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.274804115 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.275013924 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.275054932 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.275114059 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.275243998 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.275257111 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.384933949 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.385457993 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.385492086 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.385916948 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.385922909 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.486557961 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.486630917 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.486706018 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.487056971 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.487081051 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.487142086 CEST	49796	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.487149000 CEST	443	49796	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.490211010 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.490258932 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.490331888 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.490535021 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.490550041 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.636746883 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.639782906 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.639805079 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.640131950 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.640137911 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.744261980 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.745120049 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.745142937 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.745269060 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.745275021 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.749722958 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.749789953 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.749900103 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.750130892 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.750130892 CEST	49797	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.750145912 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.750154972 CEST	443	49797	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.753348112 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.753386021 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.754134893 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.754348040 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.754362106 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.848519087 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.848577976 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.849509954 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.849586964 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.849586964 CEST	49798	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.849603891 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.849613905 CEST	443	49798	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.852535963 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.852613926 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.852884054 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.853060007 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.853081942 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.924438953 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.925086021 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.925156116 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.925658941 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.925673008 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.926147938 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.926670074 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.926702976 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:08.927246094 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:08.927251101 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.023984909 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.024079084 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.024399996 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.024467945 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.024494886 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.024512053 CEST	49800	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.024518013 CEST	443	49800	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.026201010 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.026288986 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.026505947 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.026554108 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.026575089 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.026588917 CEST	49799	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.026595116 CEST	443	49799	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.028062105 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.028105021 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.029514074 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.029560089 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.029567003 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.029778004 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.029793978 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.029800892 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.029800892 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.029830933 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.127589941 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.128192902 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.128232956 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.128833055 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.128839016 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.226478100 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.226561069 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.226625919 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.226775885 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.226794958 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.226805925 CEST	49801	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.226810932 CEST	443	49801	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.229578972 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.229614973 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.229902983 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.230114937 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.230129957 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.422424078 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.423284054 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.423325062 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.423758030 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.423763990 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.524079084 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.524156094 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.524251938 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.524524927 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.524544954 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.524558067 CEST	49802	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.524564981 CEST	443	49802	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.527868986 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.527909994 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.528043985 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.528428078 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.528439999 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.539170027 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.539927959 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.539980888 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.540431976 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.540441036 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.677897930 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.680895090 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.680937052 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.682771921 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.682779074 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.684098005 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.685431004 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.685452938 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.689055920 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.689060926 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.725511074 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.725575924 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.725641966 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.726095915 CEST	49803	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.726120949 CEST	443	49803	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.733454943 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.733500004 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.733571053 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.733777046 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.733793020 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.779652119 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.779746056 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.779800892 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.782569885 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.782592058 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.782605886 CEST	49804	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.782612085 CEST	443	49804	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.786593914 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.786690950 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.786787033 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.787183046 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.787211895 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789078951 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789102077 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789165020 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.789180040 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789366007 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789407969 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.789448023 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.789458990 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.789469957 CEST	49805	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.789474010 CEST	443	49805	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.799776077 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.799820900 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.799882889 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.800261974 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.800271988 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.907017946 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.914897919 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.914920092 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:09.916114092 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:09.916120052 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.016709089 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.016788006 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.016974926 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.025835037 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.025861979 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.025875092 CEST	49806	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.025881052 CEST	443	49806	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.030890942 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.030939102 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.031022072 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.033591032 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.033613920 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.294367075 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:10.294428110 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:10.294495106 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:10.296160936 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.299516916 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.299546957 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.300175905 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.300184011 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.396373034 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.396460056 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.396583080 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.397022009 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.397041082 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.397070885 CEST	49808	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.397080898 CEST	443	49808	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.400851011 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.400902033 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.401201010 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.401407003 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.401417971 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.477639914 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.478444099 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.478471994 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.479940891 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.479947090 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.480038881 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.480648994 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.480657101 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.481331110 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.481334925 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.492137909 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.492729902 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.492748022 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.493521929 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.493526936 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.586464882 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.586493015 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.586540937 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.586563110 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.586600065 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.592787981 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.592827082 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.592874050 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.592886925 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.592957020 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.601794004 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.601844072 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.601892948 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.601911068 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.602510929 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.602561951 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.628077030 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.628113031 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.628134966 CEST	49809	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.628142118 CEST	443	49809	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.629508972 CEST	49810	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.629513979 CEST	443	49810	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.629596949 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.629626989 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.629643917 CEST	49811	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.629651070 CEST	443	49811	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.647394896 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.647449970 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.647635937 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.648893118 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.648942947 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.649069071 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.650517941 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.650531054 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.653198004 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.653230906 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.653407097 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.654059887 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.654073000 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.654206038 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.654223919 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.711045980 CEST	49741	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:10.711082935 CEST	443	49741	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:10.967124939 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.969460964 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.969487906 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:10.970087051 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:10.970092058 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.072423935 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.073522091 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.073596001 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.074742079 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.078751087 CEST	49812	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.078780890 CEST	443	49812	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.080044031 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.080082893 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.080509901 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.080518007 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.086338043 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.086385965 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.086448908 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.088309050 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.088330030 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.180234909 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.180315018 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.180438995 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.180681944 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.180706978 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.180721045 CEST	49813	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.180727005 CEST	443	49813	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.183830976 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.183871031 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.184070110 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.184310913 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.184325933 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.495249033 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.495400906 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.495997906 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.524435043 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.524446964 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.524996996 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.525001049 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.525249004 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.525274992 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.525738001 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.525748968 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.526118040 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.526159048 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.526956081 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.526967049 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.622251034 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.622317076 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.622355938 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.622756004 CEST	49816	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.622772932 CEST	443	49816	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.622790098 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.623085022 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.623152018 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.624149084 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.624206066 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.624255896 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.626431942 CEST	49814	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.626441956 CEST	443	49814	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.631143093 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.631165028 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.631177902 CEST	49815	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.631184101 CEST	443	49815	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.636187077 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.636224985 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.636456966 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.642065048 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.642091036 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.642179012 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.644970894 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.645019054 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.645093918 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.645982981 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.645994902 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.646681070 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.646696091 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.646883965 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.646894932 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.721052885 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.725716114 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.725752115 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.726697922 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.726701975 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.821975946 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.822356939 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.822448015 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.822628975 CEST	49818	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.822648048 CEST	443	49818	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.828299999 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.828341961 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.828403950 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.828473091 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.829052925 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.829066038 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.829495907 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.829516888 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.830651999 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.830662012 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.930166960 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.930731058 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.930794001 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.930819035 CEST	49819	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.930840015 CEST	443	49819	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.936175108 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.936222076 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:11.936352015 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.938281059 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:11.938297033 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.287421942 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.290066957 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.293606043 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.330483913 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.337498903 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.337613106 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.475653887 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.530242920 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.584064960 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.602874994 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.602889061 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.603671074 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.603676081 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.604055882 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.604082108 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.604871035 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.604878902 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.606133938 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.606158018 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.607557058 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.607562065 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.608530045 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.608539104 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.609503984 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.609508991 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.610340118 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.610371113 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.610939980 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.610945940 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.700283051 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.700309992 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.700356007 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.700365067 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.700412989 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.701030016 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.701426029 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.701473951 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.702721119 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.703180075 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.703239918 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.704761028 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.704924107 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.705041885 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.707496881 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.707593918 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.707643032 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.736779928 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.736819029 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.736834049 CEST	49826	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.736841917 CEST	443	49826	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.738899946 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.738922119 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.739021063 CEST	49823	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.739028931 CEST	443	49823	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.740279913 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.740303993 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.740319014 CEST	49825	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.740325928 CEST	443	49825	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.742935896 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.742948055 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.743035078 CEST	49827	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.743040085 CEST	443	49827	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.744704008 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.744704008 CEST	49824	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.744718075 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.744730949 CEST	443	49824	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.755189896 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.755237103 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.755297899 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.757885933 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.757983923 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.758055925 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.758079052 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.758094072 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.760862112 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.760885000 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.760962963 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.761274099 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.761308908 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.762213945 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.762237072 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.762315989 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.762348890 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.762368917 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.762988091 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.763022900 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.763068914 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.763389111 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.763398886 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:12.763582945 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:12.763597012 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.418312073 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.419059038 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.419250965 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.419292927 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.420744896 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.420751095 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.421348095 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.421386003 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.421838045 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.421847105 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.436423063 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.446876049 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.446896076 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.447751999 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.447757959 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.454822063 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.455630064 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.456265926 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.456284046 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.457927942 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.457932949 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.463156939 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.463191986 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.464076042 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.464090109 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.517740965 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.517796993 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.517843008 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.517854929 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.517877102 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.517930031 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.518660069 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.519210100 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.519256115 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.535762072 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.535809040 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.535830021 CEST	49834	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.535840988 CEST	443	49834	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.536463976 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.536485910 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.536497116 CEST	49835	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.536504030 CEST	443	49835	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.540662050 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.540697098 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.540756941 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.540941000 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.540983915 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.541032076 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.541047096 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.541059017 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.541188002 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.541202068 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.546765089 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.546797037 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.546838045 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.546850920 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.546863079 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.546914101 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.547069073 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.547080994 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.547095060 CEST	49832	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.547099113 CEST	443	49832	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.550112963 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.550174952 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.550268888 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.550410032 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.550425053 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.559962034 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.560261965 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.560313940 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.560337067 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.560348034 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.560358047 CEST	49836	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.560363054 CEST	443	49836	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.564296007 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.564413071 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.564470053 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.564516068 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.564516068 CEST	49833	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.564537048 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.564547062 CEST	443	49833	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.629292011 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.629322052 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.629393101 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.632679939 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.632776022 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.632852077 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.633084059 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.633121014 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:13.633275032 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:13.633302927 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.201136112 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.210830927 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.240464926 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.249603987 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.251797915 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.283232927 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.300467014 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.322299004 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.331599951 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.331614971 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.331631899 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.331645966 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.332376957 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.332382917 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.332556963 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.332562923 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.332667112 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.332679987 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.333107948 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.333112001 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.333515882 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.333522081 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.334307909 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.334312916 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.334388971 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.334399939 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.334868908 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.334877014 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.428128958 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.428453922 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.428514957 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.428566933 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.428586006 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.428586960 CEST	49840	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.428592920 CEST	443	49840	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429295063 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429363012 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429460049 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.429589987 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429591894 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.429611921 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429625034 CEST	49841	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.429630995 CEST	443	49841	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429764032 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.429826975 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.430449009 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.430461884 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.430469036 CEST	49842	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.430473089 CEST	443	49842	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.431574106 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.431775093 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.431823015 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.431826115 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.431874037 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.432357073 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.432396889 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.432450056 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.432739019 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.432746887 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.432801008 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.433037043 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.433043003 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.433068037 CEST	49843	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.433072090 CEST	443	49843	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.433073997 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.433089972 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.433299065 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.433305979 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.434209108 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.434262991 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.434348106 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.434595108 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.434617043 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.435772896 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.436058998 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.436108112 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.436129093 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.436137915 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.436167955 CEST	49839	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.436173916 CEST	443	49839	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.436417103 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.436439991 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.436650991 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.438234091 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.438246965 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.443994999 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.444026947 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:14.444097996 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.445110083 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:14.445122957 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.069509983 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.070106030 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.070153952 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.070674896 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.070683956 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.072081089 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.072381973 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.072406054 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.072793007 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.072801113 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.073560953 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.073888063 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.073903084 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.074284077 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.074290991 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.094120979 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.094723940 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.094753981 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.095235109 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.095238924 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.176481009 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.177053928 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.177197933 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.177237988 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.177237988 CEST	49851	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.177261114 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.177273035 CEST	443	49851	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.181896925 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.181979895 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.182043076 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.182404041 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.182420969 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.182432890 CEST	49849	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.182439089 CEST	443	49849	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.185215950 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.185247898 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.185328960 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.187007904 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.187071085 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.187131882 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.187144995 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.187196970 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.187244892 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.190542936 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.190571070 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.191255093 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.191268921 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.191278934 CEST	49850	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.191286087 CEST	443	49850	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.193811893 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.193844080 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.193914890 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.195456982 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.195471048 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.196703911 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.196744919 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.196834087 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.196944952 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.196962118 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.203372002 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.203406096 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.203449965 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.203460932 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.203493118 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.204010010 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.204025984 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.204036951 CEST	49853	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.204041958 CEST	443	49853	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.211453915 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.211476088 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.211581945 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.230149984 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.230170012 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.239773989 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.239869118 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.239950895 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.240216970 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.240252972 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.831778049 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.832979918 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.832998991 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.834043026 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.835220098 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.835225105 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.837017059 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.837050915 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.838089943 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.838102102 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.876982927 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.877590895 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.877620935 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.878038883 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.878045082 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.878223896 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.878609896 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.878643990 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.879033089 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.879039049 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.881016016 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.881258965 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.881324053 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.881781101 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.881853104 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.882477045 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.882606983 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.883730888 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.883810997 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.883910894 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.883935928 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:15.935321093 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:15.936391115 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.936522007 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.936872959 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.937858105 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.937901974 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.937943935 CEST	49859	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.937961102 CEST	443	49859	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.940959930 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.941004992 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.941086054 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.941209078 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.941224098 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.980552912 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.980628014 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.980767012 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.980983973 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.980983973 CEST	49860	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.981007099 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.981019974 CEST	443	49860	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.984868050 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.984910011 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.985138893 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.985342979 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.985358953 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.986795902 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.986824036 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.986872911 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.986896992 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.986942053 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.987128973 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.987143993 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.987154007 CEST	49861	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.987159014 CEST	443	49861	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.989375114 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.989398003 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:15.989469051 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.989566088 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:15.989578009 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.189496040 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.189579964 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.189675093 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.189946890 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.189970970 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.189976931 CEST	49858	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.189982891 CEST	443	49858	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.194194078 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.194238901 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.194344044 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.194681883 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.194695950 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.200310946 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.200391054 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.200458050 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.200525045 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.200596094 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.200858116 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.200911999 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.206409931 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.206495047 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.212768078 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.212873936 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.212881088 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.212910891 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.212964058 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.219494104 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.219585896 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.227732897 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.227797031 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.227827072 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.227874994 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.287687063 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.287770033 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.287988901 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.288049936 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.290683031 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.290741920 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.297848940 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.297918081 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.298515081 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.298589945 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.308831930 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.308936119 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.311960936 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.312032938 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.312045097 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.314949989 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.314990997 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.315001965 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.323844910 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.324007988 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.324073076 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.352396965 CEST	49862	443	192.168.2.5	142.250.186.174
Oct 4, 2024 15:32:16.352421045 CEST	443	49862	142.250.186.174	192.168.2.5
Oct 4, 2024 15:32:16.577480078 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.578027964 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.578063011 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.578600883 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.578612089 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.629559994 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.673717022 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.673851013 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.686587095 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.686724901 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.686784029 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.721626997 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.834212065 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.876694918 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.991090059 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.991090059 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.991108894 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.991118908 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.991508961 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.991508961 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.991520882 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.991523981 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.995024920 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.995055914 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.995498896 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.995505095 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:16.995738029 CEST	49871	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:16.995765924 CEST	443	49871	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.092195988 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.092274904 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.092952013 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.097647905 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.097686052 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.097743988 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.098053932 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.100636959 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.100703955 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.100752115 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.523917913 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.523940086 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.523952007 CEST	49872	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.523957968 CEST	443	49872	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.524836063 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.524841070 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.524876118 CEST	49875	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.524880886 CEST	443	49875	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.525949001 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.525974035 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.525990963 CEST	49873	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.525996923 CEST	443	49873	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.541759014 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.541794062 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.541843891 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.542980909 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.542989016 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.544703960 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.544734955 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.545136929 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.545412064 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.545423985 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.546346903 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.546377897 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.546428919 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.549274921 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.549303055 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.549443960 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.663389921 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.663409948 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.683242083 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:17.683278084 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.912198067 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:17.952296972 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.090859890 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.090874910 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.092227936 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.092233896 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.194116116 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.194807053 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.194854975 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.194905996 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.194925070 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.194937944 CEST	49852	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.194947004 CEST	443	49852	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.237186909 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.237258911 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.237328053 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.238873959 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.238888025 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.344199896 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.344239950 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.344307899 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.344546080 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.344583988 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.344826937 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.346276045 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.346288919 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.346375942 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.346389055 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.357525110 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.359605074 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.366009951 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.368865013 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.368880987 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.369293928 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.369306087 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.369582891 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.369609118 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.369956017 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.369966030 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.371370077 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.371396065 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.372004986 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.372011900 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.375984907 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.377043009 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.377068043 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.377640009 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.377645969 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.464395046 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.464745045 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.464802027 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.465688944 CEST	49883	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.465704918 CEST	443	49883	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.466713905 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.466742992 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.466784954 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.466789007 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.466825008 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.472124100 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.472218990 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.472265005 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.473928928 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.473948002 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.473963022 CEST	49885	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.473972082 CEST	443	49885	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.478256941 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.478270054 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.478283882 CEST	49884	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.478291988 CEST	443	49884	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.485434055 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.485495090 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.485558033 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.489639044 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.489639044 CEST	49882	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.489711046 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.489737034 CEST	443	49882	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.497855902 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.497925043 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.497993946 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.502049923 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.502095938 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.502163887 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.503814936 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.503855944 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.503915071 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.505728960 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.505753994 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.506161928 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.506210089 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.506722927 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.506722927 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.506756067 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.507940054 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.507941008 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:18.507966042 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.507967949 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:18.986253977 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.987310886 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.991132975 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.991152048 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.991252899 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.991270065 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.991647005 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.991718054 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.991805077 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.991904974 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.992379904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.992434025 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.992840052 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:18.993117094 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:18.993865013 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.011861086 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.011862040 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.012051105 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.012181997 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.012202024 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.012243986 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.012564898 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.012648106 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.013024092 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.013040066 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.026894093 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.026945114 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.027044058 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.027369976 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.027388096 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.095160961 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.095166922 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.095185995 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.095190048 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.114272118 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.114346027 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.114778996 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.115293026 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.115317106 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.115586996 CEST	49889	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.115596056 CEST	443	49889	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.120742083 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.120790005 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.121169090 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.121486902 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.121504068 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.170068979 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.170428991 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.172532082 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.172554970 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.173587084 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.173592091 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.174384117 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.174392939 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.175369978 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.175374031 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.176474094 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.176913977 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.176950932 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.177405119 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.177421093 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.187205076 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.189076900 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.189102888 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.190613985 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.190623045 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.267091036 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.267215014 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.272161007 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.272701979 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.272780895 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.273610115 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.273762941 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.273823023 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.273866892 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.281286001 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.282020092 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.282460928 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.288784027 CEST	49893	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.288834095 CEST	443	49893	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.291574001 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.291589975 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.291707039 CEST	49894	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.291723967 CEST	443	49894	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.293030977 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.293030977 CEST	49895	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.293055058 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.293066025 CEST	443	49895	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.293997049 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.294722080 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.294758081 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.294802904 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.294864893 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.294877052 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.300482988 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.300503969 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.300565958 CEST	49896	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.300570965 CEST	443	49896	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.305429935 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.305470943 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.305648088 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.306762934 CEST	49892	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.306771040 CEST	443	49892	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.307689905 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.307703018 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.309705973 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.309767962 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.309835911 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.310349941 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.310375929 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.314774036 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.315418959 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.315445900 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.315670967 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.317694902 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.317703009 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.317831993 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.318219900 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.318233013 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.318872929 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.318892002 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.359416962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887775898 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887823105 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887834072 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.887855053 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887866020 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887888908 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.887897015 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.887932062 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.888703108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.888735056 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.888753891 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.888760090 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.888771057 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.888798952 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.888807058 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.888848066 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.889415979 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.889679909 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.889723063 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.891474009 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.891520023 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.892321110 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.892366886 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.892765999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.892811060 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.892987013 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893018007 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893030882 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.893038034 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893073082 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.893318892 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:19.893744946 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893774986 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893788099 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.893798113 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.893829107 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.894589901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.894650936 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.894726038 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.894906998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.895031929 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.895075083 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.895266056 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.895473003 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.895498991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.895508051 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.895519972 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.895553112 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.896045923 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.896095991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.896130085 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.896143913 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.896989107 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.897016048 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.897038937 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.897051096 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.897155046 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.897587061 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.898096085 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.898124933 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.898142099 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.898163080 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.898199081 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.898629904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.899359941 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.899406910 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.899425030 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.899625063 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.899642944 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.900226116 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.900274038 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.901510000 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.901551962 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.901890039 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.901966095 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.904911995 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:19.904930115 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:19.918642998 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.918741941 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.918776989 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.918859959 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.918903112 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.918912888 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.919528008 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.919569969 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.919589043 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.925610065 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.925648928 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.925683975 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.925709009 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.925746918 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.931858063 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.935409069 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.935476065 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.935477018 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.935497046 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.935534000 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.939877033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.944329023 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.944371939 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.944407940 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.944427967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.944462061 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.948676109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.952985048 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.953042030 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.953057051 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.953078985 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.953113079 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.957348108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.961914062 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.961949110 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.961977005 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.961996078 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.962033987 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.966223001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.970123053 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.970191002 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.970200062 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.970212936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.970251083 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.974251986 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.978646040 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.978679895 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.978714943 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.978732109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.978765965 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.982297897 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.985193968 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:19.985593081 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.985635996 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.985646963 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.989789009 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.989824057 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.989850998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.989861965 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.989896059 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.992697001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.996125937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.996156931 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.996172905 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.996185064 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:19.996213913 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:19.999946117 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.000001907 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.000042915 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.000052929 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.006719112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.006758928 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.006769896 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.006952047 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.006989002 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.006994963 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.009572029 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.009632111 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.009641886 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.012932062 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.012990952 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.013000011 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.015057087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.015109062 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.015116930 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.017412901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.017462969 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.017472029 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.019612074 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.019654036 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.019664049 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.021680117 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.021733999 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.021744013 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.023837090 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.023904085 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.023914099 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.026086092 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.026160955 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.026171923 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.028197050 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.028242111 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.028251886 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.030522108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.030559063 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.030567884 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.035509109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.035559893 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.035569906 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.035803080 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.035841942 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.035847902 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.036397934 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.036421061 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.036897898 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.036904097 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.037277937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.037322998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.037329912 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.039233923 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.039283037 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.039290905 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.041239977 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.041285992 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.041292906 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.043127060 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.043176889 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.043184996 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.045439005 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.045476913 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.045484066 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.047445059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.047491074 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.047497988 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.049381018 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.049437046 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.049448013 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.051501989 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.051542997 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.051552057 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.053843021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.053911924 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.053930998 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.055368900 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.055412054 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.055438995 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.057585955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.057642937 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.057657003 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.059609890 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.059683084 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.059690952 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.061311007 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.061358929 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.061366081 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.063520908 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.063580036 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.063587904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.065218925 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.065268040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.065268993 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.065284014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.065326929 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.067471981 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.069526911 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.069585085 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.069592953 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.073554039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.073596001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.073616028 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.073626041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.073662043 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.079658031 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.080585003 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.080634117 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.080642939 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081028938 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081032038 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.081098080 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.081104994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081141949 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081168890 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081181049 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.081188917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081222057 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.081523895 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081892967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081918955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081928015 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.081935883 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.081967115 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.083482981 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.085375071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.085402012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.085418940 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.085429907 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.085464954 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.086889029 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.087505102 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.088193893 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.088491917 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.088546991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.088593960 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.088601112 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.088618994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.088658094 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.090214968 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.092158079 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.092215061 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.092226028 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.093508005 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.093543053 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.093556881 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.093565941 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.093602896 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.095171928 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.096827984 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.096880913 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.096889973 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.099034071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.099090099 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.099097967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.099921942 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.099966049 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.099973917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.101315022 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.101346970 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.101360083 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.101373911 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.101404905 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.101413012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.103221893 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.103275061 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.103286982 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.104357958 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.104403019 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.104413033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.105809927 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.105864048 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.105875015 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.107307911 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.107357979 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.107369900 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.109302998 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.109354973 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.109364986 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.111402988 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.111624002 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.111726999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.111776114 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.111792088 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.111933947 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.111968994 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.111974955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116163969 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116247892 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.116265059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116487980 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116522074 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116525888 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.116539001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.116569996 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.116579056 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124074936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124123096 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124145985 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.124157906 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124190092 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124196053 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.124203920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.124243021 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.128982067 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.129121065 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.129175901 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.129184008 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.129262924 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.129296064 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.129303932 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135559082 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135638952 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.135648012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135857105 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135879993 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135890961 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.135899067 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.135929108 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.135936022 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.136481047 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.136547089 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.136594057 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.136620998 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.136653900 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.136691093 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.139893055 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.139925957 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.139955997 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.139957905 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.139971018 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.139991999 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.140140057 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.140172958 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.140177965 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.140187025 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.140211105 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.145153046 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.145690918 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.145716906 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.145735979 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.145745039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.145776987 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.145858049 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.151963949 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.151995897 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.152039051 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.152049065 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.152101040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.152143955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.152194023 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.152228117 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.152235031 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158016920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158049107 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158085108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158111095 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.158119917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158154011 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.158668041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158691883 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158724070 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.158730984 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.158760071 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.168359041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.168548107 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.168597937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.168603897 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.168612957 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.168658018 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.168664932 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169239998 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169265985 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169279099 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.169286966 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169316053 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.169322014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169351101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.169382095 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.169390917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.171550035 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.171607971 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.171619892 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.171674967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.171714067 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.171721935 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.171967983 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.172003031 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.172009945 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.176713943 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.176744938 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.176803112 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.176811934 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.176848888 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.177258015 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.177319050 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.177361012 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.177367926 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.181402922 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.181432962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.181443930 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.181452990 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.181482077 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.181873083 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.182579041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.182621956 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.182629108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.186924934 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.186971903 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.186979055 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.187087059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.187113047 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.187124014 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.187130928 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.187170982 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.187176943 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.187462091 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.187561035 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.189357996 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.190934896 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.190989971 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.190995932 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.191760063 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.191796064 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.191802025 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.191812992 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.191844940 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.191852093 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195214987 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195272923 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.195280075 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195456982 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195488930 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195494890 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.195502043 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.195533991 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.195539951 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.202860117 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.202941895 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.202950001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.203026056 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.203058958 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.203064919 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.203072071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.203100920 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.203107119 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.205867052 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.205899000 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.207199097 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.207237005 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.207447052 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.207461119 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.212713957 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.212748051 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.212820053 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.213001013 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.213071108 CEST	443	49901	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.213140011 CEST	49901	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.213645935 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.213656902 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.213949919 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.213999033 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.214006901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214277983 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214307070 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214320898 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.214329004 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214364052 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.214370012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214894056 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214922905 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214929104 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.214936018 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.214975119 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.215221882 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224355936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224405050 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224416018 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.224426031 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224457026 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.224462986 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224816084 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224843025 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224855900 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.224863052 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.224893093 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.225444078 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.225450993 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.226203918 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.226217031 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.226634979 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.226650000 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.226984024 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.227128029 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.227133036 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.227473974 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.227500916 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.227526903 CEST	49902	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.227533102 CEST	443	49902	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.228552103 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.228566885 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.229022980 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.229027987 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.230954885 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231034040 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231072903 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231080055 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.231087923 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231122017 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.231122971 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231137037 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.231174946 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.231339931 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.231359005 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.232482910 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.232496977 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.236480951 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.236548901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.236589909 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.236597061 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.236890078 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.236936092 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.236942053 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241672039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241707087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241734982 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241734982 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.241748095 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241774082 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.241803885 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241833925 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241836071 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.241844893 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.241868973 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.245747089 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246083021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246112108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246124029 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.246138096 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246171951 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246181965 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.246189117 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.246225119 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.256350040 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256484032 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256519079 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.256526947 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256864071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256890059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256911993 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.256913900 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256926060 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.256952047 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.257339954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.257378101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.257381916 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.257389069 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.257421017 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.257427931 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259282112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259315014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259321928 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.259330034 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259368896 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.259375095 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259432077 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.259468079 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.259480953 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265042067 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265072107 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265113115 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.265121937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265156984 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.265427113 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265503883 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.265542030 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.265549898 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.273664951 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.273695946 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.274276018 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.274588108 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.274610043 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.274632931 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.274672985 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.274682999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.274804115 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.274832010 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.274840117 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.274847031 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.274879932 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.274885893 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275304079 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275336981 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275347948 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.275355101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275401115 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.275408983 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275859118 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.275907040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.275913000 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278443098 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278489113 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.278496027 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278743982 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278781891 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.278789043 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278892994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.278927088 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.278934002 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.282917023 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.282954931 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.282963991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.283075094 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.283118010 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.283126116 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.283390999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.283426046 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.283432961 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289468050 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289520979 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.289530039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289556980 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289586067 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289596081 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.289602041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.289644003 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.289650917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298360109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298403978 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.298414946 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298634052 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298667908 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298672915 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.298681974 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.298715115 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.308690071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.308856010 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.308908939 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.308912039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.308923006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.308957100 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.309067011 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309432983 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309467077 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309474945 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.309483051 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309514999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309537888 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.309539080 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309550047 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.309578896 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.310194969 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.310233116 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.315275908 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315325022 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315366983 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.315375090 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315496922 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315522909 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315531015 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.315540075 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.315571070 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.322321892 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.322391033 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.322442055 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.323240995 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.323256016 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.323266029 CEST	49903	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.323270082 CEST	443	49903	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.324232101 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.324516058 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.324590921 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.326772928 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.326853037 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.326908112 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.326917887 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327164888 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327208042 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.327215910 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327351093 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327564001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327585936 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.327593088 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327671051 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.327714920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327915907 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327941895 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.327965021 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.327971935 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.328002930 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.328191996 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.328581095 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.328701973 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.330862999 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:20.330900908 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:20.330950022 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:20.331671000 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:20.331686974 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:20.332412004 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.332420111 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.332535982 CEST	49906	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.332540035 CEST	443	49906	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.332861900 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.333148003 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.333201885 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.333208084 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.333282948 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.333317995 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.333326101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.334846973 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.334877014 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.334913015 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.334930897 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.334944010 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.334985971 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.335818052 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.335834980 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.335846901 CEST	49904	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.335855007 CEST	443	49904	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.338191986 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.338196039 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.338212967 CEST	49905	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.338216066 CEST	443	49905	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.343796015 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.343835115 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.343883038 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.343910933 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.343950987 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.343957901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344185114 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344221115 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.344227076 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344501019 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344526052 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344541073 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.344552994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344582081 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.344588995 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344913006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.344954967 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.344961882 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.345088959 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.345113039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.345125914 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.345133066 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.345160961 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.347004890 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.347018957 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.347033978 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.347248077 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.347279072 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.347284079 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.347290993 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.347326040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.347332001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353279114 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353327990 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.353336096 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353497028 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353527069 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353549957 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.353555918 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.353585958 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.353591919 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.356095076 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.356113911 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.356183052 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.356440067 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.356446981 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.359352112 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.359359980 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.359430075 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.361131907 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.361141920 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.362492085 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362545013 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.362552881 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362639904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362668991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362694979 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.362701893 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362731934 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.362735987 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362746954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.362782955 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.362962961 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.363029003 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.363059044 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.363064051 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.363075972 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.363100052 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.363348961 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.364500046 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.364516020 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.364567041 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.364700079 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.364707947 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.368556023 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.368587971 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.368606091 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.368614912 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.368650913 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.368652105 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.368663073 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.368702888 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.368709087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.370898962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.370935917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.370954990 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.370963097 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.371009111 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.371027946 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.371077061 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.371112108 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.371118069 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.374665022 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.374718904 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.374728918 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.375492096 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.375520945 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.375536919 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.375544071 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.375590086 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.375596046 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386001110 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386090994 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.386099100 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386219025 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386248112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386276007 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.386281967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.386315107 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.386696100 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.394362926 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:20.394385099 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:20.394437075 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:20.394808054 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:20.394818068 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:20.396033049 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.396096945 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.396104097 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.396356106 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.396387100 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.396393061 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.396399021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.396431923 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.396780014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397106886 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397138119 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397145033 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.397151947 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397186041 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.397267103 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397393942 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.397439003 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.397445917 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.402710915 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.402739048 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.402789116 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.402801991 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.402833939 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.403024912 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.403074026 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.403106928 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.403112888 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414540052 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414597034 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.414608955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414870977 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414901018 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414933920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414933920 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.414944887 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.414974928 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.415659904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.415703058 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.415712118 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.417284966 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.417315006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.417334080 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.417340994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.417393923 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.431607008 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.431754112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.431792021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.431804895 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.431816101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.431850910 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.432004929 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432059050 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432091951 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.432099104 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432326078 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432358027 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.432363987 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432729959 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432760000 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432765007 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.432771921 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.432807922 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.432816029 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433341026 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433377981 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433393955 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.433401108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433429956 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.433434010 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433444023 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.433476925 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.434518099 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.434612036 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.434725046 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.434731007 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.434793949 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.434824944 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.434830904 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.449842930 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.449872971 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.449912071 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.449927092 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.449959040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.449965954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450417995 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450462103 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.450468063 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450505972 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450540066 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450540066 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.450551033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.450583935 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.451168060 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451240063 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451267958 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451276064 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.451282024 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451313972 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.451766014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451828957 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.451862097 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.451868057 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.452337980 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.452389002 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.452395916 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454360962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454389095 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454448938 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.454457045 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454494953 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.454694033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454750061 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.454777956 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.454785109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458439112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458471060 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458503962 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.458515882 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458553076 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.458651066 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458937883 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.458990097 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.458997011 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462125063 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462176085 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.462183952 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462306976 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462341070 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.462347984 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462682009 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.462721109 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.462727070 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.483800888 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.483835936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.483875990 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.483897924 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.483931065 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.484152079 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484196901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484235048 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.484241962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484745979 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484776974 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484796047 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.484803915 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.484833002 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.485227108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485276937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485311031 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.485317945 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485728025 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485754967 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485764027 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.485770941 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485810041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485821009 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.485826969 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.485879898 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.486598015 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490468979 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490534067 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.490542889 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490720034 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490745068 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490762949 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.490768909 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.490803003 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.491040945 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502258062 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502388000 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.502398014 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502584934 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502623081 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502629042 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.502635956 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.502666950 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.502674103 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503745079 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503787041 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503798962 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.503809929 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503839970 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503844023 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.503850937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.503890991 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.519475937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.519815922 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.519850969 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.519857883 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.519871950 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.519906998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.519912958 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520179033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520217896 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.520226002 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520520926 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520550013 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520564079 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.520570993 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.520605087 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.520978928 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521028042 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521060944 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521070004 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.521075964 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521106005 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.521783113 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521939039 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521975040 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.521981955 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.521987915 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.522020102 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.522418022 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.522978067 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.523014069 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.523019075 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.523025990 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.523060083 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.523066044 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.537861109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.537909031 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.537920952 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538144112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538175106 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538211107 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.538211107 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538225889 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538254023 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.538944960 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.538983107 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.538994074 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.539124966 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.539155006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.539175987 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.539185047 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.539226055 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.539498091 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.541965961 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542016983 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.542027950 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542059898 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542095900 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.542104006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542382002 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542408943 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542418957 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.542426109 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.542457104 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.542913914 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543152094 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543188095 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543216944 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543217897 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.543229103 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543271065 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.543278933 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.543312073 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.549860954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550234079 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550266027 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550288916 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550297976 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.550311089 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550333023 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.550733089 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550771952 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.550779104 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550816059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.550863981 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.550872087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.551374912 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.551413059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.551422119 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.551429987 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.551469088 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.572045088 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572314024 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572338104 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572365999 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572366953 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.572398901 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572415113 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.572932959 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572968960 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572993040 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.572995901 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.573004007 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573034048 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.573586941 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573630095 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.573638916 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573885918 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573913097 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573929071 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.573936939 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.573972940 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.573980093 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.574018955 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.574057102 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.574065924 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590233088 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590261936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590300083 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.590327024 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590370893 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.590570927 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590951920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.590991974 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.591000080 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.591090918 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.591123104 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.591128111 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.591135025 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.591169119 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.591176033 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592042923 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592081070 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592089891 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.592097998 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592139006 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.592145920 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592597961 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592633009 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.592641115 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592674971 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.592710018 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.592715979 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607038021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607091904 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.607121944 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607189894 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607218027 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607225895 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.607234001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607264996 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.607664108 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607938051 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607965946 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.607985973 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.607995987 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.608376026 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.608397961 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.608407021 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.608441114 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.608453035 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.608460903 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.608494997 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.608505011 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.609287024 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.609318018 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.609333038 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.609344006 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.609374046 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.609384060 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.625647068 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.625713110 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.625746965 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.625900030 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.625936985 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.625956059 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.625967026 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626003027 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.626012087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626511097 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626547098 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626553059 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.626562119 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626596928 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.626605988 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626619101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.626679897 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.627154112 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.627451897 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.627489090 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.627497911 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.627511978 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.627547026 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.627553940 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.628312111 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.628360033 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.628366947 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.629735947 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.629780054 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.629789114 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630130053 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630162001 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630167007 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.630175114 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630207062 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.630549908 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630956888 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.630989075 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.631006956 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.631015062 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.631050110 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.631055117 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.631067038 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.631091118 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.637468100 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.637542009 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.637579918 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.637592077 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.637923956 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.637954950 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.637960911 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.637969017 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.638003111 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.660160065 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.660173893 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.660191059 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.660224915 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.660247087 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.660268068 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.660273075 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.660310984 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.661659002 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.661680937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.661715984 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.661721945 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.661768913 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.679382086 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.679419994 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.679465055 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.679482937 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.679518938 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.695034981 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.695059061 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.695122004 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.695142984 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.695174932 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.695189953 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.713538885 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.713562012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.713654995 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.713674068 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.713716030 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.715136051 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.715158939 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.715198040 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.715204954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.715240955 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.717824936 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.717849016 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.717924118 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.717931986 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.717945099 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.717966080 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.725334883 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.725354910 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.725419998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.725430012 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.725524902 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.747437954 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.747476101 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.747538090 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.747551918 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.748558998 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.788389921 CEST	49891	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.788419962 CEST	443	49891	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.899826050 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.899869919 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.899936914 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.900314093 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.900325060 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.914864063 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.916901112 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.916918993 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.917622089 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:20.917625904 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:20.937117100 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.937164068 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.937310934 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.937647104 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:20.937658072 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:20.958775043 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.959785938 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.959795952 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.960186005 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.960232019 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.960902929 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.960938931 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.961108923 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.961165905 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:20.961730957 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:20.961739063 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.003645897 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.006848097 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.013951063 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.014019012 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.014074087 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.024270058 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.033157110 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.043673992 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.043688059 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.044754982 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.044759035 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045047998 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045079947 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045243979 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045255899 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045495033 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045500994 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045717001 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045721054 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045844078 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045861006 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.045876980 CEST	49910	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.045882940 CEST	443	49910	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.049061060 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.049097061 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.049424887 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.049424887 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.049453020 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.055911064 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.057353020 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.057370901 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.057804108 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.058065891 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.058079958 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.058418989 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.058486938 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.058623075 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.058631897 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.059406996 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.059423923 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.059828997 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.059847116 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.059906960 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.059916019 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.060050964 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.060596943 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.060698032 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.060779095 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.062124014 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.062155008 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.062217951 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.062330961 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.063797951 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.063925028 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.064024925 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.064033031 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.064343929 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.064359903 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.103399038 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.123599052 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.144829988 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.144958019 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145190954 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145252943 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.145387888 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.145387888 CEST	49921	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.145406961 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145417929 CEST	443	49921	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145687103 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145731926 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.145736933 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.145900965 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.146104097 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.146120071 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.146127939 CEST	49920	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.146135092 CEST	443	49920	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.147963047 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.147985935 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.148024082 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.148055077 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.148092031 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.148335934 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.148340940 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.148365021 CEST	49922	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.148369074 CEST	443	49922	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.149712086 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.149734974 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.149787903 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.149821043 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.149825096 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.149880886 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.150087118 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.150096893 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.150515079 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.150528908 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.151530027 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.151550055 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.151633024 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.151763916 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.151773930 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.164753914 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.164823055 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.164870977 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.165254116 CEST	49923	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.165266991 CEST	443	49923	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.174103022 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.174115896 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.174166918 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.174386978 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.174396038 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.262485981 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.262515068 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.262578011 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.262590885 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.271959066 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.272002935 CEST	443	49907	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.272072077 CEST	49907	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.328423023 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.328619003 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.328660011 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.336370945 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.336469889 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.336498976 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.336525917 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.336551905 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.336565971 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.336582899 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.337299109 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.337383032 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.364841938 CEST	49918	443	192.168.2.5	142.250.184.193
Oct 4, 2024 15:32:21.364854097 CEST	443	49918	142.250.184.193	192.168.2.5
Oct 4, 2024 15:32:21.372859001 CEST	49924	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.372886896 CEST	443	49924	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.540690899 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.552927017 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.552939892 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.553426981 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.558280945 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.558368921 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.559051991 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.559087992 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.559111118 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.580816031 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.592370033 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.592418909 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.593355894 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.594495058 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.594628096 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.595626116 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.595669985 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.595690966 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.603404045 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.697494984 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.719919920 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.719949007 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.721291065 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.724492073 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.725943089 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.727133989 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.738008022 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:21.783406019 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.788785934 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.795157909 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.809622049 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.809643984 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.811575890 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.811602116 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.819807053 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.819833040 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.819922924 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.820331097 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.820338964 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.821028948 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.821064949 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.823529005 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.823534966 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.825201988 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.826143026 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.826244116 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.828610897 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.830029011 CEST	49932	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.830046892 CEST	443	49932	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.833153009 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.835189104 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.835201979 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.835614920 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.835618019 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.835714102 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.835747957 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.836325884 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.836333036 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.903377056 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.904181004 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.904588938 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.910906076 CEST	49933	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:21.910938025 CEST	443	49933	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:21.912410975 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:21.912444115 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:21.912740946 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:21.913397074 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.913568974 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:21.913590908 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:21.913717031 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:21.913767099 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:21.913793087 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:21.914323092 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.914382935 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.915839911 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:21.915853024 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:21.918354988 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.918378115 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.918431997 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.918570995 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.918575048 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.918585062 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.918586969 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.918632984 CEST	49938	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.918642044 CEST	443	49938	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.920363903 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.921370029 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.921433926 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.921698093 CEST	49942	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.921722889 CEST	443	49942	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.925013065 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925033092 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.925111055 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925116062 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925137043 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.925203085 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925359011 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925368071 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.925468922 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.925484896 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.931596994 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.931785107 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.931796074 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.932032108 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.932219982 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:21.932226896 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:21.932231903 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.932307959 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.932478905 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.932488918 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.932501078 CEST	49940	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.932504892 CEST	443	49940	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.933027983 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.933295965 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.933340073 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.933346987 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.933382034 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.933443069 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.933445930 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.933469057 CEST	49943	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.933473110 CEST	443	49943	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.941442013 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.941469908 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.941521883 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.941519022 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.941597939 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.942606926 CEST	49941	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.942630053 CEST	443	49941	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.950719118 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.950761080 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.951073885 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.951304913 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.951328993 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.963434935 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.963464975 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.964000940 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.965581894 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.965610027 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.965704918 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.975498915 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.975523949 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.975589037 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:21.975608110 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:21.979650974 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.980072975 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:21.980127096 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:22.001794100 CEST	49939	443	192.168.2.5	142.250.186.164
Oct 4, 2024 15:32:22.001815081 CEST	443	49939	142.250.186.164	192.168.2.5
Oct 4, 2024 15:32:22.557629108 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.569623947 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.573138952 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.626146078 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.635037899 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.648083925 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.649327993 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.649445057 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.651336908 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.651782990 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.731316090 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.731342077 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.731590986 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.731610060 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.731800079 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.731813908 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.731854916 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.732100010 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.732120037 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.732167959 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.732511044 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.732553959 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.732836962 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.732883930 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.733730078 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.733741999 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.734894991 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.734906912 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.734947920 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.736015081 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.736027956 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.736489058 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.736504078 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.736526012 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.736551046 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.737199068 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.737224102 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.737237930 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.737684965 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.744457006 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.744522095 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.745214939 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.745351076 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.746735096 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.746817112 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.752979994 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.753063917 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.762025118 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.762034893 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.762090921 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.762104034 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:22.765105963 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.765120029 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.768697977 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.768712997 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.796530962 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.821301937 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.821316004 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.821321964 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.821345091 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.821408987 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.849134922 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.849144936 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.849906921 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.849911928 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.849971056 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.849971056 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.849997997 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.850017071 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.850354910 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.850361109 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.850907087 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.850910902 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.851425886 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.851449013 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.851805925 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.851811886 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.852072954 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.852078915 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.852529049 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.852534056 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.898976088 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.898982048 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:22.900322914 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.955893040 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.955935001 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.955974102 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.955988884 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.956005096 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.956038952 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.956046104 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.956136942 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.956176043 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.958475113 CEST	49959	443	192.168.2.5	142.250.186.100
Oct 4, 2024 15:32:22.958492994 CEST	443	49959	142.250.186.100	192.168.2.5
Oct 4, 2024 15:32:22.958525896 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.958863974 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.959122896 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.962131023 CEST	49957	443	192.168.2.5	142.250.186.161
Oct 4, 2024 15:32:22.962161064 CEST	443	49957	142.250.186.161	192.168.2.5
Oct 4, 2024 15:32:22.963825941 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.963893890 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.963929892 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.964114904 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.964159966 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.964442015 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.965900898 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.965903044 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.965912104 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.965918064 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.965930939 CEST	49968	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.965938091 CEST	443	49968	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.965939999 CEST	49964	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.965945005 CEST	443	49964	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.966279030 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.966341972 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.966619968 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.967659950 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.967716932 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.967768908 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.969187021 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.969254017 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.971045971 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.972078085 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.972078085 CEST	49966	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.972099066 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.972107887 CEST	443	49966	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.972662926 CEST	49963	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.972672939 CEST	443	49963	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.979231119 CEST	49967	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.979238987 CEST	443	49967	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.983306885 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.983336926 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.983467102 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984107971 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984126091 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.984215021 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984246969 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984263897 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.984508991 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984631062 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984642029 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.984808922 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984817982 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.984930992 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.984941006 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.984961033 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985016108 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985024929 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.985371113 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985371113 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985395908 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.985415936 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:22.985502958 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985642910 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:22.985658884 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.010014057 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.010062933 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.012923956 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.012923956 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.012954950 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.045829058 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.046113014 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.046174049 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.050741911 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.050873041 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.050911903 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.093144894 CEST	49962	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.093161106 CEST	443	49962	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.095005035 CEST	49965	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.095022917 CEST	443	49965	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.305845022 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.305895090 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.306031942 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.306468964 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.306485891 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.481775999 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.481806993 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:23.481903076 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.488059044 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.488071918 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:23.489887953 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.489933014 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:23.490005016 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.490833998 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:23.490845919 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:23.632654905 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.634659052 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.634679079 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.635137081 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.635144949 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.635910034 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.636284113 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.636310101 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.636723995 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.636728048 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.641319036 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.641735077 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.641765118 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.642191887 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.642206907 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.643019915 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.643470049 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.643490076 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.643891096 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.643949986 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.644589901 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.644833088 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.644833088 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.645114899 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.645181894 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.651051044 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.651714087 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.651742935 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.652652025 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.652658939 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.666846991 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.667439938 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.667455912 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.667900085 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.667907953 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.687414885 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.723512888 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.723566055 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.723901033 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.724392891 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.724407911 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.736172915 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.736238003 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.736289978 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.736607075 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.736624956 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.736634970 CEST	49975	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.736640930 CEST	443	49975	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.739662886 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.739686012 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.739727974 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.739742041 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.739788055 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.740089893 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.740107059 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.740118980 CEST	49977	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.740124941 CEST	443	49977	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.742316961 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.742374897 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.742707014 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.743027925 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.743027925 CEST	49979	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.743050098 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.743061066 CEST	443	49979	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.743393898 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.743417978 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.743486881 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.744174957 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.744185925 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.745265961 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.745316029 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.745398998 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.745629072 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.745640039 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.746202946 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.746217012 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.746323109 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.746547937 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.746557951 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.754456997 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.754529953 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.754826069 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.754986048 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.755002975 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.755014896 CEST	49976	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.755019903 CEST	443	49976	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.758115053 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.758133888 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.758239985 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.758586884 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.758598089 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.778363943 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.778455973 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.778553963 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.778681993 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.778706074 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.778718948 CEST	49978	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.778724909 CEST	443	49978	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.783993006 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.784035921 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.784117937 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.784579039 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:23.784594059 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:23.797183990 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.797204018 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.936513901 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.936744928 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.936765909 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.937839031 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.937930107 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.938266993 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.938338041 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.938419104 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.943034887 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.943218946 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.943232059 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.944523096 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.944551945 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.944696903 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.944740057 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.944747925 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.944899082 CEST	443	49981	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.944925070 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.945245028 CEST	49981	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.945494890 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:23.945509911 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:23.983411074 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:23.998198986 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:23.998230934 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.120613098 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.120867968 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.120901108 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.121258974 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.121907949 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.121963978 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.122107029 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.122107029 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.122128963 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.185683966 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.209359884 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.209362030 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.209412098 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.209465981 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.209465027 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.209486008 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.209562063 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.209567070 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.209657907 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.209671021 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.210050106 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.210398912 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.210467100 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.210742950 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.216090918 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.216144085 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.216162920 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.216171980 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.216213942 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.216219902 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.221885920 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.221946001 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.221971989 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.228173018 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.228225946 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.228235006 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.255403042 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.295061111 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.296128988 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.298908949 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.298933029 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.298964024 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.298974037 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.299015999 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.305095911 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.311570883 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.311599016 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.311616898 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.311625004 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.311666965 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.317972898 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.324101925 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.324126005 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.324167967 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.324182034 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.324218988 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.325849056 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.327223063 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.327378988 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.328668118 CEST	49989	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.328687906 CEST	443	49989	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.330272913 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.336277962 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.336323023 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.336327076 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.336345911 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.336388111 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.342020988 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.347927094 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.347965956 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.348015070 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.348036051 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.348202944 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.353996038 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.359723091 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.359761000 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.359780073 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.359797955 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.359857082 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.365674973 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.382112980 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.383136034 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.383171082 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.383196115 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.383224010 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.383285046 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.384476900 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.384905100 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.391314983 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.391360044 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.391510963 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.391541004 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.391585112 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.391649008 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.391652107 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.392288923 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.394350052 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.394462109 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.396461964 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.400262117 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.401801109 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.401860952 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.401890993 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.401941061 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.401964903 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.401999950 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.402054071 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.407321930 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.407452106 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.407506943 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.413440943 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.413508892 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.413554907 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.418814898 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.418879986 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.418912888 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.422487974 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.423156977 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.423254013 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.423285961 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.423949957 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.424983025 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.425002098 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.425000906 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.425020933 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.429728985 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.429796934 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.429821014 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.431767941 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.431798935 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.432949066 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.432957888 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.434716940 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.435091972 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.435116053 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.439554930 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.439604044 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.439621925 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.439946890 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.440413952 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.440443993 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.443403959 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.444118023 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.444161892 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.444186926 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.446887970 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.446913004 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.449733973 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.449798107 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.449826956 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.453470945 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.453572989 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.453602076 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.456705093 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.456948996 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.456978083 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.460683107 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.460766077 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.460793018 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.464581966 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.464636087 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.464663982 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.468857050 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.468873024 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.469119072 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.469139099 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.469604969 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.469611883 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.469786882 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.469791889 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.471256971 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.471319914 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.471343040 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.477400064 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.478132963 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.478158951 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.481496096 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.482985020 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.483011007 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496480942 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496520042 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496551037 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496581078 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496583939 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496613979 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496639013 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496653080 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496656895 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496663094 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496702909 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496707916 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496736050 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496772051 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496800900 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496804953 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496809959 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.496829033 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.496928930 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.497028112 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.497028112 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.497078896 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.497176886 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.497189045 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.497587919 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.497643948 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.497652054 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.499516964 CEST	49983	443	192.168.2.5	142.250.184.238
Oct 4, 2024 15:32:24.499552965 CEST	443	49983	142.250.184.238	192.168.2.5
Oct 4, 2024 15:32:24.502552032 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.502649069 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.506084919 CEST	49988	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:24.506100893 CEST	443	49988	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:24.525253057 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.526051044 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.526145935 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.526187897 CEST	49992	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.526207924 CEST	443	49992	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.532413006 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.532450914 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.532922029 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.533704996 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.533715010 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547166109 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547195911 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547241926 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547291040 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.547327995 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.547519922 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547543049 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547568083 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.547655106 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.548444986 CEST	49993	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.548465967 CEST	443	49993	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.549539089 CEST	49994	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.549551010 CEST	443	49994	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.553653955 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.553688049 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.553769112 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.553930998 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.553987980 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.554023981 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.554038048 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.554130077 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.554209948 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.554224014 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.566926003 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567060947 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567269087 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.567400932 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.567400932 CEST	49996	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.567418098 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567428112 CEST	443	49996	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567740917 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567773104 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567816973 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.567873001 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.569530010 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.569549084 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.569561958 CEST	49995	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.569569111 CEST	443	49995	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.572716951 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.572768927 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.572828054 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.573656082 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.573678970 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.575686932 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.575714111 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.577178955 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.577323914 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:24.577333927 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:24.579051018 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.579334021 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.579360008 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.579790115 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.579845905 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.580511093 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.580584049 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.581459999 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.581526995 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.581691980 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.612936020 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.612997055 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.613073111 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.614044905 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.614062071 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.623406887 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.686568022 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.686686039 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.686749935 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.686774969 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.688935995 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.689080954 CEST	443	49991	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.689162970 CEST	49991	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.692778111 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.692790031 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.759234905 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.759265900 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.759334087 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.759620905 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.759630919 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.794039011 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.884668112 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.884804010 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.884917974 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.884929895 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.912455082 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.912537098 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.912725925 CEST	443	49998	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.912746906 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.912772894 CEST	49998	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.916095018 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.916151047 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:24.916353941 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.916685104 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:24.916696072 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.198005915 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.201411009 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.205800056 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.211791039 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.211817026 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.215409040 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.215415001 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.215426922 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.215432882 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.215883970 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.215888023 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.219058990 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.219105959 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.219439030 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.219446898 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.240979910 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.244081974 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.244108915 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.249011993 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.249021053 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.252722025 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.256166935 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.256190062 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.259419918 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.259428024 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.260519028 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.265755892 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.265789032 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.266396999 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.275820971 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.275971889 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.278959036 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.278979063 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.316323042 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.316350937 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.316416979 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.316450119 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.316485882 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.319879055 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.319905996 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.319953918 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.319998026 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.320028067 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.322374105 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.322591066 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.322801113 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.346007109 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.346236944 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.346297979 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.346426010 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.346426010 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.358650923 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.358680964 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.358732939 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.358777046 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.358814955 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.416301966 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.433506012 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.433540106 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.434222937 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.435543060 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.435688019 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.436676025 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.436806917 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.436830997 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.436990976 CEST	50000	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.436997890 CEST	443	50000	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.437532902 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.437532902 CEST	50002	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.437567949 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.437583923 CEST	443	50002	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.441145897 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.441145897 CEST	49999	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.441169977 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.441180944 CEST	443	49999	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.443192959 CEST	50001	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.443228960 CEST	443	50001	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.444672108 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.444673061 CEST	50003	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.444700003 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.444731951 CEST	443	50003	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.478943110 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.479533911 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.479670048 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.482057095 CEST	50004	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.482084036 CEST	443	50004	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.483405113 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.490839958 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.490839958 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.490897894 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.490916014 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.491014957 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.491014957 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.491481066 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.491533995 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.491615057 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.491913080 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.491946936 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.492057085 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.492305994 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.492305994 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.492322922 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.492341995 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.493603945 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.493643999 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.493863106 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.494385004 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.494398117 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.494503021 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.494524002 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.494697094 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:25.494715929 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:25.627999067 CEST	50014	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.628060102 CEST	443	50014	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:25.628339052 CEST	50014	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.628624916 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.628674030 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:25.628932953 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.632230997 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.632245064 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:25.632667065 CEST	50014	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:25.632702112 CEST	443	50014	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:25.636214018 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.637439966 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.637453079 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.637850046 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.637911081 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.638530016 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.638581991 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.640386105 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.640465021 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.640888929 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.640908957 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702188969 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702254057 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702280045 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702296019 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702344894 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.702363968 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.702511072 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.710412979 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.710535049 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.710964918 CEST	50006	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.710984945 CEST	443	50006	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.748265028 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.814950943 CEST	50019	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.814990044 CEST	443	50019	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.817327976 CEST	50019	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.818542004 CEST	50019	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.818553925 CEST	443	50019	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.933682919 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.933723927 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.933794975 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.933825016 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.934730053 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.934792042 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.934952974 CEST	443	50007	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.935015917 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.935044050 CEST	50007	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.935719013 CEST	50020	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.935754061 CEST	443	50020	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:25.935859919 CEST	50020	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.936080933 CEST	50020	443	192.168.2.5	142.250.185.142
Oct 4, 2024 15:32:25.936098099 CEST	443	50020	142.250.185.142	192.168.2.5
Oct 4, 2024 15:32:26.150507927 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.151159048 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.151176929 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.151640892 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.151649952 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.159904003 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.160454988 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.160480976 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.160900116 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.160907030 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.164083958 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.164732933 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.164750099 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.165184975 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.165193081 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.167474031 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.167850971 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.167876959 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.168194056 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.168232918 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.168239117 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.168518066 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.168536901 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.169039965 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.169049025 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.256350040 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.256417036 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.256814957 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.257009029 CEST	50013	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.257023096 CEST	443	50013	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.262932062 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.263192892 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.263259888 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.264379025 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.264400005 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.264436007 CEST	50012	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.264445066 CEST	443	50012	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.264771938 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:26.265526056 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:26.265539885 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:26.266139984 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:26.266870975 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:26.266947985 CEST	443	50015	172.217.18.14	192.168.2.5
Oct 4, 2024 15:32:26.267431021 CEST	50015	443	192.168.2.5	172.217.18.14
Oct 4, 2024 15:32:26.270246029 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.270318985 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.270945072 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.271982908 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.272342920 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.272387981 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.272392035 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.272428989 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.274496078 CEST	50021	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.274537086 CEST	443	50021	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.274606943 CEST	50021	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.274782896 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.274782896 CEST	50009	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.274796009 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.274804115 CEST	443	50009	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.276329994 CEST	50010	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.276357889 CEST	443	50010	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.277409077 CEST	50021	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.277425051 CEST	443	50021	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.279942036 CEST	50022	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.279975891 CEST	443	50022	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.280154943 CEST	50022	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.281450987 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.281533003 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.281609058 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.286413908 CEST	50011	443	192.168.2.5	13.107.246.45
Oct 4, 2024 15:32:26.286442995 CEST	443	50011	13.107.246.45	192.168.2.5
Oct 4, 2024 15:32:26.286458015 CEST	50011	443	192.168.2.5	13.107.246.45

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 15:31:59.100975037 CEST	192.168.2.5	1.1.1.1	0x57b1	Standard query (0)	www.inamorataa-a.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:31:59.101125002 CEST	192.168.2.5	1.1.1.1	0xda85	Standard query (0)	www.inamorataa-a.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:31:59.363193989 CEST	192.168.2.5	1.1.1.1	0xdf70	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:31:59.363945961 CEST	192.168.2.5	1.1.1.1	0x944e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:00.935094118 CEST	192.168.2.5	1.1.1.1	0x8c53	Standard query (0)	inamorataa-a.blogspot.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:00.937463045 CEST	192.168.2.5	1.1.1.1	0xcc92	Standard query (0)	inamorataa-a.blogspot.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:02.125742912 CEST	192.168.2.5	1.1.1.1	0x9aa5	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:02.126235008 CEST	192.168.2.5	1.1.1.1	0xbbf6	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:15.229198933 CEST	192.168.2.5	1.1.1.1	0xfc0f	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:15.229628086 CEST	192.168.2.5	1.1.1.1	0x309f	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:16.656517982 CEST	192.168.2.5	1.1.1.1	0xcca4	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:16.656852961 CEST	192.168.2.5	1.1.1.1	0x3ad6	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:18.327837944 CEST	192.168.2.5	1.1.1.1	0xdd7b	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:18.328167915 CEST	192.168.2.5	1.1.1.1	0xa644	Standard query (0)	support.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:19.018699884 CEST	192.168.2.5	1.1.1.1	0xb135	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:19.018858910 CEST	192.168.2.5	1.1.1.1	0x7692	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:20.317874908 CEST	192.168.2.5	1.1.1.1	0x89e7	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:20.318017960 CEST	192.168.2.5	1.1.1.1	0x4cac	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:21.730535984 CEST	192.168.2.5	1.1.1.1	0x1f3a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.730673075 CEST	192.168.2.5	1.1.1.1	0x3fa1	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:21.902741909 CEST	192.168.2.5	1.1.1.1	0x8b4d	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.903105974 CEST	192.168.2.5	1.1.1.1	0x8fec	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:21.905111074 CEST	192.168.2.5	1.1.1.1	0xce3c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.905529976 CEST	192.168.2.5	1.1.1.1	0xa4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:21.910335064 CEST	192.168.2.5	1.1.1.1	0xa1e1	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.910497904 CEST	192.168.2.5	1.1.1.1	0x6e48	Standard query (0)	support.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:23.296466112 CEST	192.168.2.5	1.1.1.1	0xcfb1	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:23.296617985 CEST	192.168.2.5	1.1.1.1	0x6281	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:30.580214977 CEST	192.168.2.5	1.1.1.1	0xbd3b	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:30.580857038 CEST	192.168.2.5	1.1.1.1	0x8e3f	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:34.380484104 CEST	192.168.2.5	1.1.1.1	0x4504	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:34.380748034 CEST	192.168.2.5	1.1.1.1	0x86a9	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:45.589663982 CEST	192.168.2.5	1.1.1.1	0x2784	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:45.589884996 CEST	192.168.2.5	1.1.1.1	0xde1d	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:32:49.675909042 CEST	192.168.2.5	1.1.1.1	0xa37	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:49.676273108 CEST	192.168.2.5	1.1.1.1	0xda7d	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:33:17.095171928 CEST	192.168.2.5	1.1.1.1	0x897f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:17.095782995 CEST	192.168.2.5	1.1.1.1	0x5c25	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:33:17.170687914 CEST	192.168.2.5	1.1.1.1	0x28d5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:17.171123028 CEST	192.168.2.5	1.1.1.1	0xe9e8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 15:33:19.775026083 CEST	192.168.2.5	1.1.1.1	0x8ca	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:19.775922060 CEST	192.168.2.5	1.1.1.1	0x6df1	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 15:31:59.113754034 CEST	1.1.1.1	192.168.2.5	0xda85	No error (0)	www.inamorataa-a.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:31:59.154603004 CEST	1.1.1.1	192.168.2.5	0x57b1	No error (0)	www.inamorataa-a.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:31:59.154603004 CEST	1.1.1.1	192.168.2.5	0x57b1	No error (0)	blogspot.l.googleusercontent.com		172.217.18.97	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:31:59.577846050 CEST	1.1.1.1	192.168.2.5	0x944e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:31:59.577872038 CEST	1.1.1.1	192.168.2.5	0xdf70	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:00.977906942 CEST	1.1.1.1	192.168.2.5	0xcc92	No error (0)	inamorataa-a.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:00.979759932 CEST	1.1.1.1	192.168.2.5	0x8c53	No error (0)	inamorataa-a.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:00.979759932 CEST	1.1.1.1	192.168.2.5	0x8c53	No error (0)	blogspot.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:02.135828972 CEST	1.1.1.1	192.168.2.5	0x9aa5	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:02.135828972 CEST	1.1.1.1	192.168.2.5	0x9aa5	No error (0)	blogger.l.google.com		142.250.186.169	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:02.136976957 CEST	1.1.1.1	192.168.2.5	0xbbf6	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:15.238600969 CEST	1.1.1.1	192.168.2.5	0xfc0f	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:15.238600969 CEST	1.1.1.1	192.168.2.5	0xfc0f	No error (0)	www3.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:15.239310980 CEST	1.1.1.1	192.168.2.5	0x309f	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:16.663569927 CEST	1.1.1.1	192.168.2.5	0xcca4	No error (0)	play.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:18.336276054 CEST	1.1.1.1	192.168.2.5	0xdd7b	No error (0)	support.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:19.026002884 CEST	1.1.1.1	192.168.2.5	0xb135	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:20.326252937 CEST	1.1.1.1	192.168.2.5	0x89e7	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:20.326252937 CEST	1.1.1.1	192.168.2.5	0x89e7	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:20.328536987 CEST	1.1.1.1	192.168.2.5	0x4cac	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:21.738778114 CEST	1.1.1.1	192.168.2.5	0x3fa1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:21.739214897 CEST	1.1.1.1	192.168.2.5	0x1f3a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:21.739214897 CEST	1.1.1.1	192.168.2.5	0x1f3a	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.909898043 CEST	1.1.1.1	192.168.2.5	0x8b4d	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:21.909898043 CEST	1.1.1.1	192.168.2.5	0x8b4d	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.161	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.909910917 CEST	1.1.1.1	192.168.2.5	0x8fec	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:21.912008047 CEST	1.1.1.1	192.168.2.5	0xa4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:32:21.912178993 CEST	1.1.1.1	192.168.2.5	0xce3c	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:21.917248964 CEST	1.1.1.1	192.168.2.5	0xa1e1	No error (0)	support.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:23.303936958 CEST	1.1.1.1	192.168.2.5	0xcfb1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:23.303936958 CEST	1.1.1.1	192.168.2.5	0xcfb1	No error (0)	plus.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:23.304929972 CEST	1.1.1.1	192.168.2.5	0x6281	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:30.600514889 CEST	1.1.1.1	192.168.2.5	0xbd3b	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:30.600514889 CEST	1.1.1.1	192.168.2.5	0xbd3b	No error (0)	photos-ugc.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:30.604120016 CEST	1.1.1.1	192.168.2.5	0x8e3f	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:34.387648106 CEST	1.1.1.1	192.168.2.5	0x4504	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:34.387648106 CEST	1.1.1.1	192.168.2.5	0x4504	No error (0)	photos-ugc.l.googleusercontent.com		142.250.186.161	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:34.405986071 CEST	1.1.1.1	192.168.2.5	0x86a9	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 15:32:45.596735001 CEST	1.1.1.1	192.168.2.5	0x2784	No error (0)	scone-pa.clients6.google.com		142.250.185.234	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:32:49.683459997 CEST	1.1.1.1	192.168.2.5	0xa37	No error (0)	scone-pa.clients6.google.com		142.250.74.202	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:17.113308907 CEST	1.1.1.1	192.168.2.5	0x897f	No error (0)	play.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:17.177942991 CEST	1.1.1.1	192.168.2.5	0x28d5	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 4, 2024 15:33:17.178153038 CEST	1.1.1.1	192.168.2.5	0xe9e8	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 15:33:19.781898022 CEST	1.1.1.1	192.168.2.5	0x8ca	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.5	49704	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:54 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:54 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:54 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133154Z-15767c5fc55qkvj6n60pxm9mbw00000001pg00000000kfpf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:54 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 13:31:55 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.5	49714	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:56 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 4b0a31e7-c01e-00ad-448c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133156Z-15767c5fc55kg97hfq5uqyxxaw0000000ckg00000000e3tv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:56 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.5	49711	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:56 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133156Z-15767c5fc5546rn6ch9zv310e000000005mg00000000816s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:56 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.5	49710	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:56 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133156Z-15767c5fc55v7j95gq2uzq37a00000000cu000000000cczv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:56 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.5	49712	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:56 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:56 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: b9d87bc4-001e-008d-138c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133156Z-15767c5fc55qkvj6n60pxm9mbw00000001sg00000000bz6z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:56 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.5	49713	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:56 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:56 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133156Z-15767c5fc55qdcd62bsn50hd6s0000000cag00000000hmwv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:56 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49705	20.109.210.53	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:56 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ZPfL7ubmzxny4ds&MD=XroMmfpS HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-04 13:31:56 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: e36b963f-f2ee-407a-b0dc-67ed628ac0dd MS-RequestId: 59ebd985-6cc5-4a34-a065-d49416700a35 MS-CV: pVpbkKQB9UiEBT0d.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 13:31:55 GMT Connection: close Content-Length: 24490
2024-10-04 13:31:56 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-04 13:31:56 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49718	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:57 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:57 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: b2393cc3-501e-005b-768c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133157Z-15767c5fc55w69c2zvnrz0gmgw0000000ct000000000gbsx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:57 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.5	49716	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:57 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:57 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: aa8826a4-b01e-0053-608c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133157Z-15767c5fc55lghvzbxktxfqntw0000000c8000000000gp9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:57 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.5	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:57 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:57 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 3a0dc1eb-601e-0032-608c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133157Z-15767c5fc55gs96cphvgp5f5vc0000000ceg00000000h1z7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:57 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.5	49717	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:57 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:57 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:57 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 24b39cfc-301e-0096-2a8c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133157Z-15767c5fc554l9xf959gp9cb1s00000006p000000000mgqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:57 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.5	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 1cc301c6-e01e-0071-6b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc55472x4k7dmphmadg0000000cb0000000004mca x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.5	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 1cc301ca-e01e-0071-6f8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc55tsfp92w7yna557w0000000cp0000000006wcp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.5	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 023e3708-a01e-003d-568c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc55kg97hfq5uqyxxaw0000000cp0000000006tx6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:58 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: e0871f45-901e-00a0-0d8c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc55fdfx81a30vtr1fw0000000cvg00000000ktf2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:58 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.5	49731	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: a68dfe67-f01e-0052-588c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc55lghvzbxktxfqntw0000000c8000000000gpp3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.5	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: c54fb296-901e-008f-528c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133158Z-15767c5fc5546rn6ch9zv310e000000005mg0000000081bp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.5	49730	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:58 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:59 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 023e3944-a01e-003d-708c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133159Z-15767c5fc554w2fgapsyvy8ua00000000c3g00000000d235 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.5	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: 24b39fc0-301e-0096-298c-15e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133159Z-15767c5fc55xsgnlxyxy40f4m00000000cg000000000c54u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.5	49735	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:59 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: dc68ccfc-201e-006e-438c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133159Z-15767c5fc55dtdv4d4saq7t47n0000000c9g00000000hdk7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.5	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:31:59 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:31:59 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:31:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 79ade187-001e-0065-788c-150b73000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133159Z-15767c5fc55852fxfeh7csa2dn0000000cd000000000pvs8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:31:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49737	172.217.18.97	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	672	OUT	GET / HTTP/1.1 Host: www.inamorataa-a.blogspot.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:00 UTC	570	IN	HTTP/1.1 301 Moved Permanently X-Robots-Tag: noindex, nofollow Location: https://inamorataa-a.blogspot.com/ Content-Type: text/html; charset=UTF-8 Date: Fri, 04 Oct 2024 13:32:00 GMT Expires: Fri, 04 Oct 2024 13:32:00 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:00 UTC	249	IN	Data Raw: 66 33 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 61 6d 6f 72 61 74 61 61 2d 61 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: f3<HTML><HEAD><TITLE>Moved Permanently</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Permanently</H1>The document has moved <A HREF="https://inamorataa-a.blogspot.com/">here</A>.</BODY></HTML>
2024-10-04 13:32:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.5	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 8e9c869d-201e-000c-4b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133200Z-15767c5fc55n4msds84xh4z67w00000006ag000000008b1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.5	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 0da94923-701e-0097-168c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133200Z-15767c5fc55gq5fmm10nm5qqr80000000cp000000000g99h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.5	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: 4f10c824-e01e-0085-1c8c-15c311000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133200Z-15767c5fc55fdfx81a30vtr1fw0000000d00000000004yg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.5	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 09e6f7ee-001e-0034-548c-15dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133200Z-15767c5fc552g4w83buhsr3htc0000000cg000000000nvc1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.5	49715	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:00 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:00 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 757ce4f4-401e-000a-128c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133200Z-15767c5fc55rg5b7sh1vuv8t7n0000000cyg000000009wrv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.5	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:01 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 82f8b22c-c01e-0014-5a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133201Z-15767c5fc55n4msds84xh4z67w000000069000000000duc9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:01 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.5	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 30fd46b0-d01e-00a1-368c-1535b1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133201Z-15767c5fc55d6fcl6x6bw8cpdc0000000cd000000000ma0v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.5	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: c2ca9d4d-801e-0035-458c-15752a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133201Z-15767c5fc554wklc0x4mc5pq0w0000000cug00000000mv3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.5	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 75493038-e01e-00aa-508c-15ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133201Z-15767c5fc55472x4k7dmphmadg0000000c4g00000000n3v9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.5	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:01 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 6a901ce3-301e-005d-708c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133201Z-15767c5fc55qdcd62bsn50hd6s0000000ccg00000000b8cp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49750	216.58.206.65	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	668	OUT	GET / HTTP/1.1 Host: inamorataa-a.blogspot.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:02 UTC	671	IN	HTTP/1.1 302 Moved Temporarily X-Robots-Tag: noindex, nofollow Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 13:32:01 GMT Location: https://www.blogger.com/blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:02 UTC	309	IN	Data Raw: 31 32 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 62 6c 6f 67 69 6e 2e 67 3f 62 6c 6f 67 73 70 6f 74 55 52 4c 3d 68 74 74 70 73 3a 2f 2f 69 6e 61 6d 6f 72 61 74 61 61 2d 61 2e 62 6c 6f Data Ascii: 12e<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://www.blogger.com/blogin.g?blogspotURL=https://inamorataa-a.blo
2024-10-04 13:32:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 13:32:02 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=184392 Date: Fri, 04 Oct 2024 13:32:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.5	49753	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: eccf174e-001e-0079-238c-1512e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133202Z-15767c5fc55tsfp92w7yna557w0000000cng000000008td1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.5	49751	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:02 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 831ef799-b01e-0098-7b8c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133202Z-15767c5fc5546rn6ch9zv310e000000005ng0000000044ky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:02 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.5	49754	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 4b0a3852-c01e-00ad-3b8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133202Z-15767c5fc552g4w83buhsr3htc0000000cgg00000000mzxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.5	49752	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: a7623418-001e-00a2-348c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133202Z-15767c5fc55d6fcl6x6bw8cpdc0000000cg000000000c7zy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.5	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:02 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 76615707-c01e-0082-6a8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133202Z-15767c5fc55w69c2zvnrz0gmgw0000000csg00000000h3sz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49757	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 13:32:03 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184465 Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 13:32:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49756	142.250.186.169	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	723	OUT	GET /blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog HTTP/1.1 Host: www.blogger.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:03 UTC	926	IN	HTTP/1.1 302 Moved Temporarily P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." Location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://inamorataa-a.blogspot.com/%26type%3Dblog%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://inamorataa-a.blogspot.com/%26type%3Dblog%26bpli%3D1&go=true Content-Type: text/html; charset=UTF-8 Date: Fri, 04 Oct 2024 13:32:03 GMT Expires: Fri, 04 Oct 2024 13:32:03 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:03 UTC	464	IN	Data Raw: 32 30 32 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 3f 70 61 73 73 69 76 65 3d 74 72 75 65 26 61 6d 70 3b 63 6f 6e 74 69 6e 75 65 3d 68 74 Data Ascii: 202<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://accounts.google.com/ServiceLogin?passive=true&continue=ht
2024-10-04 13:32:03 UTC	57	IN	Data Raw: 62 6c 6f 67 25 32 36 62 70 6c 69 25 33 44 31 26 61 6d 70 3b 67 6f 3d 74 72 75 65 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: blog%26bpli%3D1&go=true">here</A>.</BODY></HTML>
2024-10-04 13:32:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.5	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: bb2e28bd-501e-0016-0b8c-15181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133203Z-15767c5fc554l9xf959gp9cb1s00000006ug000000005pkn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:03 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.5	49761	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 0dcb6c6d-e01e-0003-668c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133203Z-15767c5fc55gq5fmm10nm5qqr80000000csg000000006z80 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.5	49760	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: 8789ddbb-a01e-0084-6a8c-159ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133203Z-15767c5fc55jdxmppy6cmd24bn00000004wg000000005xt0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.5	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4da5bf60-a01e-0070-668c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133203Z-15767c5fc55rg5b7sh1vuv8t7n0000000d10000000000kcm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.5	49762	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:03 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 9bed673a-001e-0046-278c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133203Z-15767c5fc55xsgnlxyxy40f4m00000000cgg00000000aqwp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49765	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 3a0dcc46-601e-0032-6c8c-15eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133204Z-15767c5fc55fdfx81a30vtr1fw0000000cw000000000kc9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.5	49764	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 772ea1ab-e01e-003c-188c-15c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133204Z-15767c5fc55kg97hfq5uqyxxaw0000000cn000000000aasw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:04 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.5	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 1f480944-c01e-002b-018c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133204Z-15767c5fc5546rn6ch9zv310e000000005g000000000h3dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.5	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 15fe0b87-a01e-0002-3b8c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133204Z-15767c5fc55rg5b7sh1vuv8t7n0000000d0g000000002bnz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.5	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:04 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: c54fbac1-901e-008f-588c-1567a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133204Z-15767c5fc55sdcjq8ksxt4n9mc00000001t000000000s6ap x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.5	49769	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:04 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1728048685345&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-10-04 13:32:04 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-10-04 13:32:04 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-10-04 13:32:04 UTC	480	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: B2CE8EC9C4AC44FCB51692D6E9FEB750 Ref B: LAX311000108017 Ref C: 2024-10-04T13:32:04Z Date: Fri, 04 Oct 2024 13:32:04 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.15ed0117.1728048724.58ec1799

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.5	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9a197f6-401e-0078-3b8c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc552g4w83buhsr3htc0000000cf000000000q3b3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.5	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 76252b1b-c01e-0066-488c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc55fdfx81a30vtr1fw0000000cy000000000bund x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.5	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 75858473-001e-000b-318c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc55rv8zjq9dg0musxg0000000cmg00000000bt2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.5	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: b83a8dc4-f01e-003f-308c-15d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc55852fxfeh7csa2dn0000000cf000000000g6dc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.5	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 2f8443ca-b01e-0070-308c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc55qkvj6n60pxm9mbw00000001qg00000000gnab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49776	142.250.186.169	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	730	OUT	GET /blogin.g?blogspotURL=https://inamorataa-a.blogspot.com/&type=blog&bpli=1 HTTP/1.1 Host: www.blogger.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:06 UTC	1289	IN	HTTP/1.1 302 Moved Temporarily P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info." Content-Security-Policy: script-src 'self' .google.com .google-analytics.com 'unsafe-inline' 'unsafe-eval' .gstatic.com .googlesyndication.com .blogger.com .googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 13:32:06 GMT Location: https://accounts.google.com/ServiceLogin?service=blogger&hl=en-US&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://inamorataa-a.blogspot.com/%26type%3Dblog%26zx%3D1mjew5665oovr X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:06 UTC	101	IN	Data Raw: 31 61 39 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c Data Ascii: 1a9<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000"><
2024-10-04 13:32:06 UTC	331	IN	Data Raw: 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 3f 73 65 72 76 69 63 65 3d 62 6c 6f 67 67 65 72 26 61 6d 70 3b 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 70 61 73 73 69 76 65 3d 74 72 75 65 26 61 6d 70 3b 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 62 6c 6f 67 69 6e 2e 67 3f 62 6c 6f 67 73 70 6f 74 55 52 4c 25 33 44 68 74 74 70 73 3a 2f 2f 69 6e 61 6d 6f 72 61 74 61 61 2d 61 2e 62 6c Data Ascii: !-- GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://accounts.google.com/ServiceLogin?service=blogger&hl=en-US&passive=true&continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://inamorataa-a.bl
2024-10-04 13:32:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.5	49777	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:05 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 7be6812e-d01e-008e-528c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc552g4w83buhsr3htc0000000cf000000000q3cd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.5	49779	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 7be6821c-d01e-008e-398c-15387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc55whfstvfw43u8fp40000000cu0000000001v6f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.5	49778	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 1f480aea-c01e-002b-028c-156e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc554wklc0x4mc5pq0w0000000cv000000000mku4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.5	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 16d3a614-701e-0032-288c-15a540000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133205Z-15767c5fc552g4w83buhsr3htc0000000ck000000000gwz7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.5	49781	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: aa883537-b01e-0053-4c8c-15cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc55v7j95gq2uzq37a00000000cvg000000008x71 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49782	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: cce0beff-001e-0082-398c-155880000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc5546rn6ch9zv310e000000005h000000000etu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.5	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: dc68dac5-201e-006e-298c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc554wklc0x4mc5pq0w0000000cu000000000nttb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.5	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: be018b72-401e-0035-7e8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc55dtdv4d4saq7t47n0000000cd000000000a624 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.5	49785	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: 4da5c699-a01e-0070-198c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc55xsgnlxyxy40f4m00000000cdg00000000m21c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.5	49786	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:06 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: be018b82-401e-0035-0c8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133206Z-15767c5fc55jdxmppy6cmd24bn00000004tg00000000e7ub x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.5	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 285c7e33-c01e-008e-718c-157381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133207Z-15767c5fc55qkvj6n60pxm9mbw00000001v0000000002r44 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.5	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:07 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:07 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 801e2bd2-b01e-0021-6a8c-15cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133207Z-15767c5fc55v7j95gq2uzq37a00000000cq000000000pd7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:07 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.5	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 1cc309a5-e01e-0071-358c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133207Z-15767c5fc55v7j95gq2uzq37a00000000cv0000000009ttp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.5	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 04c46130-501e-0064-028c-151f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133207Z-15767c5fc55rg5b7sh1vuv8t7n0000000cvg00000000hy13 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.5	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:07 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:07 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:07 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 6a902a44-301e-005d-788c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133207Z-15767c5fc55w69c2zvnrz0gmgw0000000cw00000000078pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:07 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.5	49794	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 4da5c882-a01e-0070-628c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc55v7j95gq2uzq37a00000000ct000000000f9bx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.5	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 15fe14b4-a01e-0002-638c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc55472x4k7dmphmadg0000000c7000000000g5mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:08 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.5	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 15fe1592-a01e-0002-378c-155074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc55dtdv4d4saq7t47n0000000cb000000000fuww x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.5	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: b9a19b13-401e-0078-148c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc55lghvzbxktxfqntw0000000c8000000000gqaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.5	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:08 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 9bed6e8e-001e-0046-5b8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc55w69c2zvnrz0gmgw0000000cqg00000000pc0s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.5	49800	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 766164d5-c01e-0082-668c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc554l9xf959gp9cb1s00000006pg00000000mwg1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.5	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:08 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:08 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: e08726cd-901e-00a0-738c-156a6d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133208Z-15767c5fc554wklc0x4mc5pq0w0000000cvg00000000ke1z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.5	49801	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: dcc4dd0d-f01e-0099-7c8c-159171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55gs96cphvgp5f5vc0000000ck0000000006f58 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.5	49802	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d59d44fd-601e-003e-698c-153248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55kg97hfq5uqyxxaw0000000cf000000000mp96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.5	49803	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 4a2177bf-401e-00a3-638c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55tsfp92w7yna557w0000000cm000000000dapb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.5	49804	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 4da5cae8-a01e-0070-0e8c-15573b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55fdfx81a30vtr1fw0000000ctg00000000sfhf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.5	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:09 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 1cc30b66-e01e-0071-368c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55gq5fmm10nm5qqr80000000cpg00000000f0nd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:09 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.5	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:09 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:09 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 8e9c9a52-201e-000c-6b8c-1579c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133209Z-15767c5fc55qkvj6n60pxm9mbw00000001qg00000000gnm3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:10 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.5	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:10 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:10 UTC	470	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:10 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 0da9586c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133210Z-15767c5fc55kg97hfq5uqyxxaw0000000cmg00000000atdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:10 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.5	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:10 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:10 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: b9a19cb7-401e-0078-068c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133210Z-15767c5fc55lghvzbxktxfqntw0000000ccg000000001upk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:10 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.5	49810	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:10 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:10 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 1cc30bd5-e01e-0071-1a8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133210Z-15767c5fc5546rn6ch9zv310e000000005k000000000cs5b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:10 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.5	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:10 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:10 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:10 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 82f8c3b9-c01e-0014-418c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133210Z-15767c5fc55rv8zjq9dg0musxg0000000cqg000000001was x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:10 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.5	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:10 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:10 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: b23951fc-501e-005b-2a8c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133210Z-15767c5fc552g4w83buhsr3htc0000000cng000000008q51 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.5	49813	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: b9a19e00-401e-0078-388c-154d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc55n4msds84xh4z67w00000006cg000000000rtk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.5	49814	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 7afec079-601e-000d-468c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc55xsgnlxyxy40f4m00000000ck0000000005sre x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.5	49816	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 3ef81e2a-f01e-001f-3f8c-155dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc554wklc0x4mc5pq0w0000000cv000000000mm6c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.5	49815	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a68e09c4-f01e-0052-148c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc55jdxmppy6cmd24bn00000004w0000000007rsb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.5	49818	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 6a90313a-301e-005d-1a8c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc55dtdv4d4saq7t47n0000000c9g00000000he9p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.5	49819	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:11 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:11 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:11 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 1392789d-401e-0047-0e8c-158597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133211Z-15767c5fc55852fxfeh7csa2dn0000000ck0000000005yct x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:11 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.5	49827	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:12 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:12 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: c825d9ef-901e-007b-278c-15ac50000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133212Z-15767c5fc55lghvzbxktxfqntw0000000cbg000000005pbg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:12 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.5	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:12 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:12 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 4a217eb8-401e-00a3-218c-158b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133212Z-15767c5fc552g4w83buhsr3htc0000000cp0000000007b7v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:12 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.5	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:12 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:12 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: a76247f8-001e-00a2-558c-15d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133212Z-15767c5fc552g4w83buhsr3htc0000000ck000000000gxdk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:12 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.5	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:12 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:12 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 7afec1f8-601e-000d-328c-152618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133212Z-15767c5fc554wklc0x4mc5pq0w0000000cwg00000000fub2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:12 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.5	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:12 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:12 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:12 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 92784c80-801e-002a-088c-1531dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133212Z-15767c5fc55kg97hfq5uqyxxaw0000000cqg000000001ewv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:12 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.5	49834	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:13 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 6ec2e3f4-801e-007b-208c-15e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133213Z-15767c5fc55n4msds84xh4z67w000000065g00000000pugr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.5	49835	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:13 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:13 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: ed356ac5-101e-0046-2b8c-1591b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133213Z-15767c5fc55d6fcl6x6bw8cpdc0000000ch0000000008p5d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:13 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.5	49832	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:13 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:13 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6a90350a-301e-005d-348c-15e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133213Z-15767c5fc554w2fgapsyvy8ua00000000c4000000000a11k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:13 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.5	49836	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:13 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:13 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 76616de5-c01e-0082-6f8c-15af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133213Z-15767c5fc55qdcd62bsn50hd6s0000000cc000000000dcrh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:13 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.5	49833	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:13 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:13 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:13 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 29534450-901e-0064-768c-15e8a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133213Z-15767c5fc55472x4k7dmphmadg0000000c6g00000000ha2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:13 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.5	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:14 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:14 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 21dfe39b-001e-0049-468c-155bd5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133214Z-15767c5fc554l9xf959gp9cb1s00000006ug000000005qf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:14 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.5	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:14 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:14 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 0da95f5c-701e-0097-318c-15b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133214Z-15767c5fc55852fxfeh7csa2dn0000000cd000000000pwtc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:14 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.5	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:14 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:14 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: dc68e902-201e-006e-0d8c-15bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133214Z-15767c5fc55472x4k7dmphmadg0000000c5000000000ndnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:14 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.5	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:14 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:14 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: 8be9c1e7-301e-0052-678c-1565d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133214Z-15767c5fc55v7j95gq2uzq37a00000000cx0000000002ruc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:14 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.5	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:14 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:14 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:14 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 704395e8-201e-005d-718c-15afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133214Z-15767c5fc554w2fgapsyvy8ua00000000bzg00000000n0a0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:14 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.5	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 023e591f-a01e-003d-618c-1598d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55rg5b7sh1vuv8t7n0000000d0g000000002ck8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.5	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: ba3c7a68-301e-0099-698c-156683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55ncqdn59ub6rndq00000000c4g00000000nu84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.5	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 82f8cc24-c01e-0014-3a8c-15a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55sdcjq8ksxt4n9mc00000001wg00000000fu84 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.5	49853	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 819d4321-f01e-0020-6e8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55sdcjq8ksxt4n9mc00000001x000000000dgcf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.5	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: fb0d4061-601e-0050-198c-152c9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc552g4w83buhsr3htc0000000cf000000000q3x3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.5	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 7585955c-001e-000b-518c-1515a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55fdfx81a30vtr1fw0000000cy000000000bv96 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.5	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 89fd357a-501e-008f-758c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc552g4w83buhsr3htc0000000cq0000000003bmk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.5	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:15 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 831f1653-b01e-0098-198c-15cead000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133215Z-15767c5fc55rv8zjq9dg0musxg0000000cf000000000p3sa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49862	142.250.186.174	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:15 UTC	1232	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-168048165&timestamp=1728048734219 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:16 UTC	1967	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-XE4fWcnszZ-Ef1oCbT6aBQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 04 Oct 2024 13:32:16 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjstDikmJw0ZBikPj6kkkLiJ3SZ7CGAHHSv_OsJUB8ufsS63UgVu25xGoOxEUSV1hbgFiIm-PBnf_b2QRWHGvSVNJLyi-Mz0xJzSvJLKlMyc9NzMxLzs_PzkwtLk4tKkstijcyMDIxsDSy1DOwiC8wAAC5-C1G" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 37 36 31 63 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 45 34 66 57 63 6e 73 7a 5a 2d 45 66 31 6f 43 62 54 36 61 42 51 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f Data Ascii: 761c<html><head><script nonce="XE4fWcnszZ-Ef1oCbT6aBQ">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){(typeo
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 63 5b 31 5d 3d 3d 22 37 2e 30 22 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 22 3a 61 3d 22 31 30 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 37 2e 30 22 3a 61 3d 22 31 31 2e 30 22 7d 65 6c 73 65 20 61 3d 22 37 2e 30 22 3b 65 6c 73 65 20 61 3d 63 5b 31 5d 3b 62 3d 61 7d 65 6c 73 65 20 62 3d 22 22 3b 72 65 74 75 72 6e 20 62 7d 76 61 72 20 64 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c Data Ascii: =/Trident\/(\d.\d)/.exec(b),c[1]=="7.0")if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0":a="10.0";break;case "7.0":a="11.0"}else a="7.0";else a=c[1];b=a}else b="";return b}var d=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s*(?:\
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 69 67 69 6e 74 22 3a 72 65 74 75 72 6e 28 41 61 3f 0a 61 3e 3d 42 61 26 26 61 3c 3d 43 61 3a 61 5b 30 5d 3d 3d 3d 22 2d 22 3f 75 61 28 61 2c 44 61 29 3a 75 61 28 61 2c 45 61 29 29 3f 4e 75 6d 62 65 72 28 61 29 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 43 28 61 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 46 61 26 26 61 21 3d 6e 75 6c 6c 26 26 Data Ascii: {switch(typeof a){case "number":return isFinite(a)?a:String(a);case "bigint":return(Aa?a>=Ba&&a<=Ca:a[0]==="-"?ua(a,Da):ua(a,Ea))?Number(a):String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(C(a))return}else if(Fa&&a!=null&&
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 69 66 28 61 26 26 28 62 3d 51 61 29 21 3d 6e 75 6c 6c 26 26 62 2e 68 61 73 28 61 29 26 26 28 62 3d 61 2e 43 29 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 62 5b 63 5d 3b 69 66 28 63 3d 3d 3d 62 2e 6c 65 6e 67 74 68 2d 31 26 26 41 28 64 29 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 7b 76 61 72 20 66 3d 64 5b 65 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 26 26 0a 52 61 28 66 2c 61 29 7d 65 6c 73 65 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 64 29 26 26 52 61 28 64 2c 61 29 7d 61 3d 45 3f 61 2e 43 3a 4d 61 28 61 2e 43 2c 50 61 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 21 31 29 3b 65 3d 21 45 3b 69 66 28 62 3d 61 2e 6c 65 6e 67 74 68 29 7b Data Ascii: ion(a){var b;if(a&&(b=Qa)!=null&&b.has(a)&&(b=a.C))for(var c=0;c<b.length;c++){var d=b[c];if(c===b.length-1&&A(d))for(var e in d){var f=d[e];Array.isArray(f)&&Ra(f,a)}else Array.isArray(d)&&Ra(d,a)}a=E?a.C:Ma(a.C,Pa,void 0,void 0,!1);e=!E;if(b=a.length){
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 0a 47 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 57 61 5b 62 5b 63 5d 5d 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f Data Ascii: G("Symbol.iterator",function(a){if(a)return a;a=Symbol("c");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=Wa[b[c]];typeof d==="functio
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 48 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 63 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 69 22 29 3b 64 28 6b 29 3b 69 Data Ascii: th.random();e("freeze");e("preventExtensions");e("seal");var h=0,g=function(k){this.g=(h+=Math.random()+1).toString();if(k){k=H(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};g.prototype.set=function(k,l){if(!c(k))throw Error("i");d(k);i
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 67 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 6c 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6c 3d 3d 22 66 75 6e 63 74 69 Data Ascii: ction(g){return g.value})};c.prototype.forEach=function(g,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,g.call(k,m[1],m[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(g,k){var l=k&&typeof k;l=="object"\|\|l=="functi
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 2e 69 73 4e 61 4e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 62 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 69 73 4e 61 4e 28 62 29 7d 7d 29 3b 76 61 72 20 66 62 3d 66 62 7c 7c 7b 7d 2c 71 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 67 62 3d 71 2e 5f 46 5f 74 6f 67 67 6c 65 73 7c 7c 5b 5d 2c 68 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 71 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 62 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 2c 69 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 4d 61 Data Ascii: .isNaN",function(a){return a?a:function(b){return typeof b==="number"&&isNaN(b)}});var fb=fb\|\|{},q=this\|\|self,gb=q._F_toggles\|\|[],hb=function(a){a=a.split(".");for(var b=q,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b},ib="closure_uid_"+(Ma
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 3d 7b 7d 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 2e 73 65 76 65 72 69 74 79 3d 62 7d 3b 76 61 72 20 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 63 3d 63 7c 7c 71 3b 76 61 72 20 64 3d 63 2e 6f 6e 65 72 72 6f 72 2c 65 3d 21 21 62 3b 63 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 68 2c 67 2c 6b 2c 6c 29 7b 64 26 26 64 28 66 2c 68 2c 67 2c 6b 2c 6c 29 3b 61 28 7b 6d 65 73 73 61 67 65 3a 66 2c 66 69 6c 65 4e 61 6d 65 3a 68 2c 6c 69 6e 65 3a 67 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 67 2c 62 61 3a 6b 2c 65 72 72 6f 72 3a 6c 7d 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 74 62 3d 66 75 6e Data Ascii: sure__error__context__984382={});a.__closure__error__context__984382.severity=b};var qb=function(a,b,c){c=c\|\|q;var d=c.onerror,e=!!b;c.onerror=function(f,h,g,k,l){d&&d(f,h,g,k,l);a({message:f,fileName:h,line:g,lineNumber:g,ba:k,error:l});return e}},tb=fun
2024-10-04 13:32:16 UTC	1967	IN	Data Raw: 74 72 69 6e 67 22 3a 62 72 65 61 6b 3b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 66 3d 53 74 72 69 6e 67 28 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 66 3d 66 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 66 3d 28 66 3d 73 62 28 66 29 29 3f 66 3a 22 5b 66 6e 5d 22 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 66 3d 0a 74 79 70 65 6f 66 20 66 7d 66 2e 6c 65 6e 67 74 68 3e 34 30 26 26 28 66 3d 66 2e 73 6c 69 63 65 28 30 2c 34 30 29 2b 22 2e 2e 2e 22 29 3b 63 2e 70 75 73 68 28 66 29 7d 62 2e 70 75 73 68 28 61 29 3b 63 2e 70 75 73 68 28 22 29 5c 6e 22 29 3b 74 72 79 7b 63 2e 70 75 73 68 28 77 62 28 61 2e 63 61 6c 6c 65 72 2c 62 29 29 7d 63 61 74 63 68 28 68 29 7b Data Ascii: tring":break;case "number":f=String(f);break;case "boolean":f=f?"true":"false";break;case "function":f=(f=sb(f))?f:"[fn]";break;default:f=typeof f}f.length>40&&(f=f.slice(0,40)+"...");c.push(f)}b.push(a);c.push(")\n");try{c.push(wb(a.caller,b))}catch(h){

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.5	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:16 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:16 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:16 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: a7582d38-101e-0028-528c-158f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133216Z-15767c5fc55fdfx81a30vtr1fw0000000cz000000000938k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:16 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.5	49875	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:16 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:17 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: b2395a75-501e-005b-038c-15d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133217Z-15767c5fc55472x4k7dmphmadg0000000c7000000000g69r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:17 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.5	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:16 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:17 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: a68e0dd8-f01e-0052-1d8c-159224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133217Z-15767c5fc55qkvj6n60pxm9mbw00000001qg00000000gp3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:17 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.5	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:16 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:17 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:16 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 757cff4f-401e-000a-528c-154a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133216Z-15767c5fc552g4w83buhsr3htc0000000cp0000000007bgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:17 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.5	49852	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:18 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:18 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: 76253f94-c01e-0066-328c-15a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133218Z-15767c5fc55lghvzbxktxfqntw0000000c7000000000kzky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:18 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.5	49883	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:18 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:18 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 7baaa16d-b01e-0097-4d8c-154f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133218Z-15767c5fc55n4msds84xh4z67w000000068g00000000fdfc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:18 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.5	49885	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:18 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:18 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 89fd37a1-501e-008f-6d8c-159054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133218Z-15767c5fc55jdxmppy6cmd24bn00000004t000000000fsgv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:18 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.5	49884	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:18 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:18 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 819d44cb-f01e-0020-6f8c-15956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133218Z-15767c5fc55xsgnlxyxy40f4m00000000cf000000000fw3s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:18 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.5	49882	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:18 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:18 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:18 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 9bed7ce1-001e-0046-4f8c-15da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133218Z-15767c5fc55n4msds84xh4z67w000000068g00000000fdfd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:18 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49892	172.217.18.14	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	824	OUT	GET /chrome/answer/6130773?hl=en-US HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 13:32:19 UTC	460	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/chrome/answer/6130773?hl=en Date: Fri, 04 Oct 2024 13:32:19 GMT Expires: Fri, 04 Oct 2024 13:32:19 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 251 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 13:32:19 UTC	251	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/chrome/answer/6130773?hl=en">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.5	49889	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:19 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 9c5056bf-f01e-0003-548c-154453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133219Z-15767c5fc55kg97hfq5uqyxxaw0000000cqg000000001fg2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:19 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.5	49893	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:19 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 2f845d93-b01e-0070-2f8c-151cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133219Z-15767c5fc5546rn6ch9zv310e000000005e000000000p8zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:19 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.5	49894	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:19 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: 42bb1403-701e-005c-578c-15bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133219Z-15767c5fc554l9xf959gp9cb1s00000006ng00000000nf1f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:19 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.5	49895	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:19 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: be019976-401e-0035-5d8c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133219Z-15767c5fc5546rn6ch9zv310e000000005f000000000mp14 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:19 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.5	49896	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:19 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:19 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 56c891cb-f01e-0085-428c-1588ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133219Z-15767c5fc55v7j95gq2uzq37a00000000cq000000000pdw1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:19 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49891	172.217.18.14	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	1018	OUT	GET /chrome/answer/6130773?hl=en HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=HrxRgtF46qYJSEo1gfs6heDlckz5ihIGS3msv7qMJQe1MhtX0rPH-zOEOOoJHMChX_LrMtRBcbuhAEOYj1PeshmTJgYiABC1vmuYsrN4lpuyWu-lrQ1kb1cDKOuOHq_XejJz1eZ_7LQ4BZhqA3QcPvkmrs_2SXv1xEy2ks-FVYYeddrf1A4
2024-10-04 13:32:19 UTC	1999	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 04 Oct 2024 13:32:19 GMT Expires: Fri, 04 Oct 2024 13:32:19 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-w395Zd0fUGzxGFF0b+rP' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=518=jPDiorbf39nMRPVqYJ3PE4VLkhLEpR-l16npKBkJpNB7l6BvPUQDD3BkCQKq18Tf9YV-CIegRhEYUyXYCFPr141h4BWM5FTk_jiPuq_B4mPLLPK0BvmD2Gu8gcq3IMKJIU1ZrqeIunj1EXy6XceJI_FBXIbc9aJeF7nrhRYra658cjxRB9Gy94Odxlw; expires=Sat, 05-Apr-2025 13:32:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; expires=Sat, 05-Apr-2025 13:32:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4; expires=Sat, 05-Apr-2025 13:32:19 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 41 4e 53 57 45 52 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 20 2d 20 43 6f 6d 70 75 74 65 72 20 2d 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta conten
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b Data Ascii: 01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c Data Ascii: -family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b 30 32 42 44 2d 30 32 43 35 2c 55 2b 30 32 43 37 2d 30 32 43 43 2c 55 2b 30 32 43 45 2d 30 32 44 37 2c 55 2b 30 32 44 44 2d 30 32 46 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 44 30 30 2d 31 44 42 46 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d Data Ascii: roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 Data Ascii: ,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 22 20 6e 6f 6e 63 65 3d 22 77 33 39 35 5a 64 30 66 55 47 7a 78 47 46 46 30 62 2b 72 50 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 77 33 39 35 5a 64 30 66 55 47 7a 78 47 46 46 30 62 2b 72 50 22 3e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 66 6f 6e 74 2d 67 73 74 27 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3b 7d 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 66 6f 6e 74 2d 6e 63 65 27 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 Data Ascii: " nonce="w395Zd0fUGzxGFF0b+rP"><script nonce="w395Zd0fUGzxGFF0b+rP">document.getElementById('font-gst').addEventListener('load',function(){this.rel="stylesheet";});document.getElementById('font-nce').addEventListener('load',function(){this.rel="stylesheet
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 2e 68 63 66 65 20 61 72 74 69 63 6c 65 20 73 65 63 74 69 6f 6e 20 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 36 30 30 72 65 6d 3b 74 6f 70 3a 61 75 74 6f 3b 77 69 64 74 68 3a 30 2e 30 36 32 35 72 65 6d 3b 68 65 69 67 68 74 3a 30 2e 30 36 32 35 72 65 6d 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 73 6b 69 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 34 72 65 6d 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 Data Ascii: a img{border:0}.hcfe article section section{padding:0}.skip-link{position:absolute;left:-600rem;top:auto;width:0.0625rem;height:0.0625rem;overflow:hidden;z-index:1}.skip-link:focus{display:block;position:absolute;left:0;top:4rem;width:auto;height:auto;pa
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 65 2d 77 69 64 74 68 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 7d 2e 73 63 2d 61 73 73 65 72 74 69 76 65 2d 6c 69 76 65 2d 72 65 67 69 6f 6e 2c 2e 73 63 2d 70 6f 6c 69 74 65 2d 6c 69 76 65 2d 72 65 67 69 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 2d 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 68 63 66 65 20 61 72 74 69 63 6c 65 20 73 65 63 74 69 6f 6e 7b 70 61 64 64 69 6e 67 3a 31 72 65 6d 7d 2e 68 63 66 65 3e 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 40 6d 65 64 69 61 20 70 72 69 6e 74 7b 2e 68 63 66 65 3e 68 65 61 64 65 72 7b 64 69 73 70 6c 61 Data Ascii: e-width-container{display:flex}}.sc-assertive-live-region,.sc-polite-live-region{position:absolute;left:-10000px;width:1px;height:1px;overflow:hidden}.hcfe article section{padding:1rem}.hcfe>header{background-color:#ffffff}@media print{.hcfe>header{displa
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 74 3a 35 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 35 30 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 2e 35 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 35 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 74 6f 70 3a 30 7d 2e 70 72 6f 6d 6f 74 65 64 2d 73 65 61 72 63 68 2d 62 6f 64 79 20 23 6d 61 74 65 72 69 61 6c 2d 62 61 72 2d 63 75 73 74 6f 6d 2d 70 72 6f 64 75 63 74 2d 6e 61 6d 65 7b 72 69 67 68 74 3a 35 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6d 61 74 65 72 69 61 6c 2d 62 61 72 2d 63 75 73 74 6f 6d 2d 70 72 6f 64 75 63 74 2d 6e 61 6d 65 20 61 7b 63 6f 6c 6f Data Ascii: t:52px;line-height:50px;margin:auto;margin-left:0.5rem;position:absolute;right:152px;text-align:left;text-overflow:ellipsis;top:0}.promoted-search-body #material-bar-custom-product-name{right:52px;text-align:center}#material-bar-custom-product-name a{colo
2024-10-04 13:32:19 UTC	1999	IN	Data Raw: 75 20 6c 69 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 32 66 32 66 32 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 2d 6e 65 73 74 65 64 20 6c 69 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 39 30 70 78 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 2d 2d 62 6f 74 74 6f 6d 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 39 70 78 7d 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6e 61 76 69 67 61 74 69 6f 6e 2d 6d 65 6e 75 20 61 2e 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 Data Ascii: u li:hover{background:#f2f2f2}.navigation-menu--nested li{padding-left:90px}.navigation-menu--bottom{padding-bottom:19px}}.navigation-menu a{display:block}.navigation-menu a:hover{text-decoration:none}.navigation-menu a.keyboard-focus{outline:0;text-decor

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49901	142.250.185.142	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:19 UTC	672	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=iDJBi9KvXtXZwWCPBTJ8M1TBCbSs5PWbCtvGsRlMx-F12vN8bM0bVOyMvDNXL_-PZwwRfPXTxNYpbbn8bWlXJUTGDhcKSWU-lBDWqT_Qsn9UJpbbbsRLsMffE7-E9z4m0G8SooN25Bymn0O6acHqOrFmfTOtc6H-RznyPDoeCpTU73LNGzg
2024-10-04 13:32:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 13:32:20 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-04 13:32:20 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.5	49902	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 5f7380a8-801e-0015-7b8c-15f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc554wklc0x4mc5pq0w0000000d0g000000002f9v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:20 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.5	49906	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 36a1620f-001e-0028-0f8c-15c49f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc55jdxmppy6cmd24bn00000004w0000000007sa3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:20 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.5	49903	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: b612907a-401e-008c-278c-1586c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc55jdxmppy6cmd24bn00000004xg000000002b50 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:20 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.5	49905	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: be019a9f-401e-0035-518c-1582d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc55gs96cphvgp5f5vc0000000chg000000008b9z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:20 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.5	49904	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:20 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 2d1829d7-b01e-001e-738c-150214000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc554w2fgapsyvy8ua00000000c5g000000004mpr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:20 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.5	49910	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:20 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: e360128a-801e-0083-498c-15f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133220Z-15767c5fc554w2fgapsyvy8ua00000000c4000000000a1q8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:21 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49907	142.250.185.142	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:20 UTC	672	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=iDJBi9KvXtXZwWCPBTJ8M1TBCbSs5PWbCtvGsRlMx-F12vN8bM0bVOyMvDNXL_-PZwwRfPXTxNYpbbn8bWlXJUTGDhcKSWU-lBDWqT_Qsn9UJpbbbsRLsMffE7-E9z4m0G8SooN25Bymn0O6acHqOrFmfTOtc6H-RznyPDoeCpTU73LNGzg
2024-10-04 13:32:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 04 Oct 2024 13:32:21 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 13:32:21 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-10-04 13:32:21 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.5	49920	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:21 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:21 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b0a4db7-c01e-00ad-2d8c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133221Z-15767c5fc55lghvzbxktxfqntw0000000ccg000000001vfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:21 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.5	49921	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:21 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:21 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 1cc313a1-e01e-0071-4b8c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133221Z-15767c5fc55qdcd62bsn50hd6s0000000ceg0000000058v6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:21 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.5	49922	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:21 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:21 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: 4b0a4edd-c01e-00ad-438c-15a2b9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133221Z-15767c5fc554w2fgapsyvy8ua00000000c50000000006v4w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:21 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.5	49923	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:21 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 13:32:21 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 13:32:21 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 0dcb9a48-e01e-0003-1c8c-150fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T133221Z-15767c5fc554wklc0x4mc5pq0w0000000cz00000000082t9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 13:32:21 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49924	142.250.186.164	443	1100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-04 13:32:21 UTC	1306	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=AHU5tNZV5otJFlAr6x0GQPJql_8p3aa7dglvCnWz7_VvLVxm2KYC_VtTKO-LKtgw-WGr78CW_rM5TcfGrqhYw5ZQ6jh5kJ8TAlzFN3-3o3Y_VMgbo9LRWw5nKbr6wtrJP24Mt8sZaufVvQkRYf3QchHERkBgVg1MD0SemKI27VCgmKNoJpRd8tX3f_lYSwKmcnC6Y0eQem6KYMePBosURFPPNp205nDmWiAoQfDOCVsbsOoOUT4yaRapEzk8Qm4
2024-10-04 13:32:21 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 04 Oct 2024 11:56:30 GMT Expires: Sat, 12 Oct 2024 11:56:30 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 5751 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 13:32:21 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-10-04 13:32:21 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-10-04 13:32:21 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-10-04 13:32:21 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-10-04 13:32:21 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Target ID:	0
Start time:	09:31:42
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:31:53
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2032 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:31:57
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.inamorataa-a.blogspot.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:32:15
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4084 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	09:32:15
Start date:	04/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3108 --field-trial-handle=1964,i,586832861060737835,12239675925502524462,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.inamorataa-a.blogspot.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Windows Analysis Report
https://www.inamorataa-a.blogspot.com/