Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

Overview

General Information

Sample URL:	https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ
Analysis ID:	1528211
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 4856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4060 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

HTTP Parser: Number of links: 0

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

HTTP Parser: Base64 decoded: .browser-notifications-success-alert .title::before{background-image:url("blob:https://www.icloud.com/014cc7e1-c011-4c75-84b8-b895ad047502")}.cloudos-alert .alert-main-content .alert-icon{background-image:url("blob:https://www.icloud.com/7ce71779-e6ef-40...

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

HTTP Parser: Title: does not match URL

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

HTTP Parser: <input type="password" .../> found

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No favicon
Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No favicon

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No <meta name="author".. found
Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No <meta name="author".. found

Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No <meta name="copyright".. found
Source: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:58406 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 37MB

Source: global traffic	TCP traffic: 192.168.2.4:58330 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:53124 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.18
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /v/2tqVpt2Lj2_CSM8CTbaGkQ HTTP/1.1Host: icloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /reportStats HTTP/1.1Host: feedbackws.icloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /reportStats HTTP/1.1Host: feedbackws.icloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /reportStats HTTP/1.1Host: feedbackws.icloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /reportStats HTTP/1.1Host: feedbackws.icloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /reportStats HTTP/1.1Host: feedbackws.icloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703000v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703001v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703451v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703450v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702651v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702901v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702650v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703101v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703100v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702900v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703851v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703850v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703801v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703600v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703601v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703750v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703800v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703751v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703700v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703701v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704051v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule704050v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700701v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700700v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700601v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: icloud.com
Source: global traffic	DNS traffic detected: DNS query: setup.icloud.com
Source: global traffic	DNS traffic detected: DNS query: ckdatabasews.icloud.com
Source: global traffic	DNS traffic detected: DNS query: cvws.icloud-content.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: feedbackws.icloud.com

Source: unknown

HTTP traffic detected: POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=8b7c3f99-e038-4c8b-af54-ab46989ae81e HTTP/1.1Host: setup.icloud.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.icloud.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.icloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_212.2.dr, chromecache_261.2.dr, chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: http://baris.aydinoglu.info)
Source: chromecache_212.2.dr, chromecache_261.2.dr, chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: http://barisaydinoglu.github.com/Detectizr/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12385.
Source: chromecache_171.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_178.2.dr, chromecache_150.2.dr, chromecache_238.2.dr	String found in binary or memory: http://canjs.com/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://dom.spec.whatwg.org/#dom-domimplementation-hasfeature
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://facebook.github.io/react/docs/error-decoder.html?invariant=
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_233.2.dr, chromecache_155.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_215.2.dr	String found in binary or memory: http://github.com/Modernizr/Modernizr/issues/1182
Source: chromecache_206.2.dr, chromecache_174.2.dr	String found in binary or memory: http://github.com/RobinHerbots/jquery.inputmask
Source: chromecache_156.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_225.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jsperf.com/emptying-a-node
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jsperf.com/key-exists
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jsperf.com/key-missing
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://jsperf.com/obj-vs-arr-iteration
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://modernizr.com/docs/#prefixed)
Source: chromecache_246.2.dr	String found in binary or memory: http://schema.org/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://schema.org/docs/gs.html
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: http://srufaculty.sru.edu/david.dailey/svg/newstuff/clipPath4.svg
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://systemstatus-stage.apple.com/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.andismith.com/blog/2012/02/modernizr-prefixed/)
Source: chromecache_234.2.dr, chromecache_226.2.dr, chromecache_160.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.apple.com/
Source: chromecache_206.2.dr, chromecache_174.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.quirksmode.org/blog/archives/2008/04/delegating_the.html
Source: chromecache_173.2.dr	String found in binary or memory: http://www.quirksmode.org/blog/archives/2010/09/click_event_del.html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.quirksmode.org/dom/events/scroll.html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.quirksmode.org/dom/events/tests/scroll.html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.quirksmode.org/js/events_properties.html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.thespanner.co.uk/2007/11/26/ultimate-xss-css-injection/
Source: chromecache_222.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: http://www.whatwg.org/specs/web-apps/current-work/multipage/the-input-element.html#input-type-attr-s
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: http://yepnopejs.com.
Source: chromecache_171.2.dr, chromecache_234.2.dr, chromecache_226.2.dr, chromecache_150.2.dr, chromecache_160.2.dr, chromecache_183.2.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/acknowledgements.txt
Source: chromecache_240.2.dr, chromecache_255.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EP308220a2a4c4403f97fc1960100db40f/AppMeasurement.js
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=129004
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=608416
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=640652
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3443
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=1276240
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=208427
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=355103
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://code.google.com/p/v8/issues/detail?id=687
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://codepen.io/eltonmesquita/full/GgXbvo/
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://css-tricks.com/almanac/properties/a/appearance/
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://dev.w3.org/csswg/css3-conditional/#at-supports
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://dev.w3.org/csswg/css3-conditional/#the-csssupportsrule-interface
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://developer.apple.com/system-status/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/AnimationEvent
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Clipboard_API
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/HTMLCanvasElement.toDataURL
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent#Key_names
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/TransitionEvent
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Window/scrollTo
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/-moz-appearance
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/CSS/filter
Source: chromecache_173.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Object/is
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developer.mozilla.org/en/docs/HTML/Using_the_application_cache
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://developers.whatwg.org/links.html#downloading-resources
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://drafts.fxtf.org/compositing-1/
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.children.count
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.children.foreach
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.children.map
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.children.only
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.children.toarray
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.cloneelement
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.createclass
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.createelement
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.createfactory
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#react.isvalidelement
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#reactdom.finddomnode
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#reactdom.render
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://facebook.github.io/react/docs/top-level-api.html#reactdom.unmountcomponentatnode
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/createmixin-was-never-implemented
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/invalid-aria-prop%s
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/prop-types-docs
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-controlled-components
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-create-class
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-devtools
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-dom-factories
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-event-pooling
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-invariant-dangerously-set-inner-html
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-legacyfactory
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-minification
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-refs-must-have-owner).
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-special-props)
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-spread-deprecation
Source: chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-unknown-prop%s
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-warning-dont-call-proptypes
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-warning-keys
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://fb.me/react-warning-polyfills
Source: chromecache_233.2.dr, chromecache_155.2.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://github.com/Modernizr/Modernizr/issues/648
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/fbjs/blob/e66ba20ad5be433eb54423f2b097d829324d9de6/packages/fbjs/src/__f
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/flow/issues/285
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/1698
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/3236).
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/6731#issuecomment-254874553
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/6887
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/708.
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7233
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7240
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7253
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/issues/7253#issuecomment-236074326
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/pull/6896
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/pull/7101
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/pull/7178
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/facebook/react/pull/7232
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/mishoo/UglifyJS2/blob/v2.4.20/lib/parse.js#L216
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://github.com/slightlyoff/ServiceWorker/blob/master/explainer.md
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/spicyj/innerhtml-vs-createelement-vs-clonenode.
Source: chromecache_148.2.dr, chromecache_239.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_148.2.dr, chromecache_239.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/173
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/interaction.html#contenteditable
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/microdata.html#microdata-dom-api
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/semantics.html#attr-style-scoped
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/semantics.html#the-html-element
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#generate-implied-end-tags
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#has-an-element-in-button-scope
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#has-an-element-in-scope
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#html-integration-point
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-incaption
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-incolgroup
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inhead
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inselect
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intable
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intbody
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intd
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intr
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#special
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://interactive-git.apple.com/Interactive-Interfaces/ac-ajax-xhr/issues/6
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://interactive-git.apple.com/Interactive-Interfaces/ac-ajax/issues/30
Source: chromecache_171.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_178.2.dr, chromecache_150.2.dr, chromecache_238.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_171.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_178.2.dr, chromecache_150.2.dr, chromecache_238.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_246.2.dr	String found in binary or memory: https://locate.apple.com/
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://paulirish.com/demo/inline-svg
Source: chromecache_156.2.dr, chromecache_225.2.dr	String found in binary or memory: https://preactjs.com
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://stackoverflow.com/questions/3952009/defer-attribute-chrome#answer-3982619
Source: chromecache_246.2.dr	String found in binary or memory: https://support.apple.com/?cid=gn-ols-home-hp-tab
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://support.apple.com/contact
Source: chromecache_246.2.dr	String found in binary or memory: https://support.apple.com/kb/index
Source: chromecache_240.2.dr, chromecache_255.2.dr	String found in binary or memory: https://support.apple.com/launch/launch-ENa1d69f1a17ae45a1a2df9385c05ffcb9.js
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://w3c.github.io/FileAPI/#constructorBlob
Source: chromecache_251.2.dr, chromecache_215.2.dr	String found in binary or memory: https://web.archive.org/web/20180602074607/https://daneden.me/2011/12/14/putting-up-with-androids-bu
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/ac/globalfooter/3/en_US/scripts/ac-globalfooter.built.js
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/ac/globalfooter/3/en_US/styles/ac-globalfooter.built.css
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/ac/globalnav/4/en_US/scripts/ac-globalnav.built.js
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/ac/globalnav/4/en_US/styles/ac-globalnav.built.css
Source: chromecache_257.2.dr, chromecache_249.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/airpods/
Source: chromecache_257.2.dr, chromecache_249.2.dr	String found in binary or memory: https://www.apple.com/airtag/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/flyouts
Source: chromecache_257.2.dr, chromecache_249.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/entertainment/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/ipad/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/iphone/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/mac/
Source: chromecache_257.2.dr, chromecache_249.2.dr	String found in binary or memory: https://www.apple.com/retail/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/tv-home/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/us/search
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/bag
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/buy_accessories
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/store
Source: chromecache_257.2.dr, chromecache_249.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/trade_in
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/watch/
Source: chromecache_246.2.dr	String found in binary or memory: https://www.apple.com/wss/fonts/?families=SF
Source: chromecache_267.2.dr, chromecache_197.2.dr, chromecache_241.2.dr	String found in binary or memory: https://www.icloud.com/icloud_logo/icloud_logo.png
Source: chromecache_272.2.dr, chromecache_159.2.dr, chromecache_170.2.dr, chromecache_258.2.dr, chromecache_275.2.dr, chromecache_168.2.dr, chromecache_208.2.dr, chromecache_186.2.dr	String found in binary or memory: https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt
Source: chromecache_235.2.dr, chromecache_173.2.dr	String found in binary or memory: https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet

Source: unknown	Network traffic detected: HTTP traffic on port 58593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58579
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58457
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58578
Source: unknown	Network traffic detected: HTTP traffic on port 58558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58465
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58586
Source: unknown	Network traffic detected: HTTP traffic on port 58615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58464
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58467
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58588
Source: unknown	Network traffic detected: HTTP traffic on port 58638 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58466
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58461
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58460
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58463
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58462
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 58569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58489 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58500 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58443 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58468
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58476
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58475
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58478
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58598
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58472
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58471
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58474
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58473
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58594
Source: unknown	Network traffic detected: HTTP traffic on port 58478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58590
Source: unknown	Network traffic detected: HTTP traffic on port 58501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58479
Source: unknown	Network traffic detected: HTTP traffic on port 58444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58487
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58486
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58489
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58488
Source: unknown	Network traffic detected: HTTP traffic on port 58534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58482
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58485
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58484
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58481
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58480
Source: unknown	Network traffic detected: HTTP traffic on port 58546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58466 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58498
Source: unknown	Network traffic detected: HTTP traffic on port 58639 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58497
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58499
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58494
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58495
Source: unknown	Network traffic detected: HTTP traffic on port 58455 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58492
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58491
Source: unknown	Network traffic detected: HTTP traffic on port 58602 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58418
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58417
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58538
Source: unknown	Network traffic detected: HTTP traffic on port 58465 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58414
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58416
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58415
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58542
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58543
Source: unknown	Network traffic detected: HTTP traffic on port 58502 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58428
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58425
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58546
Source: unknown	Network traffic detected: HTTP traffic on port 58559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58424
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58427
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58426
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58547
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58553
Source: unknown	Network traffic detected: HTTP traffic on port 58640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58434
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58555
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58433
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58551
Source: unknown	Network traffic detected: HTTP traffic on port 58499 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58550
Source: unknown	Network traffic detected: HTTP traffic on port 58453 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58436
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58557
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58435
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58559
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58437
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58558
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58445
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58444
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58560
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58561
Source: unknown	Network traffic detected: HTTP traffic on port 58454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 58487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58624 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58447
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58446
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58567
Source: unknown	Network traffic detected: HTTP traffic on port 58592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58569
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58454
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58575
Source: unknown	Network traffic detected: HTTP traffic on port 58581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58332
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58453
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58456
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58455
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58576
Source: unknown	Network traffic detected: HTTP traffic on port 58476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58572
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 58547 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58629 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58475 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58463 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58636 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58418 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 58390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58509 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 58568 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58380
Source: unknown	Network traffic detected: HTTP traffic on port 58588 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58416 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58605 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58474 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58394
Source: unknown	Network traffic detected: HTTP traffic on port 58637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58390
Source: unknown	Network traffic detected: HTTP traffic on port 58627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58604 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58428 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58473 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58406 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58461 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58484 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58517 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58552 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58598 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58644 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58415 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58633 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58599 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58576 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58563 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58427 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58472 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58436 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58597 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58574 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58494 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58634 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58471 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58542 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58460 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58482 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58530 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58586 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58519 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58437 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58332 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58619
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58616
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58618
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58617
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58612
Source: unknown	Network traffic detected: HTTP traffic on port 58446 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58611
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58500
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58621
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58620
Source: unknown	Network traffic detected: HTTP traffic on port 58641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58561 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58509
Source: unknown	Network traffic detected: HTTP traffic on port 58630 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58627
Source: unknown	Network traffic detected: HTTP traffic on port 58538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58626
Source: unknown	Network traffic detected: HTTP traffic on port 58481 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58629
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58507
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58628
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58623
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58622
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58504
Source: unknown	Network traffic detected: HTTP traffic on port 58573 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58625
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58503
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58624
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58630
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58632
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58510
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58631
Source: unknown	Network traffic detected: HTTP traffic on port 58612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58457 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58638
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58516
Source: unknown	Network traffic detected: HTTP traffic on port 58537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58637
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58518
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58639
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58634
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58633
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58636
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58635
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58641
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58522
Source: unknown	Network traffic detected: HTTP traffic on port 58447 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58642
Source: unknown	Network traffic detected: HTTP traffic on port 58504 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58492 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58435 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58406
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58527
Source: unknown	Network traffic detected: HTTP traffic on port 58611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58524
Source: unknown	Network traffic detected: HTTP traffic on port 58596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58644
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58525
Source: unknown	Network traffic detected: HTTP traffic on port 58424 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58532
Source: unknown	Network traffic detected: HTTP traffic on port 58642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58526 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58585 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58631 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58480 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58551 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53128
Source: unknown	Network traffic detected: HTTP traffic on port 58539 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58479 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58456 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58433 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58468 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 58562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58528 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58467 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58610 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58572 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58595 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58609
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58608
Source: unknown	Network traffic detected: HTTP traffic on port 58632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58605
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58604
Source: unknown	Network traffic detected: HTTP traffic on port 58550 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58606
Source: unknown	Network traffic detected: HTTP traffic on port 58445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58603
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58602
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58610
Source: unknown	Network traffic detected: HTTP traffic on port 58621 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58434 -> 443

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.4:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:58406 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@23/223@22/15

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4060 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4060 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://www.opensource.org/licenses/mit-license.php)	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false		unknown
setup.fe2.apple-dns.net	17.248.209.70	true	false		unknown
icloud.com	17.253.144.10	true	false		unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false		unknown
gateway.fe2.apple-dns.net	17.248.209.64	true	false		unknown
www.google.com	142.250.185.164	true	false		unknown
ckdatabasews.fe2.apple-dns.net	17.248.209.73	true	false		unknown
cvws.apple-dns.net	17.248.209.33	true	false		unknown
feedbackws.fe2.apple-dns.net	17.248.209.74	true	false		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
setup.icloud.com	unknown	unknown	false		unknown
feedbackws.icloud.com	unknown	unknown	false		unknown
cvws.icloud-content.com	unknown	unknown	false		unknown
ckdatabasews.icloud.com	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://setup.icloud.com/setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=783a6cf1-c049-485a-86df-8b929774f3e2	false		unknown
https://setup.icloud.com/setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=8b7c3f99-e038-4c8b-af54-ab46989ae81e	false		unknown
https://feedbackws.icloud.com/reportStats	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://facebook.github.io/react/docs/top-level-api.html#reactdom.finddomnode	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.cloneelement	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=3443	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#generate-implied-end-tags	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_148.2.dr, chromecache_239.2.dr, chromecache_244.2.dr, chromecache_263.2.dr	false		unknown
https://paulirish.com/demo/inline-svg	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://stackoverflow.com/questions/3952009/defer-attribute-chrome#answer-3982619	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://www.quirksmode.org/dom/events/tests/scroll.html	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/mishoo/UglifyJS2/blob/v2.4.20/lib/parse.js#L216	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://developer.mozilla.org/en/docs/HTML/Using_the_application_cache	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://github.com/facebook/react/issues/6887	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#special	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://schema.org/docs/gs.html	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intable	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://canjs.com/	chromecache_171.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_178.2.dr, chromecache_150.2.dr, chromecache_238.2.dr	false		unknown
http://srufaculty.sru.edu/david.dailey/svg/newstuff/clipPath4.svg	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=129004	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://www.andismith.com/blog/2012/02/modernizr-prefixed/)	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://css-tricks.com/almanac/properties/a/appearance/	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/CSS/-moz-appearance	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://fb.me/react-warning-polyfills	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/Modernizr/Modernizr/issues/648	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://www.videolan.org/x264.html	chromecache_222.2.dr	false		unknown
https://fb.me/react-warning-dont-call-proptypes	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-legacyfactory	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://jsperf.com/key-missing	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/interaction.html#contenteditable	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://dom.spec.whatwg.org/#dom-domimplementation-hasfeature	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/spicyj/innerhtml-vs-createelement-vs-clonenode.	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://jsperf.com/obj-vs-arr-iteration	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://bugs.chromium.org/p/v8/issues/detail?id=4118	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.children.only	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-refs-must-have-owner).	chromecache_173.2.dr	false		unknown
http://bugs.jquery.com/ticket/12385.	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://yepnopejs.com.	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://fb.me/prop-types-docs	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=208427	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/AnimationEvent	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-devtools	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/7240	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-minification	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-unknown-prop%s	chromecache_173.2.dr	false		unknown
http://jsperf.com/key-exists	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-controlled-components	chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.children.count	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/708.	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://assets.adobedtm.com/extensions/EP308220a2a4c4403f97fc1960100db40f/AppMeasurement.js	chromecache_240.2.dr, chromecache_255.2.dr	false		unknown
http://jsperf.com/emptying-a-node	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=1276240	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent#Key_names	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/API/Window/scrollTo	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://codepen.io/eltonmesquita/full/GgXbvo/	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://fb.me/react-dom-factories	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/7233	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://dev.w3.org/csswg/css3-conditional/#the-csssupportsrule-interface	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_206.2.dr, chromecache_174.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inhead	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://jquery.com/	chromecache_171.2.dr, chromecache_206.2.dr, chromecache_174.2.dr, chromecache_178.2.dr, chromecache_150.2.dr, chromecache_238.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/API/HTMLCanvasElement.toDataURL	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://fb.me/createmixin-was-never-implemented	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-special-props)	chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/3236).	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://w3c.github.io/FileAPI/#constructorBlob	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://github.com/RobinHerbots/jquery.inputmask	chromecache_206.2.dr, chromecache_174.2.dr	false		unknown
http://www.quirksmode.org/blog/archives/2008/04/delegating_the.html	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.children.foreach	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/semantics.html#the-html-element	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://dev.w3.org/csswg/css3-conditional/#at-supports	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://fb.me/react-create-class	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.children.map	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://www.quirksmode.org/dom/events/scroll.html	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://fb.me/react-event-pooling	chromecache_173.2.dr	false		unknown
https://github.com/facebook/fbjs/blob/e66ba20ad5be433eb54423f2b097d829324d9de6/packages/fbjs/src/__f	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://baris.aydinoglu.info)	chromecache_212.2.dr, chromecache_261.2.dr, chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://web.archive.org/web/20180602074607/https://daneden.me/2011/12/14/putting-up-with-androids-bu	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
http://www.thespanner.co.uk/2007/11/26/ultimate-xss-css-injection/	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://developer.mozilla.org/en-US/docs/Web/CSS/filter	chromecache_251.2.dr, chromecache_215.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.createelement	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/pull/7232	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://code.google.com/p/v8/issues/detail?id=687	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_Sheet	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.children.toarray	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-intr	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://github.com/Modernizr/Modernizr/issues/1182	chromecache_215.2.dr	false		unknown
https://github.com/facebook/react/issues/7253	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/pull/6896	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inselect	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/6731#issuecomment-254874553	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-inbody	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/issues/7253#issuecomment-236074326	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.isvalidelement	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/facebook/react/pull/7101	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/syntax.html#parsing-main-incaption	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
http://facebook.github.io/react/docs/error-decoder.html?invariant=	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://github.com/zloirock/core-js/issues/173	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://facebook.github.io/react/docs/top-level-api.html#react.createfactory	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/microdata.html#microdata-dom-api	chromecache_235.2.dr, chromecache_173.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
17.253.144.10	icloud.com	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.69	unknown	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.68	unknown	United States		714	APPLE-ENGINEERINGUS	false
142.250.185.164	www.google.com	United States		15169	GOOGLEUS	false
17.248.209.64	gateway.fe2.apple-dns.net	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.73	ckdatabasews.fe2.apple-dns.net	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.70	setup.fe2.apple-dns.net	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.36	unknown	United States		714	APPLE-ENGINEERINGUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
17.248.209.33	cvws.apple-dns.net	United States		714	APPLE-ENGINEERINGUS	false
17.248.209.74	feedbackws.fe2.apple-dns.net	United States		714	APPLE-ENGINEERINGUS	false

Private

IP
192.168.2.4
192.168.2.5
192.168.2.23
192.168.2.14

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1528211
Start date and time:	2024-10-07 16:50:00 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/223@22/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.apple.com/support/systemstatus/ Browse: https://www.icloud.com/ Browse: https://iforgot.apple.com/password/verify/appleid Browse: https://www.icloud.com/system/icloud.com/2425Project45/en-us/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.74.206, 74.125.133.84, 34.104.35.123, 23.215.23.119, 2.23.196.201, 23.215.17.144, 17.32.194.38, 17.32.194.7, 20.12.23.50, 93.184.221.240, 142.250.185.74, 142.250.185.170, 142.250.184.234, 216.58.212.138, 216.58.206.42, 142.250.185.138, 142.250.185.234, 172.217.23.106, 142.250.181.234, 172.217.16.138, 142.250.185.202, 172.217.18.106, 142.250.186.138, 142.250.185.106, 142.250.186.74, 142.250.186.42, 142.250.74.202, 172.217.18.10, 142.250.184.202, 192.229.221.95, 40.69.42.241, 20.3.187.198, 13.85.23.206, 13.95.31.18, 4.245.163.56, 17.8.136.5, 17.8.136.187, 17.157.64.72, 172.202.163.200, 216.58.212.170, 142.250.185.99, 17.111.105.243
Excluded domains from analysis (whitelisted): www.apple.com.edgekey.net.globalredir.akadns.net, azurefd-t-fb-prod.trafficmanager.net, www.icloud.com-v1.edgekey.net, gateway.icloud.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, iforgot.idms-apple.com.akadns.net, clientservices.googleapis.com, securemetrics.apple.com, www.apple.com, wu.azureedge.net, idmsa.idms-apple.com.akadns.net, appleid.cdn-apple.com, idmsa.apple.com, clients2.google.com, ocsp.digicert.com, iforgot.apple.com, e4478.dscb.akamaiedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, e2885.e9.akamaiedge.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, appleid.cdn-apple.com.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.icloud.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.e
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"System Status \| Privacy Policy \| Terms & Conditions Copyright 2024 Apple Inc. All rights reserved.", "has_visible_qrcode":false}

URL: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Create Apple Account", "text_input_field_labels":["Email or Phone Number"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Sign in with Apple Account", "has_visible_qrcode":false}

URL: https://www.apple.com/support/systemstatus/ Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"System Status", "has_visible_qrcode":false}

URL: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ Model: jbxai	{ "phishing_score":1, "brands":"Apple", "legit_domain":"www.icloud.com", "classification":"wellknown", "reasons":["The URL 'www.icloud.com' is the legitimate domain for Apple's iCloud service.", "Apple is a well-known brand, and iCloud is a recognized service associated with Apple.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or Phone Number' are typical for a login page for a service like iCloud."], "brand_matches":[true], "url_match":true, "brand_input":"Apple", "input_fields":"Email or Phone Number"}

URL: https://www.icloud.com/ Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign In", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"The best place for all your photos, files, notes, mail, and more.", "has_visible_qrcode":false}

URL: https://iforgot.apple.com/password/verify/appleid Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Continue", "text_input_field_labels":["Email or phone number", "Type the characters in the image"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Reset your password Enter your email address or phone number that you use with your account to continue. Email or phone number Type the characters in the image New Code Vision Impaired", "has_visible_qrcode":false}

URL: https://iforgot.apple.com/password/verify/appleid Model: jbxai	{ "phishing_score":1, "brands":"Apple", "legit_domain":"apple.com", "classification":"wellknown", "reasons":["The brand 'Apple' is a well-known global technology company.", "The URL 'iforgot.apple.com' is a subdomain of 'apple.com', which is the legitimate domain for Apple.", "The subdomain 'iforgot' is commonly used by Apple for account recovery purposes.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions.", "The input fields 'Email or phone number' are typical for account recovery processes."], "brand_matches":[false], "url_match":false, "brand_input":"Apple", "input_fields":"Email or phone number"}

URL: https://www.icloud.com/system/icloud.com/2425Project45/en-us/ Model: jbxai	{ "brand":["Apple"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign In", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"The best place for all your photos, files, notes, mail, and more.", "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 145

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6983), with no line terminators
Category:	dropped
Size (bytes):	6983
Entropy (8bit):	5.137655711555743
Encrypted:	false
SSDEEP:	96:Yj0+VNs7pkcaHkHhSFNHuddKJkqRYFg3NJ2WXELNqV9Dqh94IDR1+W3aHPXs5CSA:mZNeavih2hg/xgdsDMD29Ft4HPiYN+Py
MD5:	33E5F7B4CD1360FA6599E7ADCBB494DD
SHA1:	899CB51CCB51A5560FFB399FD7AA22D175EEBE05
SHA-256:	7AEBD37D8BF463AB9608270C72B559B4409B1AF7F7BA5799D2541E0BE027F06F
SHA-512:	6BD5B4574B8B585F5CA9B069F357A35EFB14B6236C5B7D5CC5833A18E183EA815C71C41DF99B56A1BDB2A75F51895BCD81E60937A7ED6CB9DF001F2B942F17CE
Malicious:	false
Reputation:	low
Preview:	!function t(e,i,n){function r(o,c){if(!i[o]){if(!e[o]){var a="function"==typeof require&&require;if(!c&&a)return a(o,!0);if(s)return s(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var h=i[o]={exports:{}};e[o][0].call(h.exports,(function(t){return r(e[o][1][t]\|\|t)}),h,h.exports,t,e,i,n)}return i[o].exports}for(var s="function"==typeof require&&require,o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,i){"use strict";const n=t(2),r={className:"footer"};e.exports=class{constructor(t,e){e=Object.assign({},r,e),this.el=t,this._selectors={wrapper:"."+e.className,directory:e.directorySelector\|\|`.${e.className}-directory`,mini:e.miniSelector\|\|`.${e.className}-mini`},this._initializeDirectory(),this._initializeLangLink()}_initializeDirectory(){if(this._directory=this.el.querySelector(this._selectors.directory),!this._directory)return;this._directory.querySelectorAll(this._selectors.directory+"-column-section-state").forEach(t=>{const e=t.nextElementS

Chrome Cache Entry: 146

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64945), with no line terminators
Category:	downloaded
Size (bytes):	463209
Entropy (8bit):	5.320088808554314
Encrypted:	false
SSDEEP:	1536:HPlCYNJOZaxsKHLL198xnlilrIIYILIUITKrZBVBed0OAxKpKPP5FF9jtBz169VE:HNCYNJOZaxYlgrGwT/3WVyR
MD5:	DB405577DE4424694CA74273D3152FBF
SHA1:	047BEC9DDEFB341647715B03CB19AD2C1CE0AD89
SHA-256:	7AAB7C073B4C2638B8D13B82D0E99351E1495E4DD9DCC3A629B620B8583EF848
SHA-512:	8ED20D9168138C5C3DD940C3A68E59AC47CA756F70475CF652707C3CA5B4ECC3AB0711047AD1E3CF34872DBD4D6E313FE753956F2ABD1215C78A5375C8A13484
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/cssj/431834531/widget/auth/app-sk7.css
Preview:	[dir=ltr],[dir=rtl]{unicode-bidi:-webkit-isolate;unicode-bidi:-moz-isolate;unicode-bidi:-ms-isolate;unicode-bidi:isolate}bdo[dir=ltr],bdo[dir=rtl]{unicode-bidi:bidi-override;unicode-bidi:-webkit-isolate-override;unicode-bidi:-moz-isolate-override;unicode-bidi:-ms-isolate-override;unicode-bidi:isolate-override}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}abbr,blockquote,body,button,dd,dl,dt,fieldset,figure,form,h1,h2,h3,h4,h5,h6,hgroup,input,legend,li,ol,p,pre,ul{margin:0;padding:0}address,caption,code,figcaption,pre,th{font-size:1em;font-weight:400;font-style:normal}fieldset,iframe{border:0}caption,th{text-align:left}table{border-collapse:collapse;border-spacing:0}details,main,summary{display:block}audio,canvas,progress,video{vertical-align:baseline}button{background:none;border:0;box-sizing:content-box;color:inherit;cursor:pointer;font:inherit;line-height:inherit;overflow:visible;vertical-align:inherit}button:disabled{cursor:default}:focus{outline:2px solid #0071e3;out

Chrome Cache Entry: 147

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 148

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	dropped
Size (bytes):	382960
Entropy (8bit):	5.361356865855945
Encrypted:	false
SSDEEP:	3072:ShI+bJHQWzy1nZBYyswJFi72WZmQxjD5ToMEqSEcBadc+NcK:/+9QWm7BCMjyEacBlXK
MD5:	47291FDA2689A4EBE29AFFDD80565682
SHA1:	BB660D1DD4C4C39F91EA6773A343F09ADA902328
SHA-256:	FD98BB5EFEBC9C999A8A6EB77C18E35ABCEA12AD18AA7907F039429900B9ECFE
SHA-512:	6EADF92BAF288DC7D574E162C0961C2AE464B8A754E14598399427FA441E9A1CB5DBA2AF699D4CAF52EB345D6E0048225658B4CAF5C0063CF5B7103C54A22A42
Malicious:	false
Reputation:	low
Preview:	/! For license information please see iForgotWeb.js.LICENSE.txt /.(()=>{var e={2763:function(e){e.exports=function(){"use strict";const{entries:e,setPrototypeOf:t,isFrozen:r,getPrototypeOf:n,getOwnPropertyDescriptor:o}=Object;let{freeze:i,seal:a,create:l}=Object,{apply:c,construct:u}="undefined"!=typeof Reflect&&Reflect;i\|\|(i=function(e){return e}),a\|\|(a=function(e){return e}),c\|\|(c=function(e,t,r){return e.apply(t,r)}),u\|\|(u=function(e,t){return new e(...t)});const s=O(Array.prototype.forEach),f=O(Array.prototype.pop),d=O(Array.prototype.push),p=O(String.prototype.toLowerCase),m=O(String.prototype.toString),v=O(String.prototype.match),h=O(String.prototype.replace),y=O(String.prototype.indexOf),b=O(String.prototype.trim),g=O(Object.prototype.hasOwnProperty),w=O(RegExp.prototype.test),E=(S=TypeError,function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];return u(S,t)});var S;function O(e){return function(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),

Chrome Cache Entry: 149

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1324 x 950, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	213358
Entropy (8bit):	7.968202543812873
Encrypted:	false
SSDEEP:	6144:I4h6XA9Yv2dvjX8jdrq64EYcay5NsT20P:I4/Nxa/w20P
MD5:	616FA4B7B4CED3958818770EE3B68953
SHA1:	2B073C5F80E1850830E2275819D18BBE70BB08C8
SHA-256:	C49B9B2A18F9009BF2781A3884833EA9404E7359FE01B812DC45B317A77A1FF9
SHA-512:	8634C127C44C7EA76D07D3FFEEE3A79FC2A9DD2D9D0C8EEF0B3C6E91D1DA5741241815C732681A29468083123310DAE770FAF0933DC50976012AE212DBD0BE39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...............A5IDATx^...o\......=.... .T%."."I..*aV.".Jm...=u...R[....F..R...,.D.T....;.....#q....;q.....g...].D.$I.$I.$I.$I.$I..F.$IR.GB$G.$I2XJ.$I......N..$I.KI.$...L....._.L#.7jJ.$..$I.d....k.....a...$.`)I.$.%s.C..]W..L."...S;{.,.].6.#.3%I2XJ.$I...(.V....O> ..=.,Y.>.qs."f>X!S.$..$I.d....Z9F.........G.&g.:_+G....3...$.`)I.$eL.&....B.....sO.~Lp..=ER...bgm.\|..3+B.ELI....$I.qr..%;Ar............B.X.\|..6.A..3..u$I2XJ.$I..q..1Y... .\|7BVE.3..M....Lr..u.g].\|..4kBfy#..1...$.,%I...d9NV..b....r.<3Yp.Z......+.`.....+M..p"......#Xh..4.I.d......@.........2.$..d..N....L.....{..d.....a..z.V;b#...%...F......K;.(x^...b.,...Y......$I.KI.$.(.g..89E..F.r.<S..,.D...A.d..3Y.V"X.d......d.X.......A..eR..}../.~.l....$..l.l...=6h.K>i...6....B.,..r...Y:'?R.S.$..$I.<..,..R.,G..V.._.nq..T.\|.8...68..$9>]...S........_....p..........._.:[.......!..1+.0....$I.KI.$.(..5q.{........msz......j..4..8......@..N.....}......n4.d/h.\g..".{;....yM.,oa...)I..R.$I....

Chrome Cache Entry: 150

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61121)
Category:	downloaded
Size (bytes):	2060006
Entropy (8bit):	6.281685683819349
Encrypted:	false
SSDEEP:	49152:Y43TeLepq6oNvxYeKNbGTFsT+3SvfV0/Kibf5HqyfM:YjCNbGTFsT+3SvfVeuP
MD5:	4ABFFF7D291B3F774986E403ABB6C3C5
SHA1:	321140DD4A78EE78071931A5F17EB92F895CD653
SHA-256:	C56472ABE24D65168EAB5BE6CEA329CFD42F594B7D756DD9BC745B5A927CF2AC
SHA-512:	D722EB4E35BAF05ED29E0C6DAC5639F0766CDC20C5197E08A7D6FFAFD844B11F86A99FD3EF565F7FC3373CE27D5BAC9262183DBD267D622D72B3A1EAA3767C42
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/N1815899858/widget/auth/app.js
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 151

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 220536, version 1.0
Category:	downloaded
Size (bytes):	220536
Entropy (8bit):	7.99894522755539
Encrypted:	true
SSDEEP:	3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q
MD5:	059D2EDEB663A16DE959975D5ED21DB8
SHA1:	3674A0E6FBC086CF109A1B192EF5016D328FDFA5
SHA-256:	3231B77EE2775DADBAA76DE85F95763976AFF1091F63A67FA553D727A6EDB933
SHA-512:	FC26A8FB8B2EE58FE21FB45A1812F6CCCCFC5F8ED55B4ACD49657C9E4DE33FBFE0171C01A7A8FD13FC1E4090CC5D003C760054029F76AF6004A0DD3462112CEC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
Preview:	wOF2......]x..........]............................D..f.`...B..l..b.....\..H.6.$..r..x.. ?meta. ..8. ..k[8^...D.OK..Q.....)s..n..R...L#09..Mq..}.. ..z...z..E. ....u...............Z....{.....[.I...Y...RKl......4J.a"0.Y^.e...z......V/n2...j..g;...A..d..j..@....w..e...q2......U.qT.c....q.m.#...z.s@... =..X.Y x^b.a.....6M...y3........x....R33.25.H......TZ.z.e..z".kQ....%b.M....0.b.y.oG9Z.V.]g.......X....:...N..J.?.O......,.....3O.. .>.3....a.{.a..T.......M4Zy..K....t..L7XL.G..".^3\....zH.x...d..UD..m~WKS7._.....v#.rq.P..k.-j].C..E.R7s...S.....f.o............'..'.....q..}G..<.8:pO5.k.^3......[P.8.B.s...0a..F.C3a\.$.0f!..!../<....ke.........Z..?..G.D..Q.....S........<..N.]1d........Q_.2.M.._..2..Q[Nm:59E.N&..B......\|"....T..e.}1....>rg....~.~.#Y....A.....x.Fz",}.../.Os...FW...8.A...SzEm........Mu..5..........H7.....v.@Ijw&_@..K\...d.w.'..oQ...M...nc4M.r....".V.......k.9...c.U...(.Z..~..b.6}.K.n..n...a...Q.......0q.P......4S..f2K..`.~/.i....

Chrome Cache Entry: 152

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11742)
Category:	dropped
Size (bytes):	11743
Entropy (8bit):	5.217821329088493
Encrypted:	false
SSDEEP:	192:7fnLQrByq/VeJXMrWZLnQVho4EvZXDDJia:7nLQrBNe4WZLQgZ3
MD5:	FF706D7FC775DABEBA9743DAABB0DD2A
SHA1:	C8AAD45ABBAE4DB500C1229FFB03C63F65F48BA5
SHA-256:	C9EB57CF46D1986209C6D556D3AB36A8865B8448C5C491805E6232F93AD75B22
SHA-512:	E2569B462622241C6EB8CB447D638B090552A0DA6FB289FB7402FB7B0FD20FDF2B62EF5F973A3E711F675D3DBFAF0E362E83D7F905141743CC899940BB7D54A1
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{1216:function(e,t,n){e.exports=n(1240)},1240:function(e,t,n){"use strict";n.r(t);var a=n(4),o=n.n(a),i=n(1),r=n.n(i),s=n(3),c=n.n(s),l=n(11),p=n(623),d=n.n(p),u=n(45),v=n(103),g=n.n(v),h=n(176),f=n(5),b=n.n(f),w=n(624),m=n.n(w),y=(n(14),n(21),n(15)),E=n(0),x=n(24),O=n(94),S=n(53),M=n(107),I=n(47),C=new y.a,k={};try{k=window.AppleID.service.JSLogger}catch(e){}var A=b.a.Map.extend({define:{appleConnectUrl:{type:"string",value:"https://appleconnect.apple.com/"},appleConnectiForgotUrl:{type:"string",value:"".concat("https://appleconnect.apple.com/","iforgot")},appleid:{type:"string",set:function(e){return this.attr("hasError",!1),this.attr("notfound",!1),e}},countryCode:{type:"string",value:"US"},captchaAnswer:{type:"string",value:""},descriptionText:{type:"string",get:function(){return Object(E.b)("web.recovery.email.landing.description.text")}},isFormattedAccountName:{type:"boolean",value:!1},isInternal:{type:"boolean",value:!1},is

Chrome Cache Entry: 153

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2364
Entropy (8bit):	4.561836229722971
Encrypted:	false
SSDEEP:	48:cf+1USO7wQUlYvSNamnrbmM+sb1yRBVLb:cfwiwQUlYvSII2tsb1ypLb
MD5:	CC3C17D31CFDA473CA545554C30794AC
SHA1:	B64FA9CF9CBA5BA68567EC8FEA1A229B023F9FFD
SHA-256:	4F70A22F0D4E8ED3F4F2F823F7385328CBAAEDFF0EAE324A51287C3C1CBA4F92
SHA-512:	F89443708E33135A68E8658AF32BD17FB343F4074E094251AA6F103E46E8FE210C41638B88334F9A7527E8D2465F5117C7D3AA10144D60934948738728376F54
Malicious:	false
Reputation:	low
Preview:	"use strict";.(function (){. function isLocStringsScriptTag ( node ) {. return node && . node.tagName === 'SCRIPT' &&. node.type === 'application/json' &&. node.classList.contains('localization_strings');. }. . function parseJSONTextContent ( node ) {. try {. //this may failed if the content of the script tag is still not render.. return JSON.parse(node.textContent);. } catch ( error ) {. return undefined;. }. }. . window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.i18n_legacy = window.idms.app_config.i18n_legacy \|\| [];. . if (!window.idms.localizationStringsObserver) {. var parsedJSONScripts = [];. window.idms.localizationStringsObserver = new MutationObserver(function (mutationList) {. . var found = false;. . for (var i = 0; i < mutationList.length; i++) {. var record = mutationList[i];. . for (var j = 0; j < record.addedNodes.length; j++

Chrome Cache Entry: 154

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	100411
Entropy (8bit):	4.824699163285981
Encrypted:	false
SSDEEP:	384:kRo9T/8Sdo0iUg1WV0tXtRtMnDLoXLoiLosLoyLonLoELosnaLo/LocLoGLoJLoh:/T8SpiUg1WdZf
MD5:	B2503E3B9ED58D3F5EB600D99AF0A1BE
SHA1:	7F935770DC1048C410D3AD85A92CAD6639F8435D
SHA-256:	8CBDB3207A1D9178A114AF1B31985B361809A933082A9143D216E281061BDDF7
SHA-512:	F07354D43455935BFA6498E7DA99F39C19D27F8FDACF7C80FBF7CFA2D4BC8207B6B9409D5CE367F26D740168779F0A5C7D125C3E8BE6DFF183C3295D7ED3B6D0
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/3.main.css
Preview:	ui-checkbox.standard{position:relative;display:-webkit-inline-box;display:-webkit-inline-flex;display:-ms-inline-flexbox;display:inline-flex;-webkit-box-align:center;-webkit-align-items:center;-ms-flex-align:center;align-items:center;background-origin:border-box;border-radius:8px;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;outline:none;-webkit-tap-highlight-color:transparent;-ms-touch-action:manipulation;touch-action:manipulation}ui-checkbox.standard:after{content:"";position:absolute;width:16px;height:16px;border-radius:inherit;padding:6px;top:-6px}html:not([dir=rtl]) ui-checkbox.standard:after{left:-6px}[dir=rtl] ui-checkbox.standard:after{right:-6px}ui-checkbox.standard>input{width:16px;height:16px;position:absolute;opacity:0;margin:0}ui-checkbox.standard>.icon{width:16px;height:16px;position:relative;-webkit-transform:translate(0);transform:translate(0);overflow:visible}ui-checkbox.standard .square{display:block;stroke:rgba(0,0,0,.16);fill:transparent}ui-chec

Chrome Cache Entry: 155

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47124), with NEL line terminators
Category:	dropped
Size (bytes):	241706
Entropy (8bit):	5.327937354961122
Encrypted:	false
SSDEEP:	3072:gm4cgIKAQa7XwCRPM6naxlBQ/mhhHg/VBymzrgG:+clKXaTwUPmQ/mhhHEzyrG
MD5:	FB9CDEC9DC81C2FC0710CAB9204CFD34
SHA1:	3EC6F4BB754216C3BCEAF077AA2B3E36DAFC19FA
SHA-256:	8E7EAEA42F149031D0A2E4A7B8C3E52824B585B77737E3435DB788E4826694CF
SHA-512:	C1F4F4A5AFCEED38289DDE70D21DD0B792F8F199A0EB8A71DCB8D446C07BF66B0A7FD326C93F3C1FF35C453F6B93AA8B563C1E050B25A8691DED6EB437E044BC
Malicious:	false
Reputation:	low
Preview:	!function(t){var r={};function e(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:n})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,r){if(1&r&&(t=e(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(e.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)e.d(n,o,function(r){return t[r]}.bind(null,o));return n},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},e.p="",e(e.s=849)}([function(t,r,e){var n=e(1),o=e(40).f,i=e(36),a=e(28),u=e(179),c=e(135),s=e(114);t.expo

Chrome Cache Entry: 156

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	157537
Entropy (8bit):	5.450896766346486
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5U:f1mhfaahWIhsMkVT+BTtdOaBrdD
MD5:	E8E8B7A18F4EBDA24A25F702B22FA5C1
SHA1:	45DF73C1E3A0A3221A36654FCC46250E31D44C3C
SHA-256:	B740DD04F5C2A05AC983F4716999989B7A05B48C7E4717F77729B3DF19E97E3C
SHA-512:	57098BD96ADF38227E5B3C05CB1C715A9207F0BD4B198E3CF2B2A654D020BA3E0D65D04614F041E4291C86D928AB290619319C8C27F54D4563CBE71779568030
Malicious:	false
Reputation:	low
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 157

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1712
Entropy (8bit):	4.445883952550553
Encrypted:	false
SSDEEP:	24:tVLw95AFheDDKiEvdClGVox+heXiQ7X27LLEHy9bKa6/ccXDlD5kPrAQO1T7OlQ5:La5TDOdbVoiP6G6yBGhXHkDAQO1O+3
MD5:	FC0FE7DFE16BD2F9A53B1E4B99B76D05
SHA1:	42868DC2DBC849CFA1C289E398945FC0F5BCB0A3
SHA-256:	10CEBC15528E6215228F07B16CE3E388E6FF87A77028F4EB2178A5AA8E0AEE6D
SHA-512:	888D06FFA7393AB55268F07C1AFC2EF07A9049B350403915F05A45F9C4B22A527CAA9988E3B6B2E01161EF8157B8A1DCE271E095FB4BD4F97925DA2D9255632F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/3/en_US/assets/ac-footer/breadcrumbs/apple/icon_large.svg
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="14px" height="36px" viewBox="0 0 14 36" xml:space="preserve">..<defs>...<symbol id="apple">....<path d="M4.02,15.73c-0.25-0.16-0.51-0.39-0.77-0.71c-0.18-0.21-0.4-0.51-0.66-0.9c-0.45-0.65-0.82-1.4-1.1-2.25c-0.31-0.93-0.46-1.82-0.46-2.69c0-0.97,0.21-1.82,0.62-2.53C1.97,6.08,2.4,5.63,2.95,5.3C3.5,4.96,4.08,4.79,4.71,4.78c0.22,0,0.45,0.03,0.7,0.09C5.59,4.92,5.81,5,6.07,5.1c0.34,0.13,0.53,0.21,0.59,0.23c0.2,0.07,0.37,0.1,0.5,0.1c0.1,0,0.24-0.03,0.4-0.08c0.09-0.03,0.26-0.09,0.5-0.19C8.3,5.07,8.49,5,8.64,4.94c0.23-0.07,0.45-0.13,0.65-0.16C9.53,4.74,9.77,4.73,10,4.75c0.44,0.03,0.84,0.12,1.2,0.26c0.63,0.25,1.14,0.65,1.52,1.21c-0.16,0.1-0.31,0.21-0.45,0.34c-0.31,0.28-0.57,0.59-0.76,0.93c-0.27,0.48-0.4,1.01-0.4,1.56c0.01,0.67,0.18,1.26,0.52,1.77c0.24,0.37,0.56,0.69,0.95,0.95c0.19,0.13,0.36,0.22,0.52,0.28c-0.08,0.26-0.17,0.49-0.25,0.68c-0.22,0.52-0.48,0.99-0.77,1.43c-0.27,0.39-0.48,0.68-0.64,0.8

Chrome Cache Entry: 158

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3775
Entropy (8bit):	7.933892218866822
Encrypted:	false
SSDEEP:	96:pgn79kpWHHul8WtsiREv3vhputZaWWmYCfRbmgM7soc:pfp8Ol8UEPvhputZqCftmP7c
MD5:	326D20EADAD1A744B0AD8BDDDE18F987
SHA1:	7C29E96615B8444F9C9D8D3E2B2BFA0FDAD84EB8
SHA-256:	27A062E1F7C1F84BD52495DB51E4DE6E8FC9D95396B9EA40A454F158992F61BB
SHA-512:	E01FCA8E789198E884C570E3BF4810CE2B1FC38E727DAF01278C89139614F94678D2C25AD20E85349AC5F563E8FA72DA98D65DBC935FEFDA864BFD5FB6553637
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/721bdfc3241b42114d62842854461ae7.png
Preview:	.PNG........IHDR...P...P............IDATx^.1K#A..3.u....La+h!..~.I.O`..KX..Z[J.BH..p.wEP..Ab..R.E.Y!k....If......K..?..b...dV.2..UJEb\b....@.I.. ..#.q."y.HDb.....G..?rM..R......8.R^..5V..iY.......h..+.........Y.d....z..z....A.p.....3.$S.Y.l.....S.n.H.B@.$W.1..0sK.puWH...I..H?;...t....{.t1.3l........3..]yVb.x.Y..>$K$$^...i'..!...^U...H7U.(N...!6J.zs..6...&.}u2N,...2y.(.l.0.\|R..GD.c..........^.....s l97..4..h..... !_..d..f.....NK.....C...8....'.._}l..c.o........>DH ENl..^.5..........1c.v....:.i..n.H+..(....5U+....<......%B.....B .)...Z.JB.. >.F!@.!8......a...3s?...wo.{.....8X.k....s.Yk.u.N...]...AP.?U......._}.60y.F..pM_\|....7ux...V..]....U2....]f....+.#...._UP...b..bR.`f(...%;...9..>...m]....d\|.......o..o.0...X..]=Qw`....,.D.,+..A.-=.../.......<R....rWX>D.j.:....^4..'....C.xg..6QL{.qk...E8_.....'.......:.N.."...n....ydx..L.}......Q6..\..H.;-.U.s..w.xi...../.e...3..@.F....:.9...../.Zs..00.$.@B3. ..V.A......p.C.....9.%......@P....A...'...J..+b....

Chrome Cache Entry: 159

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	downloaded
Size (bytes):	2639821
Entropy (8bit):	5.48048116225346
Encrypted:	false
SSDEEP:	49152:y6x77AoKWQmDhZf/R7Tb1qW+8uyRWc6eyVEuHfWvY7AMgk1TE86rzqK0a5eMhqsa:yW0LhfMh4
MD5:	BA1D74D08046597782DE877BE89E4583
SHA1:	94D659C204C6A4F5F21C74F0133D4E91D1F37868
SHA-256:	F2D8DF5852352452D9F8EFA902BC56B743A0058462F9F72AC9688DE259FC0AAB
SHA-512:	D889208B05433B1E7A091D63B88594F3B30732B1013C4A1EAA0E65017B22F6F00E21DFB12AC72756131D46DCAE9EA1B675388C610F211791A0476BCEA08799C8
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 160

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61816)
Category:	dropped
Size (bytes):	574476
Entropy (8bit):	5.529267544818598
Encrypted:	false
SSDEEP:	12288:lCS0KCkZ7mL/HgzQYHTw5Lpk2vvaKVRrqDhKUkFo4FXJrEh+bf8ImP:eKBTw5i
MD5:	E117C52AA120AF175C53D47940799C63
SHA1:	27194EB74566CA87B21B33D9D4A784591FA2ACED
SHA-256:	F2C7EBD470B82C72F842FD3EADA1C0F41731C596C63302E80C65DDB33DA46B72
SHA-512:	25FF9E74D3C1E69781C35012188A7768DB2CC68929F1A5D7775459CF59464F1EC0FA2893ED920172EB091F55FA6AA5692846A7CE91E4E413EB7B27A8E31B718A
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function o(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(o.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)o.d(r,n,function(t){return e[t]}.bind(null,n));return r},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=1)}([function(e,t,o){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 161

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	267
Entropy (8bit):	5.214543468604978
Encrypted:	false
SSDEEP:	6:tIVYmc4slZKYnic4sG0nN0dlSTIccoLLyJVLc4KlBM:tV/KY7NklQI8LLyJVLzKTM
MD5:	42B9BA998E98814796D92163692CE747
SHA1:	316381460376ED45E7E8E5C159A9C6571E322258
SHA-256:	63BD44999BFEF2A50E8A7DE4BA86097AB78722AA8A6E4B1EC3E94E9CE69CD35B
SHA-512:	BCE933D885DE898F9487DEADF45A10F41BCB9F404D32F8F27652FA0FE2BE9EA908720DFB037313E25970AD1EE01E03922BD11E00431F8222F4CDBC1364E98F39
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="8px" height="18px" viewBox="0 0 8 18" xml:space="preserve">..<path d="M1.29,0.98L7.5,9l-6.21,8.01l-0.68-0.54L6.42,9l-5.8-7.49L1.29,0.98z" fill="#d6d6d6" />.</svg>.

Chrome Cache Entry: 162

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 215624, version 1.0
Category:	downloaded
Size (bytes):	215624
Entropy (8bit):	7.9989485398001365
Encrypted:	true
SSDEEP:	6144:z7V3AfjW2JBwuqxw4GJ14Yz2tx91c8YxRwXGs:zBASwii4GJ14m0U8vR
MD5:	9B53803BF8700DBA963BDB71BADC62C0
SHA1:	DD36319DD80C03A90367E48D2086F0B1D94A9A4A
SHA-256:	D42C2920FEE98B6A295697AE4217EE1215EA01C37E2F38887DF42BDB2A1ACA95
SHA-512:	0A9B253B8FB3244B6A409C638F8254EFE2696AFE2388D9137AEF015B61ADA2CAFD4B580216751C68C087EF8FEFEC820FA17629AE9568810385C8833040D62F3C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2
Preview:	wOF2......JH......F...I............................D..f.`...B..l..b.....P....6.$..r..x.. ?meta. ..V. ..k[........sy@......\.:q......~.B..N!.1.>A.j...c.. V.C.Ds.p!..l...U1.oSH.............W..........,,E.......1....11.......b...y!..f.j..Q..jT.e){.._.`..d.F..b..hlX[..Y..0C.b.n.Wm8...>.6...{UX)..u#......t..6B@....".H..T..6.r.]......D..`..}.3,...VK6.).b...b.9D.h[.... B8>.8..C&..;.+....8......2{.R1kjf..X=...\|.....e/.n.<.3..j.[....&.j..v....Y..P&..$n..N...4=.-.,Ez~w.F..U(b'}{?.a.V...;.O9</.p....A.}..TV.UX...A..)g..u.8g...qa...C........c3a...6K.w.~=.%(f......~..=.hP..O..9;..<...Su..]<.2{.#...E....:...p.%.e.>.n.,.%..%;..D?.i.I..}M..x>.6.D...6.j.FPu.......Hr..6.....N..S.i..."...Q"V.b.D..-Q_.;.,i.&.9#.f...._....\~...#.A......MB1Uzb$..F....g...A..0.....6.3..5..32...$.\;.G......}.y.=...EQ.y.<..4i..&eA.k.m.^...)Kauw1....~4..+\b.....M.\.~....{b....{.Z.....o.....G.Y.k............#P^..G%\R..X...t......D..).e.'..).uw...YJo.....KI.WF..&....W.N...z...]..K.:k.

Chrome Cache Entry: 163

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	dropped
Size (bytes):	1175983
Entropy (8bit):	6.145971492314462
Encrypted:	false
SSDEEP:	12288:cDVIFuZRz5GotLyymtFqO/2OhtfOERRhg54dPsNs0uOKNijx+S0FuCnf18eL5gXS:EIF0IotDmSOLLrRqKczzCuQ1Fduegq
MD5:	FD351FADBC3E6B555C32D67014ECD500
SHA1:	DF9B66562912B579E1C09F3D8441249E97ADD285
SHA-256:	00800D17E80D488FF1EBACD198B037C8835B1E02082F98E87E15792E07B55A5A
SHA-512:	42C70DE3E18DC468466ADDA9B87ABE027DB2DBDAB0723691720FDAF69606BDC59534536756C3D8645D61B1BE950CAC5F5077C07B0169D39E55F6B066B5E9FE4B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see apple-rings-animation.js.LICENSE.txt /.var appleringsanimation;(self.webpackChunkappleringsanimation=self.webpackChunkappleringsanimation\|\|[]).push([[682],{8917:function(e,t,r){"use strict";r.r(t),r.d(t,{renderAppleRingsApp:function(){return m}});var n=r(3981),a=r(1112);r(5720),r(7723);const i=function({elementSeparator:e="__",modifierSeparator:t="--",namespaceSeparator:r="-",namespace:n=""}={}){return function(t){return[function(e){return a(t,e)},function(r,n){return a([t,r].join(e),n)}]};function a(e,a={}){const i=n?[n,e].join(r):e;return[i].concat(Object.keys(a).filter((e=>a[e])).map((e=>e.startsWith(":")?e:[i,e].join(t)))).join(" ").replace(/ :/g,":")}}();var s=r(1578),o=r.n(s),l=JSON.parse('{"assets":[{"e":1,"h":756,"id":"image_0","p":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAvQAAAL0CAIAAADsvjRBAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF+GlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg

Chrome Cache Entry: 164

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.9929364496525155
Encrypted:	false
SSDEEP:	3:6uh1lF+DrHHWV605jf3DcVAJKtAKx:F1FeqV601DcVAXk
MD5:	4C9A2A97BF692BEFE9AFBAA0693327E3
SHA1:	F9D792D134004B00C3120A61B4352799B8880818
SHA-256:	61E72C504C870B558B89030E0833E9520C76C746D346334C25CEBD0FFDF933E6
SHA-512:	123A04E6F2F67C74477867446BD9048289FB6432E2BA81E83FD0DF7F5B473B357553947D3DF5682FB275E8C3391E06C8A7ADF1A6AB9E416B674CBAD5B10E95E3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnoYockEE1TRRIFDVuSjeESBQ3byczY?alt=proto
Preview:	CkAKDQ1bko3hGgQIVhgCIAEKLw3byczYGgQISxgCKiIIClIeChQhQC4kIypfLT8mKyUvLCleOig9PBABGP////8P

Chrome Cache Entry: 165

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1712
Entropy (8bit):	4.445883952550553
Encrypted:	false
SSDEEP:	24:tVLw95AFheDDKiEvdClGVox+heXiQ7X27LLEHy9bKa6/ccXDlD5kPrAQO1T7OlQ5:La5TDOdbVoiP6G6yBGhXHkDAQO1O+3
MD5:	FC0FE7DFE16BD2F9A53B1E4B99B76D05
SHA1:	42868DC2DBC849CFA1C289E398945FC0F5BCB0A3
SHA-256:	10CEBC15528E6215228F07B16CE3E388E6FF87A77028F4EB2178A5AA8E0AEE6D
SHA-512:	888D06FFA7393AB55268F07C1AFC2EF07A9049B350403915F05A45F9C4B22A527CAA9988E3B6B2E01161EF8157B8A1DCE271E095FB4BD4F97925DA2D9255632F
Malicious:	false
Reputation:	low
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="14px" height="36px" viewBox="0 0 14 36" xml:space="preserve">..<defs>...<symbol id="apple">....<path d="M4.02,15.73c-0.25-0.16-0.51-0.39-0.77-0.71c-0.18-0.21-0.4-0.51-0.66-0.9c-0.45-0.65-0.82-1.4-1.1-2.25c-0.31-0.93-0.46-1.82-0.46-2.69c0-0.97,0.21-1.82,0.62-2.53C1.97,6.08,2.4,5.63,2.95,5.3C3.5,4.96,4.08,4.79,4.71,4.78c0.22,0,0.45,0.03,0.7,0.09C5.59,4.92,5.81,5,6.07,5.1c0.34,0.13,0.53,0.21,0.59,0.23c0.2,0.07,0.37,0.1,0.5,0.1c0.1,0,0.24-0.03,0.4-0.08c0.09-0.03,0.26-0.09,0.5-0.19C8.3,5.07,8.49,5,8.64,4.94c0.23-0.07,0.45-0.13,0.65-0.16C9.53,4.74,9.77,4.73,10,4.75c0.44,0.03,0.84,0.12,1.2,0.26c0.63,0.25,1.14,0.65,1.52,1.21c-0.16,0.1-0.31,0.21-0.45,0.34c-0.31,0.28-0.57,0.59-0.76,0.93c-0.27,0.48-0.4,1.01-0.4,1.56c0.01,0.67,0.18,1.26,0.52,1.77c0.24,0.37,0.56,0.69,0.95,0.95c0.19,0.13,0.36,0.22,0.52,0.28c-0.08,0.26-0.17,0.49-0.25,0.68c-0.22,0.52-0.48,0.99-0.77,1.43c-0.27,0.39-0.48,0.68-0.64,0.8

Chrome Cache Entry: 166

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (44581)
Category:	downloaded
Size (bytes):	44740
Entropy (8bit):	4.986179828886138
Encrypted:	false
SSDEEP:	768:7S7p4S44vR3b8uuXTxXIXcDve1vee/LNVwA1NAGCR/65LblSuWhO7E9Z8ZyU3oEQ:7S7p4S44vR3b8uuXTxXIXcDve1vee/Lo
MD5:	DBA56F91FCF68922FFCE3B03D3909D3B
SHA1:	E7D33C31DAD11C0939F8B418FA27647E2AC47703
SHA-256:	082CDA01F13031722B72AF6DB1970424990036D86A4323139383DF2ECE89D1ED
SHA-512:	6112719B9F008D1937DBECE5CBFD7F88CAA1403BEBE28BDFC49F4309E5AF56126945B8E1C79ECA9E2C73D5B53CAEE1BBB3EB88E65E1DBE372D70B2594FFF8132
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/3/en_US/styles/ac-globalfooter.built.css
Preview:	@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:100;src:local("."),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:200;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:300;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../assets/ac-f

Chrome Cache Entry: 167

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 231048, version 1.0
Category:	downloaded
Size (bytes):	231048
Entropy (8bit):	7.998861039547291
Encrypted:	true
SSDEEP:	6144:f0qlANLlOdpD0F3z8qPvw5Y6TniomwkNaTaaZv:fLlycneoOvw5Y+iYkkTai
MD5:	01AE716A31EB383E1DF472E09888379C
SHA1:	9480B4273E241238E688FADD8A6E854B4236B08D
SHA-256:	39E23831B68995DBE602A60FAA248BE99E52B71730972DDB53378EBFC40A3A4F
SHA-512:	525488164554300677CA4C802950B66FEAF8C07B9BCF510C871255F8DCA6D848291BC9A17B3B6D6A7F019EF4365092E20B7E080180BBBED5797F28BFED2C02D0
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2
Preview:	wOF2..............................................$..f.`...B..l..b........Z.6.$..r..x.. ?meta.$..`. ..k[.._.w{...^.....T.d.....@.C...h..V%8....Dbm6$...A.T?...J...3@...H.1.t...\.....................M~D:.7.w3.{E.....H...E.QL05......N......:...H.L6..\|!JP..xbrj....{...".......&\.+R$sJ.........."d.!......e..(.DWj..k.u....m.UvU,c.Ek.8._..D....4..!..r.U&..$m[.7...EE .l..^.m.....%x...N1evI....$...I..<7.+.cz._.>.A.hjz...KF..63...Z..U.3..t..`.?.h....sL..u....)..P.[..=.V.Blh..O.%v.Y.q..@X.S58.....1.......G.....V._w.".#.8.\U...E.. v8...Ng.C~.]f.\|....9K..V..("...['.f...c..y.yiq.Er9.VH.eK....s..#\|^....y.5$WJ.....W..x..c..F.N^3..NL....Y....pbt.E..u[.h..zXt...(T.Z.B.N.#Q..)......M.'B&.^0xc.e~..@...r.kV0/..$..e...!...$}..}&....B..l/..d.c.[.2..6..V!...-w........v..?...%.w...<..L'.}.lbY..}......O...2qAW!..wDD.gBtO>.\].%Iun..gx...V!\........L.=.#1.M..N.~.>......O...*bw....H........_.....".3.....v...(Jq.........8.._h...o.Q...D....K.....A..~.$....BW...l...r

Chrome Cache Entry: 168

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	dropped
Size (bytes):	306186
Entropy (8bit):	5.608957158054437
Encrypted:	false
SSDEEP:	6144:HWG43OTYVU3dZsVVvA//xR2tjw3tHEYzziwZNvp:HFQOTpZsVFA/xAtjwdHEYzziCvp
MD5:	CE4DFE4B75601CEEA2FD04BF7603E485
SHA1:	ED00402B16BED1BB53007A764988771A617DB559
SHA-256:	F0829BF50B289658B250C491FDE05823D9DBE9BC5DE82BD111DC5D85AEC93C71
SHA-512:	03B43E5C13BF2074E8F7687A69A270AE9B5027C5EA1C8E4E98FB439ACE8B1059653870B135672AEC9E97484D34DBE2B1F916371597C7FE9FD15DEDF9DC110814
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 169

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 234260, version 1.0
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	7.998922087699875
Encrypted:	true
SSDEEP:	6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs
MD5:	B37ECD8895B373064F6E8630804F08AA
SHA1:	F2BFB2774A6294A641973B2920A9B2D7B2D863C9
SHA-256:	7B0041C48BA67087FCF5F6E8EC8D24E95DB06CAE9BF78C45B4542984BCB7208C
SHA-512:	5732DE86B7022DB347749E010E64A6B5A771CDD4D81D03F20593268028455CB2EA2B4047566CC742A00106584F7584BD7D5A79BAD7FAB09292C8DEA4493542B3
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2
Preview:	wOF2..............................................f..f.`...B..l..b.....H..O.6.$..r..x.. ?meta.$..B. ..k[o....U$....WW.T7.p.......#.y-.@.\|.i.?#.y..6.q.1..B......6.{I+.c+.,... ...............x...I...kX.m.Ol.0.....3..&.........P.YNFi..Y..jQ.c.P.].1_u..,p.}c.0..$i.C..H..E.f...{>..._.%..z.d=.c..8..TE-..._{....9.S#.$t...[....GN..2..>y..nj&8R.TI....;....[.I..1a.a..rW.. 8.5....z..v..../F...........M.J{M..E.....f.j~...j.i.....AU..$..u...../Fe..L.}>j.#\1...f...h$L...5;..ln.n..6..:.B...1...\.....:..e..9u.R.^..tv.B.NR..S>....f..%...._J.....GR~.!..-+o..?...f..E..........>...e5.$r... ...%..5......U(..H...H[..}.." ...........'.................e.,.......\|.e3..4..A.Qz-...W..r!..$....T...0....%.$....za...F..{7o.R.Z.N==......\..............P..a."......v...M.whz....4..?.~I..o.Z..#.e...xJ..O'..VD_.....;.~....{...m.5K.w..W...p`....(.(..BK.F....8..{.x.r......t..U.v.hvC'.J....Q.KM=D....j .....H.$[.....6.Gc..'p....$........'..s"..@.o...p.ME@......'.<.=.`>.

Chrome Cache Entry: 170

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	downloaded
Size (bytes):	159670
Entropy (8bit):	5.581906439638287
Encrypted:	false
SSDEEP:	1536:PnU1vlaLwQhFt0XvgXtYQpEdYhRYRApbQNyvVzdPrTKUKdu1eSs1Q6EbIsLHV0QG:sJbQyGmRqJIv7ElnG
MD5:	DACF3BF4ADF42A1965C33A55253687ED
SHA1:	3DC670CA94708976EDC18587096C3A4B3077B5AE
SHA-256:	A23EA48F42EDD03E41D2D3E75393B2D4717AD6E215887D6C3C334BBBF93AD238
SHA-512:	B9D1F8AEF1A5435CC207D64D6A4F381BF7C4EDB2164B39915CF151BB30D2810FB99EBC77E3B3C8FE3535066758658C02EE17400FFE44C7A792D8915175C4EC76
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/3.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 171

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61121)
Category:	dropped
Size (bytes):	2060006
Entropy (8bit):	6.281685683819349
Encrypted:	false
SSDEEP:	49152:Y43TeLepq6oNvxYeKNbGTFsT+3SvfV0/Kibf5HqyfM:YjCNbGTFsT+3SvfVeuP
MD5:	4ABFFF7D291B3F774986E403ABB6C3C5
SHA1:	321140DD4A78EE78071931A5F17EB92F895CD653
SHA-256:	C56472ABE24D65168EAB5BE6CEA329CFD42F594B7D756DD9BC745B5A927CF2AC
SHA-512:	D722EB4E35BAF05ED29E0C6DAC5639F0766CDC20C5197E08A7D6FFAFD844B11F86A99FD3EF565F7FC3373CE27D5BAC9262183DBD267D622D72B3A1EAA3767C42
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 172

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 173

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (385)
Category:	downloaded
Size (bytes):	2543019
Entropy (8bit):	5.95592135068074
Encrypted:	false
SSDEEP:	49152:j7s5QExDjdm7zMT+XYlmQlkNWm/eHb71IVUtmV1qZbmnXXjqNhUmZ1yZSHJMuc6:rqZMU
MD5:	F9635763915B0C443AEA55F242E9A0DF
SHA1:	D6059AAD80590344A0EACAA21A18395A1C393C19
SHA-256:	3180B2F69A9F79DE8CEFD70DF30F49074EFF5E28A7FCEDA5911B1BABBD090AE8
SHA-512:	92789C370A6BB9A839FA517D6A2A29841F6B18B07FB7F96F9B3C8E448C3D9FD4B81C4F09737CA5AE6862CF68D5DB777844CBF5C19598913871F20F8D64EF4B7E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/scripts/client.min.built.js
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId])./**/ ...return installedModules[moduleId].exports;./**/./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...exports: {},./**/ ...id: moduleId,./**/ ...loaded: false./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.loaded = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__we

Chrome Cache Entry: 174

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49996)
Category:	dropped
Size (bytes):	2167997
Entropy (8bit):	6.251473991302688
Encrypted:	false
SSDEEP:	49152:+3TeLepq6oNvdAcDkMD1strQJ2PoNDxqvHpwSKQZH+:fD1strQJ2PoNDxUO
MD5:	3E9F3CE41CB55E3F6B739DE997520CD2
SHA1:	55ACDACA290AF2674B36BB20285DC2D280E6CD7C
SHA-256:	1B092359320F8464249AEFC6ECA089D357819AD145962AECDF35BF95FDE1EDEC
SHA-512:	5CE4270E4C7ADD1D5C4CDD3D8ED563EAC1C07016EF58B756A9F2D5C03F453B308897C81C8855298E3486CED8B69DF683F8D6855B71F6D5C25EAE6416566E0392
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 175

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	39831
Entropy (8bit):	4.795377188142818
Encrypted:	false
SSDEEP:	768:tmT1EQo46uWNYFJ1mv+ZNrMUVfL4k3pY7jVSHUo6eI:tGLPmL
MD5:	6E003CF32B86A7E21C1ABE557DA261D8
SHA1:	81272686038C23E559D024740CEABC2FE913C959
SHA-256:	1099CA4C1CD9C7B7419C2745BA794D376282F95B396F533802F0F1473BB22703
SHA-512:	82A02C26117FA73F6EB0D7E28BB375394FF7E86B1EC3A1C5A17DAEE5B58667BFC38C654047937F5491457A83903E9495513F975519B8B94E7B5F78FBE255705F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/flyouts?locale=en_US
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 176

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	1175983
Entropy (8bit):	6.145971492314462
Encrypted:	false
SSDEEP:	12288:cDVIFuZRz5GotLyymtFqO/2OhtfOERRhg54dPsNs0uOKNijx+S0FuCnf18eL5gXS:EIF0IotDmSOLLrRqKczzCuQ1Fduegq
MD5:	FD351FADBC3E6B555C32D67014ECD500
SHA1:	DF9B66562912B579E1C09F3D8441249E97ADD285
SHA-256:	00800D17E80D488FF1EBACD198B037C8835B1E02082F98E87E15792E07B55A5A
SHA-512:	42C70DE3E18DC468466ADDA9B87ABE027DB2DBDAB0723691720FDAF69606BDC59534536756C3D8645D61B1BE950CAC5F5077C07B0169D39E55F6B066B5E9FE4B
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/N672189052/appleringsanimation.js
Preview:	/! For license information please see apple-rings-animation.js.LICENSE.txt /.var appleringsanimation;(self.webpackChunkappleringsanimation=self.webpackChunkappleringsanimation\|\|[]).push([[682],{8917:function(e,t,r){"use strict";r.r(t),r.d(t,{renderAppleRingsApp:function(){return m}});var n=r(3981),a=r(1112);r(5720),r(7723);const i=function({elementSeparator:e="__",modifierSeparator:t="--",namespaceSeparator:r="-",namespace:n=""}={}){return function(t){return[function(e){return a(t,e)},function(r,n){return a([t,r].join(e),n)}]};function a(e,a={}){const i=n?[n,e].join(r):e;return[i].concat(Object.keys(a).filter((e=>a[e])).map((e=>e.startsWith(":")?e:[i,e].join(t)))).join(" ").replace(/ :/g,":")}}();var s=r(1578),o=r.n(s),l=JSON.parse('{"assets":[{"e":1,"h":756,"id":"image_0","p":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAvQAAAL0CAIAAADsvjRBAAAACXBIWXMAAAsTAAALEwEAmpwYAAAF+GlUWHRYTUw6Y29tLmFkb2JlLnhtcAAAAAAAPD94cGFja2V0IGJlZ2luPSLvu78iIGlkPSJXNU0wTXBDZWhpSHpyZVN6TlRjemtjOWQiPz4gPHg

Chrome Cache Entry: 177

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 215624, version 1.0
Category:	downloaded
Size (bytes):	215624
Entropy (8bit):	7.9989485398001365
Encrypted:	true
SSDEEP:	6144:z7V3AfjW2JBwuqxw4GJ14Yz2tx91c8YxRwXGs:zBASwii4GJ14m0U8vR
MD5:	9B53803BF8700DBA963BDB71BADC62C0
SHA1:	DD36319DD80C03A90367E48D2086F0B1D94A9A4A
SHA-256:	D42C2920FEE98B6A295697AE4217EE1215EA01C37E2F38887DF42BDB2A1ACA95
SHA-512:	0A9B253B8FB3244B6A409C638F8254EFE2696AFE2388D9137AEF015B61ADA2CAFD4B580216751C68C087EF8FEFEC820FA17629AE9568810385C8833040D62F3C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2
Preview:	wOF2......JH......F...I............................D..f.`...B..l..b.....P....6.$..r..x.. ?meta. ..V. ..k[........sy@......\.:q......~.B..N!.1.>A.j...c.. V.C.Ds.p!..l...U1.oSH.............W..........,,E.......1....11.......b...y!..f.j..Q..jT.e){.._.`..d.F..b..hlX[..Y..0C.b.n.Wm8...>.6...{UX)..u#......t..6B@....".H..T..6.r.]......D..`..}.3,...VK6.).b...b.9D.h[.... B8>.8..C&..;.+....8......2{.R1kjf..X=...\|.....e/.n.<.3..j.[....&.j..v....Y..P&..$n..N...4=.-.,Ez~w.F..U(b'}{?.a.V...;.O9</.p....A.}..TV.UX...A..)g..u.8g...qa...C........c3a...6K.w.~=.%(f......~..=.hP..O..9;..<...Su..]<.2{.#...E....:...p.%.e.>.n.,.%..%;..D?.i.I..}M..x>.6.D...6.j.FPu.......Hr..6.....N..S.i..."...Q"V.b.D..-Q_.;.,i.&.9#.f...._....\~...#.A......MB1Uzb$..F....g...A..0.....6.3..5..32...$.\;.G......}.y.=...EQ.y.<..4i..&eA.k.m.^...)Kauw1....~4..+\b.....M.\.~....{b....{.Z.....o.....G.Y.k............#P^..G%\R..X...t......D..).e.'..).uw...YJo.....KI.WF..&....W.N...z...]..K.:k.

Chrome Cache Entry: 178

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46673)
Category:	downloaded
Size (bytes):	134281
Entropy (8bit):	5.315833008606401
Encrypted:	false
SSDEEP:	1536:McLDh9iasJAJWjL0//GL7+eYWaxsZdyriLM5ZabFkBC2Ekp8Br/SReLjK/JUmtvu:5s2JWqOLM5ZKM64eJYIgYrojr/Nmn
MD5:	B293E734E70FDD3941ED23CB75D798A7
SHA1:	45D46E2054A48DE58993A73E015E361AF58AE48C
SHA-256:	FA4CB957A209F05B0E7AAA99012E69B84E937A3CE6F5334064DC5572D3EF0EDE
SHA-512:	D8A8938D7F3C14D79A9CA2D5A8D4794653BE0B6E7A56CF6CF72237A2E13301E9A2DA2735CD1D17062F971FAA0F09D6DF85062458A74131EAD4F7F789C5C49DFD
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/1770954589/init-app.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=865)}({105:function(e,t,n){"use strict";t.a=function(e,t){return e===t\|\|e!=e&&t!=t}},106:func

Chrome Cache Entry: 179

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5568
Entropy (8bit):	4.705638267587358
Encrypted:	false
SSDEEP:	48:YuXrSEsah8/5VUnnOz3D3OO8pOwFCCDb2UJzcrzWxl2j8Jnl2fv0mTt6Mp9Jpxrh:tTEz3yOoconY0mR6Spx+0+HU
MD5:	EF74B6CB2F6E3444E4272B03007EFAE0
SHA1:	21A30C4C30D6A6A8C0655E6C08997142636DEE0E
SHA-256:	F48269E5370D5426F10DB9B4F0F74209B12E2C1FFA155F99B7066A778F6488FD
SHA-512:	2D2372F9A1BDDBE1070CA15C88737B628A8220D78702ECEE19581A7CA20F05C93D683B6CE5CF32BAE724F2BBE8251E385DC9CAF4A3BEE4E86323E75E0406256F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/data/system_status_en_US.js
Preview:	{"drpost":false,"drMessage":null,"services":[{"redirectUrl":null,"events":[],"serviceName":"App Store"},{"redirectUrl":null,"events":[],"serviceName":"Apple Account"},{"redirectUrl":"https://developer.apple.com/news-publisher/","events":[],"serviceName":"Apple Account Card"},{"redirectUrl":null,"events":[],"serviceName":"Apple Arcade"},{"redirectUrl":null,"events":[],"serviceName":"Apple Books"},{"redirectUrl":null,"events":[],"serviceName":"Apple Business Essentials"},{"redirectUrl":null,"events":[],"serviceName":"Apple Business Manager"},{"redirectUrl":null,"events":[{"affectedServices":null,"eventStatus":"completed","startDate":"10/05/2024 22:30 PDT","endDate":"10/06/2024 02:00 PDT","epochStartDate":1728192600000,"epochEndDate":1728205200000,"messageId":"2000004019","statusType":"Maintenance","datePosted":"10/06/2024 02:00 PDT","usersAffected":"Some users were affected","message":"Due to planned maintenance, some Apple Card Savings account functionality were temporarily unavailable.

Chrome Cache Entry: 180

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	5568
Entropy (8bit):	4.705638267587358
Encrypted:	false
SSDEEP:	48:YuXrSEsah8/5VUnnOz3D3OO8pOwFCCDb2UJzcrzWxl2j8Jnl2fv0mTt6Mp9Jpxrh:tTEz3yOoconY0mR6Spx+0+HU
MD5:	EF74B6CB2F6E3444E4272B03007EFAE0
SHA1:	21A30C4C30D6A6A8C0655E6C08997142636DEE0E
SHA-256:	F48269E5370D5426F10DB9B4F0F74209B12E2C1FFA155F99B7066A778F6488FD
SHA-512:	2D2372F9A1BDDBE1070CA15C88737B628A8220D78702ECEE19581A7CA20F05C93D683B6CE5CF32BAE724F2BBE8251E385DC9CAF4A3BEE4E86323E75E0406256F
Malicious:	false
Reputation:	low
Preview:	{"drpost":false,"drMessage":null,"services":[{"redirectUrl":null,"events":[],"serviceName":"App Store"},{"redirectUrl":null,"events":[],"serviceName":"Apple Account"},{"redirectUrl":"https://developer.apple.com/news-publisher/","events":[],"serviceName":"Apple Account Card"},{"redirectUrl":null,"events":[],"serviceName":"Apple Arcade"},{"redirectUrl":null,"events":[],"serviceName":"Apple Books"},{"redirectUrl":null,"events":[],"serviceName":"Apple Business Essentials"},{"redirectUrl":null,"events":[],"serviceName":"Apple Business Manager"},{"redirectUrl":null,"events":[{"affectedServices":null,"eventStatus":"completed","startDate":"10/05/2024 22:30 PDT","endDate":"10/06/2024 02:00 PDT","epochStartDate":1728192600000,"epochEndDate":1728205200000,"messageId":"2000004019","statusType":"Maintenance","datePosted":"10/06/2024 02:00 PDT","usersAffected":"Some users were affected","message":"Due to planned maintenance, some Apple Card Savings account functionality were temporarily unavailable.

Chrome Cache Entry: 181

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	660443
Entropy (8bit):	4.90189728416174
Encrypted:	false
SSDEEP:	1536:IiGC8DSJ5iZp/6pk1QHJ1DPJ7T2L2OWQhRz2M0QhC60GWc0VXfeHLbRhk1f4MqkG:7dtPJ7TG2OWQhRzoq
MD5:	9B16E7397570EDFB5AD63616F5F5C73D
SHA1:	A47FA6695E402318D5174D11A714D938B637921E
SHA-256:	0371FEB81C9E8913C5FADFACFFC8FA0E241973E12F3593F9D2499DEEE2FC7939
SHA-512:	5B00B84DC4D8B56F71609241BDC148ED1632BD8D34F6C720E156DFDAFBB60064B5316C9538C550FC4A8A5BDCD69FE866E008F02FF31F8F771EB389D0B224D800
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/1.main.css
Preview:	.root-component iframe.child-application{-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;border:0;margin:0;padding:0;border-radius:inherit;position:absolute;inset-inline-start:0;inset-block-start:0;inline-size:100%;block-size:100%;visibility:hidden;opacity:0}.root-component[dir=ltr] iframe.child-application,[dir=ltr] .root-component iframe.child-application{left:0;top:0;width:100%;height:100%}.root-component[dir=rtl] iframe.child-application,[dir=rtl] .root-component iframe.child-application{right:0;top:0;width:100%;height:100%}.flex-page-viewport{position:absolute;inset-inline-start:0;inset-block-start:0;inline-size:100%;block-size:100%;overflow-y:auto;visibility:hidden;opacity:0}.flex-page-viewport[dir=ltr],[dir=ltr] .flex-page-viewport{left:0;top:0;width:100%;height:100%}.flex-page-viewport[dir=rtl],[dir=rtl] .flex-page-viewport{right:0;top:0;width:100%;height:100%}.flex-page-viewport .flex-page-content{position:absolute;inset-inline-start:0;inse

Chrome Cache Entry: 182

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	15185
Entropy (8bit):	5.320013959980053
Encrypted:	false
SSDEEP:	384:yG2Si8Fho4v3/cU3fYrXVjR9lpxWIwqJHX+yg0ABvJs5NZGynKGiLHCW7:yG2Si8Fho4v30U3fYrXVjR9lpxWIwqJ+
MD5:	EEEBA14F097BEBB6D8848955AD560EFA
SHA1:	DB7D7A9E9D3741F9558D7A6468F24A1E66B800E0
SHA-256:	433BA35F0585AD9B09E08D422A99881FD47F621650587251E7F59555131D5EF9
SHA-512:	53E935848D019FD7E67D1BA15F8F81DCDC6BA654F7EC51D428F1086E89CA56535B0A2CE54F4162142F58A8146483FD648BC411B5F359B148C2DD40EEAEA7D68E
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts/?families=SF+Pro,v1\|SF+Pro+Icons,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v1/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:200;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_thin.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_thin.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v1/sf-pro-display_thin.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. */..}..@font-face {...font

Chrome Cache Entry: 183

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60050)
Category:	downloaded
Size (bytes):	577883
Entropy (8bit):	5.534201114776914
Encrypted:	false
SSDEEP:	12288:aYSsK4GZvdM3qaMZpdTwGpIXN4BSWquq2iGuFDeBD1qWPH+LLIIHQ:TK9Tw2
MD5:	E9A08F695655A19BA3E7B741B791F0E9
SHA1:	F248C2604A23EC1CC3510595A35D87708E626476
SHA-256:	2FB77285AF8EB1F9BD68C3190A434C52E48D7DE25B3A3AE7DA2DCB754F39775C
SHA-512:	9E28BFCF06ADA3114FFBD703572FF8CA4BBE2F623B90955AC486E5CF6FF60A39F0DB641F79462BE1A5006A452E5E673992F085BB48CE4F6C2703F60FF9E511D8
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/format-phonenumber/format-phonenumber.js?v=2
Preview:	!function(e){var o={};function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,o){if(1&o&&(e=t(e)),8&o)return e;if(4&o&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&o&&"string"!=typeof e)for(var n in e)t.d(r,n,function(o){return e[o]}.bind(null,n));return r},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,o){return Object.prototype.hasOwnProperty.call(e,o)},t.p="",t(t.s=1)}([function(e,o,t){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 184

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2854
Entropy (8bit):	3.9883518390132973
Encrypted:	false
SSDEEP:	48:C5XbEh3RbyQKorLBl4kIKgVTPr/icjml+rJoqYCfCWYpc5l:+r4Oor9ukIK4TXjLt/qYl
MD5:	2D43F24008EF4F53F4FB37A1EA995C5E
SHA1:	2EBB4E3408529D41A923BEB5EB7863157991C839
SHA-256:	9EBD3AABAB461B12E7297EB32B77BEC1DC7E06C1AEA36FAEE1E5D49DE711CCA9
SHA-512:	367B2866BB3F78842EB4C3E185E6A53058AFE00B9210CC061212D3D784F26C57BD1A2733559C8200F93B330919DC3CC74F90E672FF7F073BF2B43A9928982FDA
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/bin/cb7953610/dist/assets/profile.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120 120"><g data-name="Layer 2"><path d="M60 2.5a55.47 55.47 0 00-45.91 86.64c4.15-1 7.71-1.62 7.71-1.62a5.53 5.53 0 003.88-3.31.76.76 0 00.05-.17c.2-1.08.4-3.35.48-4.25a.76.76 0 00-.27-.63 11.36 11.36 0 01-2.05-2.36c-2.35-3.13-2.35-9.4-2.35-9.4l-.54-.25c-2.35-1.57-2.35-6.27-2.35-6.27l-.52-1.83c-1.39-4-.06-6 .66-6.72a1.05 1.05 0 00.28-.93 56 56 0 01-.67-8.28c.26-6.53 1.31-7.83 1.31-7.83.52-3.66 4.44-4.18 4.44-4.18l.78-1c2.35-3.4 4.44-4.18 4.44-4.18 3.4-1.83 11-.78 11-.78a23.67 23.67 0 0111.49 4.7c4.44 3.4 5.22 9.93 5.22 9.93a38.09 38.09 0 01-.68 12.09.71.71 0 00.2.69 2.79 2.79 0 01.73 1.06 9.55 9.55 0 01-.78 7.05v1a6.88 6.88 0 01-2.32 5.53 1 1 0 00-.37.62c-.23 1.37-.45 3.51-.45 3.51A14.56 14.56 0 0150 79.1a1.09 1.09 0 00-.25.79l.25 2.93a4.51 4.51 0 002.62 4.12c1.81.71 1.39 2.35-.39 2.68-11.68 2.22-14.51 9.65-14.51 9.65a30.46 30.46 0 00-3 8.11q2.39 1.23 4.9 2.22c1.18-4.18 3.32-9 7.22-11.83 0 0 0-1.57 18.28-5.49 0 0 3.43-.71 5.11-2.88a

Chrome Cache Entry: 185

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17248
Entropy (8bit):	5.310509287024952
Encrypted:	false
SSDEEP:	384:c8i6a2S0gvVzN440/h7ZCkZYju3TqzabHFrVBtBxyYgKdvzGKou+rFVkhL3qqBh:c8i6a2S0gvVzN440/h7skYjdzabHFrV7
MD5:	8C88ED0933F583EA151D723E205EBBBF
SHA1:	FB59D17468EF2AC7D43277846D7717FB340C9D4F
SHA-256:	44E54D4976556AA0DACF4C441E18166B923AB30C243EB7EB1A0F794C6B674B1D
SHA-512:	F70281E4D191F3B195722E9F1AAB34ECCA668DCCBEEF6E484A073C77079CFF23720484EFF9DF2A93C65633A3EA62F0A02362B939B198EE7950EA05C30C31D354
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts/?families=SF+Pro,v3"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.eot');.../ (C) 2019 Apple Inc. All ri

Chrome Cache Entry: 186

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	downloaded
Size (bytes):	306186
Entropy (8bit):	5.608957158054437
Encrypted:	false
SSDEEP:	6144:HWG43OTYVU3dZsVVvA//xR2tjw3tHEYzziwZNvp:HFQOTpZsVFA/xAtjwdHEYzziCvp
MD5:	CE4DFE4B75601CEEA2FD04BF7603E485
SHA1:	ED00402B16BED1BB53007A764988771A617DB559
SHA-256:	F0829BF50B289658B250C491FDE05823D9DBE9BC5DE82BD111DC5D85AEC93C71
SHA-512:	03B43E5C13BF2074E8F7687A69A270AE9B5027C5EA1C8E4E98FB439ACE8B1059653870B135672AEC9E97484D34DBE2B1F916371597C7FE9FD15DEDF9DC110814
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/1.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 187

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	341
Entropy (8bit):	4.851351786333533
Encrypted:	false
SSDEEP:	6:6UDoGJ6jRcAf9yjCMY3CBxd+oYtIsgCBpViH6GKqWT+6Ff1xKqSLRMGdbD1PNjMe:VnwjRxfYjZYk+xR1k/WT+6FfLSljVPNr
MD5:	C2E1F0684FA9124BCD9DA5915E6407E9
SHA1:	06CEFB1276925B27E7E3B76D6D460289FFF5B081
SHA-256:	BDA73199844BC4968E2821B0720955A22470E2D75B4AC20BE31412A3F447544A
SHA-512:	E9839DB8423709460337191DEC1261F11F3DA025359A1F8B2BCB14217BC576312B2D8F9A9003371A5EDCCC4C2786369A30E30F536C1CB22D6830FF5469DD9152
Malicious:	false
Reputation:	low
Preview:	( function() {..var localizer = {...locale: "en_US",...title: "System Status",...timeFormat : " hh:mm a ",...supportText: "If you are experiencing an issue not listed here, ",...supportLink: "contact support",...developerText: "Looking for developer system status?",...developerLink: "Find it here"..}..window.sspLocalizer = localizer;.})();

Chrome Cache Entry: 188

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.081903144584382
Encrypted:	false
SSDEEP:	12:sumkJW2E+eR63cCRa4hQaOMQJxGGGGGGGGGGGGBAyjctlrszXkl6wTQ05ljX2zIa:sumD2E+/3cCTFlrwXs647jX2pG/YgkLP
MD5:	AF050CA08B2FCF65ED89C9C4C4DB68CA
SHA1:	A16AB35F73FDF3EFF6843BDF96AD337231717C6C
SHA-256:	1FC96B235BBB7AD450A3D7B0CB1632F06F7A174EFE637005C4A8FC4101352676
SHA-512:	97992D5BB347022DF9723D9189E8D7C4196ADE491BA83CF7C796E5F5815C8BCD4335650FCDD02F5A5C0FC93D9B4E61E4DD38CA02BE72C86795E0025404D176A6
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/icons/favicon.ico
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................~~~.yyy.................................................................................................................aaa.iii.cccpaaa.bbb{ggg3ppp.{{{.jjj.ccc[ccc.ccc.fff6........................................................................fff.jjj.aaa.^^^.^^^.^^^.___.aaa.bbb.```.___.^^^.^^^.___.fffKKKK.vvv.........................................................ooo.www.ccc.__

Chrome Cache Entry: 189

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65366), with no line terminators
Category:	downloaded
Size (bytes):	744879
Entropy (8bit):	5.417822969978046
Encrypted:	false
SSDEEP:	3072:M8Oz5tcVPa8Oz5tcVPO8Oz5tcVPO8Oz5tcVPf8Oz5tcVPI8Oz5tcVPr8Oz5tcVP2:2
MD5:	3899C1A2B27F9605F947D97BD997FED1
SHA1:	1A34467ECC7610C04C74CEBD839F8E238652C9C2
SHA-256:	BA66701A334A41D5512DA96A8909D150953B36D9AE6A63762E4F2BAAB50E5556
SHA-512:	F7C3E1A377E1C91518A914CFCDB18251A3B0864D8388034C0D6CE56050C81BF372FC7F8178479E120E094A41E19278A44462284F8ED7003DBFC63879685C1996
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/module-assets/home-11404516dbe75ee27465.css
Preview:	@media only screen and (min-width:1441px){[dir=ltr] .xlarge-offset-0{margin-left:0}[dir=rtl] .xlarge-offset-0{margin-right:0}.xlarge-order-0{order:0}.xlarge-1{flex-basis:8.33333%;max-width:8.33333%}[dir=ltr] .xlarge-offset-1{margin-left:8.33333%}[dir=rtl] .xlarge-offset-1{margin-right:8.33333%}.xlarge-order-1{order:1}.xlarge-2{flex-basis:16.66667%;max-width:16.66667%}[dir=ltr] .xlarge-offset-2{margin-left:16.66667%}[dir=rtl] .xlarge-offset-2{margin-right:16.66667%}.xlarge-order-2{order:2}.xlarge-3{flex-basis:25%;max-width:25%}[dir=ltr] .xlarge-offset-3{margin-left:25%}[dir=rtl] .xlarge-offset-3{margin-right:25%}.xlarge-order-3{order:3}.xlarge-4{flex-basis:33.33333%;max-width:33.33333%}[dir=ltr] .xlarge-offset-4{margin-left:33.33333%}[dir=rtl] .xlarge-offset-4{margin-right:33.33333%}.xlarge-order-4{order:4}.xlarge-5{flex-basis:41.66667%;max-width:41.66667%}[dir=ltr] .xlarge-offset-5{margin-left:41.66667%}[dir=rtl] .xlarge-offset-5{margin-right:41.66667%}.xlarge-order-5{order:5}.xlarge-6

Chrome Cache Entry: 190

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44491), with no line terminators
Category:	dropped
Size (bytes):	44491
Entropy (8bit):	5.356087114729719
Encrypted:	false
SSDEEP:	768:FxRxDxZqIrvVvIsWSZWM2CB29ickQzxHKG/4WnqM+:FxRxDxYIrvVvIsTZWM2CBWGQzxH5wsQ
MD5:	6186E0C996FA0CADBB4153DC31A2C360
SHA1:	DAA1483C790CE6E79F5B7DDA776DE04BF32D7425
SHA-256:	CF475C9C80A0759904674B79164E41118FB0970D9228595AC57528D5ECB3A6BC
SHA-512:	A6479624B67027A8543217C53869D6A1B747864F62BC68BF0621BA003C86CBC5C40C75A779D03B83D87E81D9805796C5623D2049F925B7946747007A9EE67478
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={1989:(e,t,o)=>{var n=o(1789),r=o(401),i=o(7667),a=o(1327),c=o(1866);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},8407:(e,t,o)=>{var n=o(7040),r=o(4125),i=o(2117),a=o(7518),c=o(4705);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},7071:(e,t,o)=>{var n=o(852)(o(5639),"Map");e.exports=n},3369:(e,t,o)=>{var n=o(4785),r=o(1285),i=o(6e3),a=o(9916),c=o(5265);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},2705:(e,t,o)=>{var n=o(5639).Symbol;e.exports=n},9932:e=>{e.exports=function(e,t){for(var o=-1,n=nu

Chrome Cache Entry: 191

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1621)
Category:	downloaded
Size (bytes):	1622
Entropy (8bit):	5.190331536255181
Encrypted:	false
SSDEEP:	24:c4hmMd7biG4WL7f5iQVGtWjxwY096IOOr9zxDhOSDPGxJqnJkJGa94c6DmiVKob7:fhTBjf5ZVGMjf1olqxJqJkTiNZ/ANXlM
MD5:	CA38A87A6C6AEEDCB2E175F99CD7C6FB
SHA1:	E0B51B38E39473D63F32AC7F17AFE1403711E2A6
SHA-256:	0BFF01B41B8CB4029163BB35826202FA274A6E27570D61AAA39232FC5158275E
SHA-512:	AEF96E158B9D853C9B83B7E0075103838C829987CB25F7BE8D79B2B6858EB1285BEC71FAB05DC1722B1554002D79E9B5510AF9989D29D2A0C6160C740A3A44CA
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/N1734592317/appleringsanimation-runtime.js
Preview:	!function(){"use strict";var n,e={},r={};function t(n){var o=r[n];if(void 0!==o)return o.exports;var i=r[n]={exports:{}};return e[n].call(i.exports,i,i.exports,t),i.exports}t.m=e,t.amdO={},n=[],t.O=function(e,r,o,i){if(!r){var u=1/0;for(l=0;l<n.length;l++){r=n[l][0],o=n[l][1],i=n[l][2];for(var f=!0,a=0;a<r.length;a++)(!1&i\|\|u>=i)&&Object.keys(t.O).every((function(n){return t.O[n](r[a])}))?r.splice(a--,1):(f=!1,i<u&&(u=i));if(f){n.splice(l--,1);var c=o();void 0!==c&&(e=c)}}return e}i=i\|\|0;for(var l=n.length;l>0&&n[l-1][2]>i;l--)n[l]=n[l-1];n[l]=[r,o,i]},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,{a:e}),e},t.d=function(n,e){for(var r in e)t.o(e,r)&&!t.o(n,r)&&Object.defineProperty(n,r,{enumerable:!0,get:e[r]})},t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"==typeof window)return window}}(),t.o=function(n,e){return Object.prototype.hasOwnProperty.c

Chrome Cache Entry: 192

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 205, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	68036
Entropy (8bit):	7.992416269719688
Encrypted:	true
SSDEEP:	1536:c5LgkD5UhBFCOyXo2mblid0zuI7M5J5Zf2:c5LvD+hBQOyYZlvuI7M5J5V2
MD5:	52DA2BFB2F521C7B226CBE7C2BA3F01F
SHA1:	7FC0721EE21A7A22643E0E0D39BE1E670F0590AC
SHA-256:	C347366E5FC76ED933855C185A9A0B1A26DE9B5CD4CB1B50E5140C05CFF6FBDF
SHA-512:	6E664277B24046758EFB3B1CDC7AB7D482CF41D7B85915F2E7997F51A39C49BC3AD7AD0A872A3311485E2BE60174C2F5F3B00842AB4996BE38D836D116572A6B
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/06b68855764eb0e23f269ed4ef7935f0.png
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i........................................................n.h..@.IDATx..}....~m...N.)...)!@B...d.A`L.ar0.......y..m.`.l... .".....( .s.N.N..6...z.gggg..N...].o.{......:w.H......#.^...8.cp.8p.J<.....G...!n..'....\|{........d.........-_.....b..U........+............0..iu..x<......K..?..d.,.SJ...\...Sd....3.O..W.Z.......e.....x.x...+..ON.L._K."<..l...6..sD.8...@.^.z..>;?.yT.?JE.......s.....\.;.S\\\|.N....JqH...R.L."...E...Z[[...$........[<..<..Y..pL...M(++....`...j....{}=..[.....%..b...z.Z.6.Rv..;j..T.D.......FjU.^.8..h.<.T.a.M.i."2e_.\.QrI.F..y.{N....d..$.....l.X./.G..L.uE................h....{.............`..@.%d...K.O.A.G....m...$..I.E:...nw.K...$..p._..q..o~..;.<.b......[$.#F.G..@B.L.%....!....b.f{....r..g...Eb}b.y......._v...w&.=H.....d...\.P.o",..qH......;d{.GJ....d.NV.Qy..g2F.Z4..[\|...Kvn.../..g..B=......-[...Hj...`....W.....yw.O4q.o...G ....\|.Q.\|.Q...zg.=.5...k....

Chrome Cache Entry: 193

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 234260, version 1.0
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	7.998922087699875
Encrypted:	true
SSDEEP:	6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs
MD5:	B37ECD8895B373064F6E8630804F08AA
SHA1:	F2BFB2774A6294A641973B2920A9B2D7B2D863C9
SHA-256:	7B0041C48BA67087FCF5F6E8EC8D24E95DB06CAE9BF78C45B4542984BCB7208C
SHA-512:	5732DE86B7022DB347749E010E64A6B5A771CDD4D81D03F20593268028455CB2EA2B4047566CC742A00106584F7584BD7D5A79BAD7FAB09292C8DEA4493542B3
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2
Preview:	wOF2..............................................f..f.`...B..l..b.....H..O.6.$..r..x.. ?meta.$..B. ..k[o....U$....WW.T7.p.......#.y-.@.\|.i.?#.y..6.q.1..B......6.{I+.c+.,... ...............x...I...kX.m.Ol.0.....3..&.........P.YNFi..Y..jQ.c.P.].1_u..,p.}c.0..$i.C..H..E.f...{>..._.%..z.d=.c..8..TE-..._{....9.S#.$t...[....GN..2..>y..nj&8R.TI....;....[.I..1a.a..rW.. 8.5....z..v..../F...........M.J{M..E.....f.j~...j.i.....AU..$..u...../Fe..L.}>j.#\1...f...h$L...5;..ln.n..6..:.B...1...\.....:..e..9u.R.^..tv.B.NR..S>....f..%...._J.....GR~.!..-+o..?...f..E..........>...e5.$r... ...%..5......U(..H...H[..}.." ...........'.................e.,.......\|.e3..4..A.Qz-...W..r!..$....T...0....%.$....za...F..{7o.R.Z.N==......\..............P..a."......v...M.whz....4..?.~I..o.Z..#.e...xJ..O'..VD_.....;.~....{...m.5K.w..W...p`....(.(..BK.F....8..{.x.r......t..U.v.hvC'.J....Q.KM=D....j .....H.$[.....6.Gc..'p....$........'..s"..@.o...p.ME@......'.<.=.`>.

Chrome Cache Entry: 194

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64979), with no line terminators
Category:	downloaded
Size (bytes):	667646
Entropy (8bit):	5.314367067852779
Encrypted:	false
SSDEEP:	1536:HPlCYNJOZaxsKoXx5t/NYlmgIYILIUIEUVumKrkBVBneH2JKddI2I5yVmIYzc5dc:HNCYNJOZax6YlDbdye
MD5:	5FF7CC8CA5035914BF6A7C5E2FD044DB
SHA1:	F96D54F2663E5C915CB65CB1611CD8D9B2ABE083
SHA-256:	789B9508D2CA03EC0D97F688C00C578D17EF154179BD6BB4D5256C30A5D10025
SHA-512:	2EE36CFD4B3914A60021885F1BD93DC916ADCAAFBF00FB348F54360A714D5AA5DBB1A2A30FAD373F8511D485B1758ED019121E6A772B2E34850EC2621E6AFB35
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/cssj/N1187062135/appv2eyebrow.css
Preview:	[dir=ltr],[dir=rtl]{unicode-bidi:-webkit-isolate;unicode-bidi:-moz-isolate;unicode-bidi:-ms-isolate;unicode-bidi:isolate}bdo[dir=ltr],bdo[dir=rtl]{unicode-bidi:bidi-override;unicode-bidi:-webkit-isolate-override;unicode-bidi:-moz-isolate-override;unicode-bidi:-ms-isolate-override;unicode-bidi:isolate-override}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}abbr,blockquote,body,button,dd,dl,dt,fieldset,figure,form,h1,h2,h3,h4,h5,h6,hgroup,input,legend,li,ol,p,pre,ul{margin:0;padding:0}address,caption,code,figcaption,pre,th{font-size:1em;font-weight:400;font-style:normal}fieldset,iframe{border:0}caption,th{text-align:left}table{border-collapse:collapse;border-spacing:0}details,main,summary{display:block}audio,canvas,progress,video{vertical-align:baseline}button{background:none;border:0;box-sizing:content-box;color:inherit;cursor:pointer;font:inherit;line-height:inherit;overflow:visible;vertical-align:inherit}button:disabled{cursor:default}:focus{outline:2px solid #0071e3;out

Chrome Cache Entry: 195

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x388, components 3
Category:	dropped
Size (bytes):	15202
Entropy (8bit):	7.580503673192543
Encrypted:	false
SSDEEP:	384:VYNg7X6/+isFPW4IRlwPVhSrbAl9uEp/P:VYyq9NRlQC/Ah/P
MD5:	BFDBDF8512A090D1DBDFF5750DF98550
SHA1:	95B67E1014AA76C1B9E340ADA105284EDFE3673C
SHA-256:	5FD318B09575D24158DC627F2B43CA6B3CCC482ECD0A3014FB80765A8E2D0B45
SHA-512:	477BB4FA6F31CF6FFA4A6885D88DDBBA2EAC785F3D735EB2F30A31E404889B380EFA31B2DFDBC738C789EF4F167379459BC0F43FE6F043CAACAB73BAAC5C67D8
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......<.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condit

Chrome Cache Entry: 196

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44491), with no line terminators
Category:	downloaded
Size (bytes):	44491
Entropy (8bit):	5.356087114729719
Encrypted:	false
SSDEEP:	768:FxRxDxZqIrvVvIsWSZWM2CB29ickQzxHKG/4WnqM+:FxRxDxYIrvVvIsTZWM2CBWGQzxH5wsQ
MD5:	6186E0C996FA0CADBB4153DC31A2C360
SHA1:	DAA1483C790CE6E79F5B7DDA776DE04BF32D7425
SHA-256:	CF475C9C80A0759904674B79164E41118FB0970D9228595AC57528D5ECB3A6BC
SHA-512:	A6479624B67027A8543217C53869D6A1B747864F62BC68BF0621BA003C86CBC5C40C75A779D03B83D87E81D9805796C5623D2049F925B7946747007A9EE67478
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js
Preview:	(()=>{var e={1989:(e,t,o)=>{var n=o(1789),r=o(401),i=o(7667),a=o(1327),c=o(1866);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},8407:(e,t,o)=>{var n=o(7040),r=o(4125),i=o(2117),a=o(7518),c=o(4705);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},7071:(e,t,o)=>{var n=o(852)(o(5639),"Map");e.exports=n},3369:(e,t,o)=>{var n=o(4785),r=o(1285),i=o(6e3),a=o(9916),c=o(5265);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},2705:(e,t,o)=>{var n=o(5639).Symbol;e.exports=n},9932:e=>{e.exports=function(e,t){for(var o=-1,n=nu

Chrome Cache Entry: 197

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4621)
Category:	downloaded
Size (bytes):	29685
Entropy (8bit):	5.5002113167866185
Encrypted:	false
SSDEEP:	768:QGi7hrUX3hXoqp2UAUUckgeuaiDi5EzblzoN5bc94:Q6hXoTUN6+zbJwD
MD5:	A8443919519C0AABB8805EDE5CDB64D9
SHA1:	17E517BB7EF1ACA6D81852DC473F2458868685E9
SHA-256:	C695DEA15D715E2EB7729AC12C70B1553C564637429946D43CD8F7CD8E4ADF40
SHA-512:	93C6479F8ACFC4ABF1F589E962C904DB04F7B77F82C171B8A356315FC63A177D73626324C30ED5BBB5A969BE0E1A1BDB5DAA4A6B9C70FC01013ADAFA24ABF8AA
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/
Preview:	<!DOCTYPE html><html lang="en-us" data-cw-private-path-prefix="" data-cw-private-build-number="2425Project45" data-cw-private-mastering-number="2425B25"><head><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src blob: 'self' .apple.com .apple-cloudkit.com .cdn-apple.com 'sha256-JFJvxqMr7d0c5kvkhpyFwvNHHhwfiIFw0UaFnTp+u9M=' 'sha256-vY8HZSVmcUbsI8RkfUEVTnl1U2Bz1CJzjgj6Iwu+/AQ=' 'sha256-26W8JbT1vQArZ+8F3eitbNZVzh5WonwHlQl29E4pato=' 'sha256-svdOQzSg9T05h6Q3mC/8FCU+2bG3vWTBwdPa+czq+YY=' 'sha256-HenvlWVrAISuwfRzCus0xoCe+m4/jV6vXViy4FodZC8=' 'sha256-lRaqSyfzcyRaZDbyf9zk3ZsU3HWpfeHMdgqioLyb3K4=' 'sha256-Pehjm3T5Rd/IWK326y6s3vNQ6aE9SViYeFnKDyN9Uo8='; style-src 'self' data: .apple.com 'unsafe-inline'; default-src 'none'; child-src blob: 'self'; connect-src blob: 'self' data: .icloud.com .icloud.com.cn .apple.com .cdn-apple.com .icloud-content.com .icloud-content.com.cn .apple-mapkit.com; form-action 'self' .apple.com .icloud.com .icloud

Chrome Cache Entry: 198

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 220536, version 1.0
Category:	downloaded
Size (bytes):	220536
Entropy (8bit):	7.99894522755539
Encrypted:	true
SSDEEP:	3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q
MD5:	059D2EDEB663A16DE959975D5ED21DB8
SHA1:	3674A0E6FBC086CF109A1B192EF5016D328FDFA5
SHA-256:	3231B77EE2775DADBAA76DE85F95763976AFF1091F63A67FA553D727A6EDB933
SHA-512:	FC26A8FB8B2EE58FE21FB45A1812F6CCCCFC5F8ED55B4ACD49657C9E4DE33FBFE0171C01A7A8FD13FC1E4090CC5D003C760054029F76AF6004A0DD3462112CEC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
Preview:	wOF2......]x..........]............................D..f.`...B..l..b.....\..H.6.$..r..x.. ?meta. ..8. ..k[8^...D.OK..Q.....)s..n..R...L#09..Mq..}.. ..z...z..E. ....u...............Z....{.....[.I...Y...RKl......4J.a"0.Y^.e...z......V/n2...j..g;...A..d..j..@....w..e...q2......U.qT.c....q.m.#...z.s@... =..X.Y x^b.a.....6M...y3........x....R33.25.H......TZ.z.e..z".kQ....%b.M....0.b.y.oG9Z.V.]g.......X....:...N..J.?.O......,.....3O.. .>.3....a.{.a..T.......M4Zy..K....t..L7XL.G..".^3\....zH.x...d..UD..m~WKS7._.....v#.rq.P..k.-j].C..E.R7s...S.....f.o............'..'.....q..}G..<.8:pO5.k.^3......[P.8.B.s...0a..F.C3a\.$.0f!..!../<....ke.........Z..?..G.D..Q.....S........<..N.]1d........Q_.2.M.._..2..Q[Nm:59E.N&..B......\|"....T..e.}1....>rg....~.~.#Y....A.....x.Fz",}.../.Os...FW...8.A...SzEm........Mu..5..........H7.....v.@Ijw&_@..K\...d.w.'..oQ...M...nc4M.r....".V.......k.9...c.U...(.Z..~..b.6}.K.n..n...a...Q.......0q.P......4S..f2K..`.~/.i....

Chrome Cache Entry: 199

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3005
Entropy (8bit):	5.056544406034801
Encrypted:	false
SSDEEP:	48:pt7FARkQYcN1VsQgokezwFMMCKOUlhoIGHmEjSdiGZVIO:ppFgqi65oJGOUzoI9EuIGZVL
MD5:	48F64032F368F28EB6BCC023E8356131
SHA1:	53DA77839238159D512DCB4BBB42B6D81E26AA65
SHA-256:	FB30947A7F55B40C8E6AA8F2F8A65CAF2A2ACBC6E6A6E213EA4F3436AD0C9516
SHA-512:	A0838CAE61255E9CE3F2401962F474665CAD22179FE96EE555B97C2DB7B9B1E59F4AAF929DABA98CFB9058E3A6A71072AA6C99108F85D1608704543AFB46D5D6
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/N555280620/web/bootfull.js
Preview:	'use strict';...(function(){.. var bootArgs = JSON.parse(document.getElementById('boot_args').textContent);.. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.idmswcConfig = window.idms.app_config.idmswcConfig \|\| {};. window.idms.app_config.idmswcConfig.formStyle = bootArgs.eyebrowFormStyle;.. var contextUrl = bootArgs.contextUrl;. if(contextUrl && contextUrl.substr(-1)==='/') {. contextUrl = contextUrl.substr(0, contextUrl.length - 1);. }. else {. contextUrl = '';. }... var _bootData = {. sstt: encodeURIComponent(bootArgs.sstt),. section: bootArgs.section,. location: bootArgs.location,. data: bootArgs.data,. contextUrl: contextUrl,. jsLogLevel: bootArgs.jsLogLevel,. inSite: bootArgs.inSite,. isInternal: bootArgs.isInternal,. isEnabledConfirmAccountName: bootArgs.isEnabledConfirmAccountName,. isEnabledLandingPagePhoneFormatting: bootArgs.isEnabledLandingPagePhoneFormatting,.

Chrome Cache Entry: 200

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/locales/5/en-US.json?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=4418704d-e46f-4d95-8832-40b16fc5d063
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 201

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1324 x 950, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	213358
Entropy (8bit):	7.968202543812873
Encrypted:	false
SSDEEP:	6144:I4h6XA9Yv2dvjX8jdrq64EYcay5NsT20P:I4/Nxa/w20P
MD5:	616FA4B7B4CED3958818770EE3B68953
SHA1:	2B073C5F80E1850830E2275819D18BBE70BB08C8
SHA-256:	C49B9B2A18F9009BF2781A3884833EA9404E7359FE01B812DC45B317A77A1FF9
SHA-512:	8634C127C44C7EA76D07D3FFEEE3A79FC2A9DD2D9D0C8EEF0B3C6E91D1DA5741241815C732681A29468083123310DAE770FAF0933DC50976012AE212DBD0BE39
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/7cb9ecdad2b384754de394732519f658.png
Preview:	.PNG........IHDR...,...............A5IDATx^...o\......=.... .T%."."I..*aV.".Jm...=u...R[....F..R...,.D.T....;.....#q....;q.....g...].D.$I.$I.$I.$I.$I..F.$IR.GB$G.$I2XJ.$I......N..$I.KI.$...L....._.L#.7jJ.$..$I.d....k.....a...$.`)I.$.%s.C..]W..L."...S;{.,.].6.#.3%I2XJ.$I...(.V....O> ..=.,Y.>.qs."f>X!S.$..$I.d....Z9F.........G.&g.:_+G....3...$.`)I.$eL.&....B.....sO.~Lp..=ER...bgm.\|..3+B.ELI....$I.qr..%;Ar............B.X.\|..6.A..3..u$I2XJ.$I..q..1Y... .\|7BVE.3..M....Lr..u.g].\|..4kBfy#..1...$.,%I...d9NV..b....r.<3Yp.Z......+.`.....+M..p"......#Xh..4.I.d......@.........2.$..d..N....L.....{..d.....a..z.V;b#...%...F......K;.(x^...b.,...Y......$I.KI.$.(.g..89E..F.r.<S..,.D...A.d..3Y.V"X.d......d.X.......A..eR..}../.~.l....$..l.l...=6h.K>i...6....B.,..r...Y:'?R.S.$..$I.<..,..R.,G..V.._.nq..T.\|.8...68..$9>]...S........_....p..........._.:[.......!..1+.0....$I.KI.$.(..5q.{........msz......j..4..8......@..N.....}......n4.d/h.\g..".{;....yM.,oa...)I..R.$I....

Chrome Cache Entry: 202

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.164497779200461
Encrypted:	false
SSDEEP:	3:4gxn:d
MD5:	DDAAB4E4B775814BEB931D530730CF15
SHA1:	76DEFE2EA30BE3C3C7B6AAE0919D75277B68B7AF
SHA-256:	3491975BAAA2DF6AEDBCBCFCF7A548A7A42D0ED24C1262E1D8BC492C2F52E767
SHA-512:	ABA46F16EDE1BEC68AF15629DEDE47F070FE1923276BF5343D47AB374ED3BAC241D8A87FEC1AFE9674DEB56BC73E69C979E0E60803C1D49F7C5992C0F5A8CAAD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkF44qOIM7ZZRIFDQOFchgSBQ2QrMQx?alt=proto
Preview:	ChIKBw0DhXIYGgAKBw2QrMQxGgA=

Chrome Cache Entry: 203

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	5.214543468604978
Encrypted:	false
SSDEEP:	6:tIVYmc4slZKYnic4sG0nN0dlSTIccoLLyJVLc4KlBM:tV/KY7NklQI8LLyJVLzKTM
MD5:	42B9BA998E98814796D92163692CE747
SHA1:	316381460376ED45E7E8E5C159A9C6571E322258
SHA-256:	63BD44999BFEF2A50E8A7DE4BA86097AB78722AA8A6E4B1EC3E94E9CE69CD35B
SHA-512:	BCE933D885DE898F9487DEADF45A10F41BCB9F404D32F8F27652FA0FE2BE9EA908720DFB037313E25970AD1EE01E03922BD11E00431F8222F4CDBC1364E98F39
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/3/en_US/assets/ac-footer/breadcrumbs/separator/icon_large.svg
Preview:	<svg version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="8px" height="18px" viewBox="0 0 8 18" xml:space="preserve">..<path d="M1.29,0.98L7.5,9l-6.21,8.01l-0.68-0.54L6.42,9l-5.8-7.49L1.29,0.98z" fill="#d6d6d6" />.</svg>.

Chrome Cache Entry: 204

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 430x388, components 3
Category:	downloaded
Size (bytes):	15202
Entropy (8bit):	7.580503673192543
Encrypted:	false
SSDEEP:	384:VYNg7X6/+isFPW4IRlwPVhSrbAl9uEp/P:VYyq9NRlQC/Ah/P
MD5:	BFDBDF8512A090D1DBDFF5750DF98550
SHA1:	95B67E1014AA76C1B9E340ADA105284EDFE3673C
SHA-256:	5FD318B09575D24158DC627F2B43CA6B3CCC482ECD0A3014FB80765A8E2D0B45
SHA-512:	477BB4FA6F31CF6FFA4A6885D88DDBBA2EAC785F3D735EB2F30A31E404889B380EFA31B2DFDBC738C789EF4F167379459BC0F43FE6F043CAACAB73BAAC5C67D8
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/fc2b7d9c646c188a2aed32221a4fe795.jpg
Preview:	......Exif..II*.................Ducky.......<.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condit

Chrome Cache Entry: 205

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2364
Entropy (8bit):	4.561836229722971
Encrypted:	false
SSDEEP:	48:cf+1USO7wQUlYvSNamnrbmM+sb1yRBVLb:cfwiwQUlYvSII2tsb1ypLb
MD5:	CC3C17D31CFDA473CA545554C30794AC
SHA1:	B64FA9CF9CBA5BA68567EC8FEA1A229B023F9FFD
SHA-256:	4F70A22F0D4E8ED3F4F2F823F7385328CBAAEDFF0EAE324A51287C3C1CBA4F92
SHA-512:	F89443708E33135A68E8658AF32BD17FB343F4074E094251AA6F103E46E8FE210C41638B88334F9A7527E8D2465F5117C7D3AA10144D60934948738728376F54
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/1970480931/boot/initLocalizationStrings.js
Preview:	"use strict";.(function (){. function isLocStringsScriptTag ( node ) {. return node && . node.tagName === 'SCRIPT' &&. node.type === 'application/json' &&. node.classList.contains('localization_strings');. }. . function parseJSONTextContent ( node ) {. try {. //this may failed if the content of the script tag is still not render.. return JSON.parse(node.textContent);. } catch ( error ) {. return undefined;. }. }. . window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.i18n_legacy = window.idms.app_config.i18n_legacy \|\| [];. . if (!window.idms.localizationStringsObserver) {. var parsedJSONScripts = [];. window.idms.localizationStringsObserver = new MutationObserver(function (mutationList) {. . var found = false;. . for (var i = 0; i < mutationList.length; i++) {. var record = mutationList[i];. . for (var j = 0; j < record.addedNodes.length; j++

Chrome Cache Entry: 206

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (49996)
Category:	downloaded
Size (bytes):	2167997
Entropy (8bit):	6.251473991302688
Encrypted:	false
SSDEEP:	49152:+3TeLepq6oNvdAcDkMD1strQJ2PoNDxqvHpwSKQZH+:fD1strQJ2PoNDxUO
MD5:	3E9F3CE41CB55E3F6B739DE997520CD2
SHA1:	55ACDACA290AF2674B36BB20285DC2D280E6CD7C
SHA-256:	1B092359320F8464249AEFC6ECA089D357819AD145962AECDF35BF95FDE1EDEC
SHA-512:	5CE4270E4C7ADD1D5C4CDD3D8ED563EAC1C07016EF58B756A9F2D5C03F453B308897C81C8855298E3486CED8B69DF683F8D6855B71F6D5C25EAE6416566E0392
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/46672355/app.js
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 207

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22124
Entropy (8bit):	5.311977646975752
Encrypted:	false
SSDEEP:	384:c8i6a2S0gvVzN440/h7ZCkZYju3TqzabHFrVBtBxyYgKdvzGKou+rFVkhL3qqBmJ:c8i6a2S0gvVzN440/h7skYjdzabHFrVs
MD5:	C4B61D2A21F2723EA6D6F6A68412D1F2
SHA1:	1ACB40561D2D5E9E43D061B39B2C8C0CD3E8CCD2
SHA-256:	3031AA1B654CA979F7577E4706173D35A9D8FF35CBDB80A8E4911FD9423E2BC4
SHA-512:	6E2ED976F8B34B0D36B28FE1B7A4F21E45665C6644ABDDF25044FDA93ED6B14DC2A2E0C787F79D7412866C08622085401ED6E9D02827C5ABDDA9D103B81BE8F9
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v3\|SF+Pro+Icons,v3"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.eot');.../ (C) 2019 Apple Inc. All ri

Chrome Cache Entry: 208

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	downloaded
Size (bytes):	362536
Entropy (8bit):	5.573593516852909
Encrypted:	false
SSDEEP:	6144:mdRsOPq5md6fCNS4s+U1jA09oVKOn2+kW4nfbNQxg1ZjIs+LOLX5Hcq:mfi3is+U1jA09oVKOn2+kW4nfbNQxg1Z
MD5:	6CF0FE916FE131DDD70AB3B1FB004246
SHA1:	FBF5F28FD715A898A0760235260D28EBD3C27790
SHA-256:	2A4074D3A7DCEBE17A507737869F32BD1A5D17ABEAE529368AAB36D3D2A2C5C2
SHA-512:	E0842F190BF954F98C48B0E0A054D3AFFD1B1F9D62F8B325C763D585A0FA5D14F303EB4755587929A688598E7D2877B5448ABDD1A641B1C4D078A635C456DDA2
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/2.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 209

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	390196
Entropy (8bit):	7.989966130653352
Encrypted:	false
SSDEEP:	6144:gRXBOeQk/qaYpzwGWp68L5oc8lOy9AGv8bTOSilOvpfiGtG6LFsAtARpRVbuM7b:gXOzJacJWpL5J8ld9AGv6KOJVLmDRFlf
MD5:	22654A04A309F2C35175A8C4A2809C15
SHA1:	FF809657A02E83C8A30D764BD5009B4032A0C8AC
SHA-256:	C04CB1875B74E018A2192D6EBE9C0CB78C6ECDF43B39824B34B87ECE5095AB30
SHA-512:	FC79D5E2FB142CA97FCDC8094BD0B5943D7C148B5745B89E3BA42F428706531ABB738A8E0E2A528D792A2F7908955F85AEED5C4BDEB347FB7CCDCCCDCF65C098
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/wallpaper.webp
Preview:	RIFF,...WEBPVP8L .../.......l.m3........@9.D...:QR%..9u.)..h.JHUE`....Dv..Y....0.c...!.k-.d.U1x;..v...@X...bK..`.6..Z...W....:\|..u.P[.........@..I.\|...V.G....$.@.].I..0.....n I.y....BH....D..>.e?`'..<...d..T~ ..<..H.e.aKbNS]........l.1.`....b.9.LR...... .x.s.v5P....UU...$e..i.q.v.JUqlt.Mc....U.W......e.6fw..<...`r....c.S....y..6sb..U.I.5vdS...$+..w...j..c......6m........$+i.....E..q.'............B......G.@%..>......9E,."I-...T.6.....m.m....9....q.........$....a...a..F.....G..........a.W_1..O.#h.@7x&x&.....R.0...<..BX...B.k.T..d..@..H.5.......g. X.?4..@. X...O'...0.5.{...&.(@.tX... ..A3..@..;.!H.`6....;N.p....M..Q'.H.so....@...2hcFr.@..1.....0MN.;xo8..& .l_.Ui.....PH. g.P.....1.....;.B.k.-....#....s..DZBA...k.....@.p.d...e..i........../.x....L...I..R..*.......VH......m.m..=$..Gz...+.........\..y}.>....5S.....>._.>..}.....<............x?.E.}ld.2\|.'.{..}....USU3..m..............KS..T...B.e.SJ).6..f.jKU.:BSD.....M)..f...f.j:.z..0d#..R03k:[........,.

Chrome Cache Entry: 210

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6756
Entropy (8bit):	4.638324890211791
Encrypted:	false
SSDEEP:	192:4KLcWazhi2qaOZBwK9m1VfkNV4eCwX8owDiU2+6jppkvwUvi/qHqyao:pgWali2aZ6K9m1C4wUDivDiqql
MD5:	D95841F7F8CA1E64B29B14EC1BF8B625
SHA1:	99ADB1F42583DF74F9529B472EFC3D95921A7A01
SHA-256:	F46F8884CEAA4D6AECBAD6B256014C541AB5F892B0D403F7B3F4E4CE9C6673D9
SHA-512:	74738A9C444E8E42E4B153416B2A84C9394872E3DA70F651D2F63A08EEDAE27AEAC8B59D3C915F497F44244AD85950BDDDA807B248B3D21297475F48C3834EA5
Malicious:	false
Reputation:	low
Preview:	"use strict";.(function (){.. /. bootArgs has the structure:.. bootArgs.additional = {} full of known arguments with specific js that must be applied,. ex: functions, string values that need to be manipulated prior to being set, etc. bootArgs.direct = {} keys/values which can be set wholesale into bootData.. /.. function populateFromBootArgs(bootArgs) {. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.bootData = window.idms.app_config.bootData \|\| {};. var bootData = window.idms.app_config.bootData;. bootData.canRoute2sv = false;.. // Process all direct fields into place. if (typeof bootArgs.direct === 'object') {. Object.keys(bootArgs.direct).forEach(function (key) {. bootData[key] = bootArgs.direct[key];. });. }.. // Functions for setting the the additional variables from the bootArgs. /*. Function to get the value at bootArgs.additional[pathElements],

Chrome Cache Entry: 211

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	390196
Entropy (8bit):	7.989966130653352
Encrypted:	false
SSDEEP:	6144:gRXBOeQk/qaYpzwGWp68L5oc8lOy9AGv8bTOSilOvpfiGtG6LFsAtARpRVbuM7b:gXOzJacJWpL5J8ld9AGv6KOJVLmDRFlf
MD5:	22654A04A309F2C35175A8C4A2809C15
SHA1:	FF809657A02E83C8A30D764BD5009B4032A0C8AC
SHA-256:	C04CB1875B74E018A2192D6EBE9C0CB78C6ECDF43B39824B34B87ECE5095AB30
SHA-512:	FC79D5E2FB142CA97FCDC8094BD0B5943D7C148B5745B89E3BA42F428706531ABB738A8E0E2A528D792A2F7908955F85AEED5C4BDEB347FB7CCDCCCDCF65C098
Malicious:	false
Reputation:	low
Preview:	RIFF,...WEBPVP8L .../.......l.m3........@9.D...:QR%..9u.)..h.JHUE`....Dv..Y....0.c...!.k-.d.U1x;..v...@X...bK..`.6..Z...W....:\|..u.P[.........@..I.\|...V.G....$.@.].I..0.....n I.y....BH....D..>.e?`'..<...d..T~ ..<..H.e.aKbNS]........l.1.`....b.9.LR...... .x.s.v5P....UU...$e..i.q.v.JUqlt.Mc....U.W......e.6fw..<...`r....c.S....y..6sb..U.I.5vdS...$+..w...j..c......6m........$+i.....E..q.'............B......G.@%..>......9E,."I-...T.6.....m.m....9....q.........$....a...a..F.....G..........a.W_1..O.#h.@7x&x&.....R.0...<..BX...B.k.T..d..@..H.5.......g. X.?4..@. X...O'...0.5.{...&.(@.tX... ..A3..@..;.!H.`6....;N.p....M..Q'.H.so....@...2hcFr.@..1.....0MN.;xo8..& .l_.Ui.....PH. g.P.....1.....;.B.k.-....#....s..DZBA...k.....@.p.d...e..i........../.x....L...I..R..*.......VH......m.m..=$..Gz...+.........\..y}.>....5S.....>._.>..}.....<............x?.E.}ld.2\|.'.{..}....USU3..m..............KS..T...B.e.SJ).6..f.jKU.:BSD.....M)..f...f.j:.z..0d#..R03k:[........,.

Chrome Cache Entry: 212

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12505)
Category:	downloaded
Size (bytes):	13729
Entropy (8bit):	5.498642029507824
Encrypted:	false
SSDEEP:	192:7wI0dSohLI/vnpiTAvJu3CMS1lqjjk3/cGtjVQf3Wi83WO0q:n0dv+/PCA8Clqi/cRf3WiWj0q
MD5:	E6CA40918AC2AFF1C7DB95190691DF43
SHA1:	678831A3FE5460C97616AD0222B9E6A62F0416A0
SHA-256:	CF988504C0358A4646994323D302F0F61E1000BC86CA066502BECA562E18A04E
SHA-512:	F968040E03059EE8049F3D6B2AFAADEE7D17C8C8735AFDCD9259FB65FB4E8DDD111100F226067D09D803070FE6297E0592E893B77C2F07CD39AE9B72C943A04A
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/N173194890/common-header.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};return e[o].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=860)}({860:function(e,n,t){t(861),t(862),t(863),e.exports=t(864)},861:function(e,n){(function

Chrome Cache Entry: 213

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7708, version 1.0
Category:	downloaded
Size (bytes):	7708
Entropy (8bit):	7.966033488711406
Encrypted:	false
SSDEEP:	192:15do6O6rmh/K5Tscl/taNzWNzff7nMOETKtR55xeT+:1/S862UWNzGMR5yS
MD5:	F4DE72FB79097F6D8780F120DB08F3F5
SHA1:	D949E8C1E890A7014B4FAD48BEFA76470ABA5B30
SHA-256:	E80C7728FA04323A109D9DA93F96C81DC424E8AD18E9F7949F8B8667F86E3EB6
SHA-512:	DB3B641D9DA7512314977F5EF6F30A7D647B472089D1650BC8B6D26FC054E70AF9611CB64EF09ECBCB5BCC9BB42233ABA5C8E1C4F6B37137732B8DC28E695E05
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v3/sf-pro-icons_regular.woff2
Preview:	wOF2..............W\|.............................`..Z...d.A.6.$..V..... ..N..Y..KUFe.....DT...E]....O.r..yW....I 0Z..).+.rGM.S.Ce.#.K>J.........T[.....r..........>.x.....xy...Z..aV.).#F."H..uu..8U:w.{....m..n3.h.....h.1..PJ.a.s..&...\..]D.......%=.]........R.T......q.Xm.......[GC..x.6.<J.<......;$..6.av>.s...`..7.?.??...A.U......\........3....C....g........J7.l6.oiJg...q....)......5...hV.=YI$...+M.V.Ki.J.V...)J....Q.A.9..(..."(x000000.b.hh.mvP.l6....iw...\|.q<..)\FF.(l......cxs.j...@.J.{.51>....x...&{6..q!-T..Y..XO,../.....B..-]......>E;V_.>o.np...#...\...H......>...F.M..v.bU.4{T....Su5.e.W}..bU_.U.@G..........#X...X..CY...Y...,..h..`6......eA..X...,.@...`....E$.."..b..z...]Y..,.@...?.".."...........@...Z...q,x...>..B.....,D ......,d`..9.......Y.....`>.BP.D.(&t)-..t1uS7]H..8.....t.......e.I...2..9......blM.Q.U..VYA.z.B..p.../...;Pu.0.../$..W..T}.........$.C...uMmt6J...:B..xX8..tz...],...C.8t ..I.@....M(.L...c...+-..bK,.........3..3.......

Chrome Cache Entry: 214

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	4.851351786333533
Encrypted:	false
SSDEEP:	6:6UDoGJ6jRcAf9yjCMY3CBxd+oYtIsgCBpViH6GKqWT+6Ff1xKqSLRMGdbD1PNjMe:VnwjRxfYjZYk+xR1k/WT+6FfLSljVPNr
MD5:	C2E1F0684FA9124BCD9DA5915E6407E9
SHA1:	06CEFB1276925B27E7E3B76D6D460289FFF5B081
SHA-256:	BDA73199844BC4968E2821B0720955A22470E2D75B4AC20BE31412A3F447544A
SHA-512:	E9839DB8423709460337191DEC1261F11F3DA025359A1F8B2BCB14217BC576312B2D8F9A9003371A5EDCCC4C2786369A30E30F536C1CB22D6830FF5469DD9152
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/localizer.js
Preview:	( function() {..var localizer = {...locale: "en_US",...title: "System Status",...timeFormat : " hh:mm a ",...supportText: "If you are experiencing an issue not listed here, ",...supportLink: "contact support",...developerText: "Looking for developer system status?",...developerLink: "Find it here"..}..window.sspLocalizer = localizer;.})();

Chrome Cache Entry: 215

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11857)
Category:	downloaded
Size (bytes):	45018
Entropy (8bit):	5.358020920630629
Encrypted:	false
SSDEEP:	768:6ffMFzcFXMPC2UmAZwrbSc3kMs62HmqwxiApq/RoWBp:6XMFzcFXMPCDmaUSYkMs62HNApqOu
MD5:	BAA6703AE31B710081BC8F40796507CC
SHA1:	62A80AF2056252EF1942CB8CD392F8A67D8757C9
SHA-256:	B5A9BF072ADE217AB958474521D73134E7C3520E2FB56722A8BF555769DBFF72
SHA-512:	C584E8B692810F3E76526FB32AEAAB62DE7DD71DDFC262F72E71A7DBE3A518337C14DB9E99974037D1038A03EC1927972EDF207F29A3432BB75034F11625091D
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/N1303632466/common-header.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){n(1),n(3),e.exports=n(4)},function(e,t,n){(function(e){function t(e){ret

Chrome Cache Entry: 216

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	22382
Entropy (8bit):	1.8139780344520928
Encrypted:	false
SSDEEP:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
MD5:	310FD67D702063937E39C17B2060067F
SHA1:	503B0C1CD35674B8E58B6B35431F381F1417A1A5
SHA-256:	2EE7CA9B189DF54D7CCDD064D75D0143A8229BAE9BDB69F37105E59F433C0A8B
SHA-512:	D523F0CAA326B7842CB2A0D13D95E2D4CF432FC7A6B12FA503B7175AA188A848C9AFF631685BFA2D2D3609B7FCC6AB398FD9CC95ECAE436FFA9EA2D55550E616
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/favicon.ico
Preview:	............ .h...6... .... .........@@.... .(B..F...(....... ..... ................................................................................................................z...t...$.......S......./...............................................................4...........................t....................................................................................................h..................._.........................................K...........................................................I...............................................................................................................................................................................................*.......................)..................................................................P..................m...............................................5...'..."...o...,...6.................................................../.........................................

Chrome Cache Entry: 217

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/locales/5/en-US.json?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=8b7c3f99-e038-4c8b-af54-ab46989ae81e
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 218

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64142), with no line terminators
Category:	downloaded
Size (bytes):	81015
Entropy (8bit):	5.363705634630552
Encrypted:	false
SSDEEP:	384:jJUzIR5eS2DxgMYmpGb50ZaaOFNYle1x2amxMAut6rg1xpFPHn7QgvWGfLhoJgie:fFr
MD5:	0F956D70E0C3D9ADA690572257C241C3
SHA1:	25651C4C2691FB84A661862281E14956F7F4682A
SHA-256:	0D87F2089A0F3B4F9AFE25DE2DEFB9BA8604A2586EAF1C0A0DB1B72D3BBEF782
SHA-512:	F18A29CCE5A085F22A8C66E93159BA0E2C857FC8FB9A61663A00AF4DB287FD960CF61514527614B489AD08767F7303310A2A2B366624E0CE4EDAC02B0A4DDC9F
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/cssj/N1795883742/appleringsanimation.css
Preview:	@charset "UTF-8";.typography-headline-standalone{font-family:SF Pro Display,SF Pro Icons,Helvetica Neue,Helvetica,Arial,sans-serif;font-size:96px;font-weight:600;letter-spacing:-.015em;line-height:1.0416666667}.typography-headline-standalone:lang(ar){font-family:SF Pro AR,SF Pro AR Display,SF Pro Display,SF Pro Gulf,SF Pro Icons,Helvetica Neue,Helvetica,Arial,sans-serif;letter-spacing:0}.typography-headline-standalone:lang(ja){font-family:SF Pro JP,SF Pro Display,SF Pro Icons,Hiragino Kaku Gothic Pro,...... Pro W3,....,Meiryo,.. .....,Helvetica Neue,Helvetica,Arial,sans-serif;letter-spacing:0}.typography-headline-standalone:lang(ko){font-family:SF Pro KR,SF Pro Display,SF Pro Icons,Apple Gothic,HY Gulim,MalgunGothic,HY Dotum,Lexi Gulim,Helvetica Neue,Helvetica,Arial,sans-serif;letter-spacing:0;line-height:1.1461533333}.typography-headline-standalone:lang(zh){letter-spacing:0}.typography-headline-standalone:lang(th){font-family:SF Pro TH,SF Pro Display,

Chrome Cache Entry: 219

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14175), with no line terminators
Category:	downloaded
Size (bytes):	14175
Entropy (8bit):	5.241756044450515
Encrypted:	false
SSDEEP:	192:CYq9S8OxpkUPfU4mbIwKrCiIkBXmdgnD15PhvwF+GwVTAc2XI:CYZjPfU4FwGCiIkBrG0GwCY
MD5:	D87AA5188A9A04C462D9D7452EDB1B20
SHA1:	C52ADF3CBECF823A9ACFB33137356D566B1B4F94
SHA-256:	9B4FFD68F881FB0E47FEEA921088E6B6610EFE52C8EEB8A574A51DA978FA736B
SHA-512:	D5486CB6B5BAAF3937E0596DFBA002782E3BD2B8C915DDFD6BED27440A123897A75042DC9676880D9109FB7079F73F7075E217971EBDD4A34F2E6C332C618C62
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/3/en_US/scripts/ac-globalfooter.built.js
Preview:	!function t(e,r,i){function s(o,c){if(!r[o]){if(!e[o]){var a="function"==typeof require&&require;if(!c&&a)return a(o,!0);if(n)return n(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[o]={exports:{}};e[o][0].call(u.exports,function(t){var r=e[o][1][t];return s(r?r:t)},u,u.exports,t,e,r,i)}return r[o].exports}for(var n="function"==typeof require&&require,o=0;o<i.length;o++)s(i[o]);return s}({1:[function(t,e,r){"use strict";t("@marcom/ac-polyfills/Array/prototype.slice"),t("@marcom/ac-polyfills/Element/prototype.classList");var i=t("./className/add");e.exports=function(){var t,e=Array.prototype.slice.call(arguments),r=e.shift(e);if(r.classList&&r.classList.add)return void r.classList.add.apply(r.classList,e);for(t=0;t<e.length;t++)i(r,e[t])}},{"./className/add":2,"@marcom/ac-polyfills/Array/prototype.slice":6,"@marcom/ac-polyfills/Element/prototype.classList":7}],2:[function(t,e,r){"use strict";var i=t("./contains");e.exports=function(t,e){i(t

Chrome Cache Entry: 220

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	463167
Entropy (8bit):	4.909726050940108
Encrypted:	false
SSDEEP:	1536:gjiGi3g4vZMi8pr6MGx485PeK1VpUyTp4yChG2ohuHWPxJbx+8Fq+rSWeHrSWeYj:Fz485PeEVpUyTYoh7e9
MD5:	4D7614F15AD1401572159B13D3400DCD
SHA1:	E16FA374915994957718B527808526B03B58BA71
SHA-256:	821464F462716024B7FA39D305E44DC628BF9724EF41CC8BFE1E2FE00641FF27
SHA-512:	FB7D0DCC228D8A3E3DB472E2C9EFDEB22CF8B5CC9B66748264B28FE22510E2E12267437A320D92248A2CFC1E22355022CA8E13876B159EAE45F5602A8AC6C1AC
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/main.css
Preview:	*{margin:0;padding:0}.cw-hidden{display:none!important}button.unstyled-button{background:none;color:inherit;border:0;padding:0;text-align:start;inline-size:-webkit-fit-content;inline-size:-moz-fit-content;inline-size:fit-content}[dir=ltr] button.unstyled-button,button.unstyled-button[dir=ltr]{text-align:left;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content}[dir=rtl] button.unstyled-button,button.unstyled-button[dir=rtl]{text-align:right;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content}button.unstyled-button:not([disabled]){cursor:pointer}ol.unstyled-list,ul.unstyled-list{list-style:none;-webkit-margin-start:0;margin-inline-start:0;-webkit-padding-start:0;padding-inline-start:0}[dir=ltr] ol.unstyled-list,[dir=ltr] ul.unstyled-list,ol.unstyled-list[dir=ltr],ul.unstyled-list[dir=ltr]{margin-left:0;padding-left:0}[dir=rtl] ol.unstyled-list,[dir=rtl] ul.unstyled-list,ol.unstyled-list[dir=rtl],ul.unstyled-list[dir=rtl]{margin-right:0;padding-right:0}a.unst

Chrome Cache Entry: 221

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.584183719779188
Encrypted:	false
SSDEEP:	3:dRYt1v:Tul
MD5:	0AD20532F4522AC36C5AF6D7E41DD7A5
SHA1:	2A481C2006BB42C2445873DFD13E86983BC7AC3E
SHA-256:	07D90AC0BB037489B159EE3FC691B2DB8A624A6363B8BDDACDFA0A929A39B716
SHA-512:	86FDE154B958453E8BC402FDB682C4E110F40737AA4A63C6EE9B9E882B1A6E481C01843C34C36A1232C00F93DFAE3CE730AFC311ABF4117BEB0F8B0147364163
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed..

Chrome Cache Entry: 222

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	662771
Entropy (8bit):	7.968645840884214
Encrypted:	false
SSDEEP:	12288:2O09KJt5DcaJyRpmOyWZeIm0jYKqSTPPOF0LYjVm4UuDGuBWprHK4qgjg:DkoseIBqSiF04EMiGWpragjg
MD5:	57ECE9D4E21144BA156488EA7E6C197B
SHA1:	CEDC1FE4ADF1EDF8E2EF12DC0A45F97A420125C9
SHA-256:	6A175949C520977CB265AD794AB15D6E8F1E42B6ABAC84B821B36AD0FFEE01E7
SHA-512:	C8173A9A7C9AFAC5ABE311C0B86D4B9097270ECD1E096F9FA6C3B332B38D8484EFC83433DA80F7F0DCAD1F2A2E17B0F7244C2DA9C96A1BC6B7F09E01244A9E15
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/fpo@1x.mp4:2f827a7110ac42:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free....mdat!..@h...........E...H..,. .#..x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=16 deblock=1:0:0 analyse=0x1:0x131 me=umh subme=10 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=24 chroma_me=1 trellis=2 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=12 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=8 b_pyramid=2 b_adapt=2 b_bias=0 direct=3 weightb=1 open_gop=0 weightp=2 keyint=600 keyint_min=60 scenecut=40 intra_refresh=0 rc_lookahead=60 rc=crf mbtree=1 crf=18.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 vbv_maxrate=20000 vbv_bufsize=25000 crf_max=0.0 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00......e.......2....m..q..].K.k.&..`.....u.....A..q...\|...P. ..(.].m..GC%."...m.P.v....1..{s..w.'y......Wnf..d.5..6.P.N..,..q.jXU...l".O.8{.V.......\r.....$8....&EOJ(f.[..9s.m....

Chrome Cache Entry: 223

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	39831
Entropy (8bit):	4.795377188142818
Encrypted:	false
SSDEEP:	768:tmT1EQo46uWNYFJ1mv+ZNrMUVfL4k3pY7jVSHUo6eI:tGLPmL
MD5:	6E003CF32B86A7E21C1ABE557DA261D8
SHA1:	81272686038C23E559D024740CEABC2FE913C959
SHA-256:	1099CA4C1CD9C7B7419C2745BA794D376282F95B396F533802F0F1473BB22703
SHA-512:	82A02C26117FA73F6EB0D7E28BB375394FF7E86B1EC3A1C5A17DAEE5B58667BFC38C654047937F5491457A83903E9495513F975519B8B94E7B5F78FBE255705F
Malicious:	false
Reputation:	low
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 224

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6983), with no line terminators
Category:	downloaded
Size (bytes):	6983
Entropy (8bit):	5.137655711555743
Encrypted:	false
SSDEEP:	96:Yj0+VNs7pkcaHkHhSFNHuddKJkqRYFg3NJ2WXELNqV9Dqh94IDR1+W3aHPXs5CSA:mZNeavih2hg/xgdsDMD29Ft4HPiYN+Py
MD5:	33E5F7B4CD1360FA6599E7ADCBB494DD
SHA1:	899CB51CCB51A5560FFB399FD7AA22D175EEBE05
SHA-256:	7AEBD37D8BF463AB9608270C72B559B4409B1AF7F7BA5799D2541E0BE027F06F
SHA-512:	6BD5B4574B8B585F5CA9B069F357A35EFB14B6236C5B7D5CC5833A18E183EA815C71C41DF99B56A1BDB2A75F51895BCD81E60937A7ED6CB9DF001F2B942F17CE
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/7/en_US/scripts/ac-globalfooter.built.js
Preview:	!function t(e,i,n){function r(o,c){if(!i[o]){if(!e[o]){var a="function"==typeof require&&require;if(!c&&a)return a(o,!0);if(s)return s(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var h=i[o]={exports:{}};e[o][0].call(h.exports,(function(t){return r(e[o][1][t]\|\|t)}),h,h.exports,t,e,i,n)}return i[o].exports}for(var s="function"==typeof require&&require,o=0;o<n.length;o++)r(n[o]);return r}({1:[function(t,e,i){"use strict";const n=t(2),r={className:"footer"};e.exports=class{constructor(t,e){e=Object.assign({},r,e),this.el=t,this._selectors={wrapper:"."+e.className,directory:e.directorySelector\|\|`.${e.className}-directory`,mini:e.miniSelector\|\|`.${e.className}-mini`},this._initializeDirectory(),this._initializeLangLink()}_initializeDirectory(){if(this._directory=this.el.querySelector(this._selectors.directory),!this._directory)return;this._directory.querySelectorAll(this._selectors.directory+"-column-section-state").forEach(t=>{const e=t.nextElementS

Chrome Cache Entry: 225

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157537
Entropy (8bit):	5.450896766346486
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5U:f1mhfaahWIhsMkVT+BTtdOaBrdD
MD5:	E8E8B7A18F4EBDA24A25F702B22FA5C1
SHA1:	45DF73C1E3A0A3221A36654FCC46250E31D44C3C
SHA-256:	B740DD04F5C2A05AC983F4716999989B7A05B48C7E4717F77729B3DF19E97E3C
SHA-512:	57098BD96ADF38227E5B3C05CB1C715A9207F0BD4B198E3CF2B2A654D020BA3E0D65D04614F041E4291C86D928AB290619319C8C27F54D4563CBE71779568030
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 226

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61816)
Category:	downloaded
Size (bytes):	574476
Entropy (8bit):	5.529267544818598
Encrypted:	false
SSDEEP:	12288:lCS0KCkZ7mL/HgzQYHTw5Lpk2vvaKVRrqDhKUkFo4FXJrEh+bf8ImP:eKBTw5i
MD5:	E117C52AA120AF175C53D47940799C63
SHA1:	27194EB74566CA87B21B33D9D4A784591FA2ACED
SHA-256:	F2C7EBD470B82C72F842FD3EADA1C0F41731C596C63302E80C65DDB33DA46B72
SHA-512:	25FF9E74D3C1E69781C35012188A7768DB2CC68929F1A5D7775459CF59464F1EC0FA2893ED920172EB091F55FA6AA5692846A7CE91E4E413EB7B27A8E31B718A
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/1628866687/format-phonenumber.js
Preview:	!function(e){var t={};function o(r){if(t[r])return t[r].exports;var n=t[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,o),n.l=!0,n.exports}o.m=e,o.c=t,o.d=function(e,t,r){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(o.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var n in e)o.d(r,n,function(t){return e[t]}.bind(null,n));return r},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="",o(o.s=1)}([function(e,t,o){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 227

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14175), with no line terminators
Category:	dropped
Size (bytes):	14175
Entropy (8bit):	5.241756044450515
Encrypted:	false
SSDEEP:	192:CYq9S8OxpkUPfU4mbIwKrCiIkBXmdgnD15PhvwF+GwVTAc2XI:CYZjPfU4FwGCiIkBrG0GwCY
MD5:	D87AA5188A9A04C462D9D7452EDB1B20
SHA1:	C52ADF3CBECF823A9ACFB33137356D566B1B4F94
SHA-256:	9B4FFD68F881FB0E47FEEA921088E6B6610EFE52C8EEB8A574A51DA978FA736B
SHA-512:	D5486CB6B5BAAF3937E0596DFBA002782E3BD2B8C915DDFD6BED27440A123897A75042DC9676880D9109FB7079F73F7075E217971EBDD4A34F2E6C332C618C62
Malicious:	false
Reputation:	low
Preview:	!function t(e,r,i){function s(o,c){if(!r[o]){if(!e[o]){var a="function"==typeof require&&require;if(!c&&a)return a(o,!0);if(n)return n(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var u=r[o]={exports:{}};e[o][0].call(u.exports,function(t){var r=e[o][1][t];return s(r?r:t)},u,u.exports,t,e,r,i)}return r[o].exports}for(var n="function"==typeof require&&require,o=0;o<i.length;o++)s(i[o]);return s}({1:[function(t,e,r){"use strict";t("@marcom/ac-polyfills/Array/prototype.slice"),t("@marcom/ac-polyfills/Element/prototype.classList");var i=t("./className/add");e.exports=function(){var t,e=Array.prototype.slice.call(arguments),r=e.shift(e);if(r.classList&&r.classList.add)return void r.classList.add.apply(r.classList,e);for(t=0;t<e.length;t++)i(r,e[t])}},{"./className/add":2,"@marcom/ac-polyfills/Array/prototype.slice":6,"@marcom/ac-polyfills/Element/prototype.classList":7}],2:[function(t,e,r){"use strict";var i=t("./contains");e.exports=function(t,e){i(t

Chrome Cache Entry: 228

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11742)
Category:	downloaded
Size (bytes):	11743
Entropy (8bit):	5.217821329088493
Encrypted:	false
SSDEEP:	192:7fnLQrByq/VeJXMrWZLnQVho4EvZXDDJia:7nLQrBNe4WZLQgZ3
MD5:	FF706D7FC775DABEBA9743DAABB0DD2A
SHA1:	C8AAD45ABBAE4DB500C1229FFB03C63F65F48BA5
SHA-256:	C9EB57CF46D1986209C6D556D3AB36A8865B8448C5C491805E6232F93AD75B22
SHA-512:	E2569B462622241C6EB8CB447D638B090552A0DA6FB289FB7402FB7B0FD20FDF2B62EF5F973A3E711F675D3DBFAF0E362E83D7F905141743CC899940BB7D54A1
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/N220814236/webGlobalv2.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{1216:function(e,t,n){e.exports=n(1240)},1240:function(e,t,n){"use strict";n.r(t);var a=n(4),o=n.n(a),i=n(1),r=n.n(i),s=n(3),c=n.n(s),l=n(11),p=n(623),d=n.n(p),u=n(45),v=n(103),g=n.n(v),h=n(176),f=n(5),b=n.n(f),w=n(624),m=n.n(w),y=(n(14),n(21),n(15)),E=n(0),x=n(24),O=n(94),S=n(53),M=n(107),I=n(47),C=new y.a,k={};try{k=window.AppleID.service.JSLogger}catch(e){}var A=b.a.Map.extend({define:{appleConnectUrl:{type:"string",value:"https://appleconnect.apple.com/"},appleConnectiForgotUrl:{type:"string",value:"".concat("https://appleconnect.apple.com/","iforgot")},appleid:{type:"string",set:function(e){return this.attr("hasError",!1),this.attr("notfound",!1),e}},countryCode:{type:"string",value:"US"},captchaAnswer:{type:"string",value:""},descriptionText:{type:"string",get:function(){return Object(E.b)("web.recovery.email.landing.description.text")}},isFormattedAccountName:{type:"boolean",value:!1},isInternal:{type:"boolean",value:!1},is

Chrome Cache Entry: 229

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/locales/5/en-US.json?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=783a6cf1-c049-485a-86df-8b929774f3e2
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 230

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019)
Category:	dropped
Size (bytes):	134839
Entropy (8bit):	5.341739822309292
Encrypted:	false
SSDEEP:	1536:LAPqGcoLDPmr1YnHR4JzsToYZXzq5ocTmlzea7xgq99GR7Mjluyr9zxjpP3:LAPzRqNYiaJDZ3
MD5:	6CCAC66D1223C6023F4E12578192F707
SHA1:	D100782390EC064BE1AFA4A665AE8CAF1E83C95A
SHA-256:	289E5C4F1FFCFFB74423120BC60E11F6FCF6D8786B66AC398C3CCF01EF658597
SHA-512:	B0B8572C17437EF684D0DE8222B25F7282029DB50665AEDD6FAAF1BA1CEB55F9CB9DB0F23451C39A8120F27344576FA806B4EAF47B566A1F873C3FC2F2F611D4
Malicious:	false
Reputation:	low
Preview:	!function(){function t(e,n,i){function r(o,a){if(!n[o]){if(!e[o]){var c="function"==typeof require&&require;if(!a&&c)return c(o,!0);if(s)return s(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var u=n[o]={exports:{}};e[o][0].call(u.exports,function(t){var n=e[o][1][t];return r(n?n:t)},u,u.exports,t,e,n,i)}return n[o].exports}for(var s="function"==typeof require&&require,o=0;o<i.length;o++)r(i[o]);return r}return t}()({1:[function(t,e,n){"use strict";t("@marcom/ac-polyfills/Promise"),t("@marcom/ac-polyfills/Object/create");var i=null;try{i=t("@marcom/ac-storage")}catch(r){}var s=t("@marcom/ac-event-emitter-micro").EventEmitterMicro,o=t("mustache"),a=t("Base64"),c=t("./cookie.js"),l="ac-store-cache",u={items:t("../mustache/items.mustache")},h=function(t,e){this.message=t,this.type=e,this.name="AcStoreError",this.stack=(new Error).stack};h.prototype=new Error,h.Types={BAD_JSON_RESPONSE:0,MISSING_API_ADD_TO_BAG:1,MISSING_API_FLYOUT:2,ITEM_NOT_ADDED:3}

Chrome Cache Entry: 231

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	13051
Entropy (8bit):	7.882469968715526
Encrypted:	false
SSDEEP:	384:sx3Hl+P5oqnacR+uAdlCWgDRSbPzczJ4T:kl+P5oqnaA+uAdEWg4bPIN4T
MD5:	F7EB42B4E079B6664C87E6497E655B03
SHA1:	4547D8AC1550DC25F15564FE0E4082F52A8EE36C
SHA-256:	68BAEA62F2BA96C88CF2A80059CAD2C735DFEFE0035B02CF9A5A699DFA554F72
SHA-512:	1243236FA889E8448F41B4FD3CAE6C4BC74F2138A99C3F15749B8F8433CF2450E87FBA2A360C6D97920087399F4118DA9329DB4854F0ECAFE9F29D5F87A5329E
Malicious:	false
Reputation:	low
Preview:	.......<svg viewBox="0 0 268.0201416015625 158.116943359375" version="1.1" xmlns="http://www.w3.org/2000/svg">. <g transform="matrix(1 0 0 1 79.49508056640616 114.2884521484375)">. <path d="M46.3867 8.59375C49.2676 8.59375 51.5137 7.4707 53.0762 5.12695L98.7793-65.5762C99.9512-67.334 100.391-68.8965 100.391-70.4102C100.391-74.2676 97.5586-77.0508 93.6035-77.0508C90.8691-77.0508 89.209-76.0742 87.5488-73.4375L46.1914-7.91016L25-34.7656C23.3887-36.7676 21.7285-37.6465 19.3359-37.6465C15.332-37.6465 12.4512-34.8145 12.4512-30.9082C12.4512-29.1992 13.0371-27.5879 14.4531-25.8789L39.7461 5.27344C41.6016 7.56836 43.6523 8.59375 46.3867 8.59375Z" />. </g>.</svg>......t<svg width="66px" height="61px" viewBox="0 0 66 61" xmlns="http://www.w3.org/2000/svg">. <g stroke="none" stroke-width="1">. <g>. <path d="M7.8,61 L58.2,61 C62.9,61 66,57.4827018 66,53.1614498 C66,51.8550247 65.6,50.5485997 64.9,49.3426689 L39.7,3.91927512 C38.3,1.30642504 35.6,0 33,0 C30.4,0 27.7,1.306

Chrome Cache Entry: 232

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 154460, version 1.0
Category:	downloaded
Size (bytes):	154460
Entropy (8bit):	7.998585639718606
Encrypted:	true
SSDEEP:	3072:eqHTBqMgBINu4/tuiPxHU9LW5dqcDtzgUcOcSxGdRs+7fgPPbF7gD5:lTozeLpHU9Krq4GOzxGXs+rYDFS
MD5:	87746EADE3E253A4627CBFB7B623E0C2
SHA1:	CF2CDAFF548F56CBED177496FC648E6ABFB42D4D
SHA-256:	F1106E805D9BECBFC348FDECB2183031E7D0699057A2474A53818769FA54C9E1
SHA-512:	25743612DA1448D3E736EC4A497C6A8ED85422B323E751508C59BC1014F1D350EC4B2C796951C427DD2C75A44D3CFA82269360EDC0180FA17BE19B34921785F2
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v1/sf-pro-display_semibold.woff2
Preview:	wOF2......[\..........Z............................X....`H......r..b........).6.$..X..\.. ?meta....6. ..G8.t[....Je.v....u..1.%R3.."..K3 ....bx.6.r,..~....9..".,..5.k,0S.k.........w..'j...,....,{.r.\..F.h...$...I..W.Sd.#.......jO.j.g.Z.>.80m..vF...ic....&rb4..`i.......i:.#..p.B(c...#/B....+.......uMl&W..h?5".......M[....`..Y.n..U.J..].g" _.$n...3...6f...9....o...TO.T....<u.=....p.E.c..<.4s.w...%...?...,L^...<.....b/~..q?.sx..AD.kSNhL..:V./...``..8.._.....`..c.c.z...&.$...&..W.t.....At..........AuD....~}[ .]x..7.L..O..."`Zi......?m......C.Yr.2.4J... ...R..i..)^t......E.._.u.(....T................/..}:R.2..d>..0....{.h3.../....;.zS.^..7l..\|....M..\.W.g.o...........E.X...S"V...D....q>.N.._D.%A..0.-....{\|.F.;\|...j......<./.KxP..f.....W..(..0%....8N.f...#U..Ox...>..o...:..Ze....5.)+.5;mR..q....P..DE4:c1F.1.;...O4}....y._.G.?...t.'....EweZS.`.T7.u.(p..T....y?v..J..q....EE0..O..D..J..v...zh..Bq........<JE.....6s.....{ZB..y..C..q.b.<.&.sF....1.

Chrome Cache Entry: 233

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47124), with NEL line terminators
Category:	downloaded
Size (bytes):	241706
Entropy (8bit):	5.327937354961122
Encrypted:	false
SSDEEP:	3072:gm4cgIKAQa7XwCRPM6naxlBQ/mhhHg/VBymzrgG:+clKXaTwUPmQ/mhhHEzyrG
MD5:	FB9CDEC9DC81C2FC0710CAB9204CFD34
SHA1:	3EC6F4BB754216C3BCEAF077AA2B3E36DAFC19FA
SHA-256:	8E7EAEA42F149031D0A2E4A7B8C3E52824B585B77737E3435DB788E4826694CF
SHA-512:	C1F4F4A5AFCEED38289DDE70D21DD0B792F8F199A0EB8A71DCB8D446C07BF66B0A7FD326C93F3C1FF35C453F6B93AA8B563C1E050B25A8691DED6EB437E044BC
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/445765738/webSRPClientWorker.js
Preview:	!function(t){var r={};function e(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:n})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,r){if(1&r&&(t=e(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(e.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)e.d(n,o,function(r){return t[r]}.bind(null,o));return n},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},e.p="",e(e.s=849)}([function(t,r,e){var n=e(1),o=e(40).f,i=e(36),a=e(28),u=e(179),c=e(135),s=e(114);t.expo

Chrome Cache Entry: 234

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60050)
Category:	dropped
Size (bytes):	577883
Entropy (8bit):	5.534201114776914
Encrypted:	false
SSDEEP:	12288:aYSsK4GZvdM3qaMZpdTwGpIXN4BSWquq2iGuFDeBD1qWPH+LLIIHQ:TK9Tw2
MD5:	E9A08F695655A19BA3E7B741B791F0E9
SHA1:	F248C2604A23EC1CC3510595A35D87708E626476
SHA-256:	2FB77285AF8EB1F9BD68C3190A434C52E48D7DE25B3A3AE7DA2DCB754F39775C
SHA-512:	9E28BFCF06ADA3114FFBD703572FF8CA4BBE2F623B90955AC486E5CF6FF60A39F0DB641F79462BE1A5006A452E5E673992F085BB48CE4F6C2703F60FF9E511D8
Malicious:	false
Reputation:	low
Preview:	!function(e){var o={};function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,o){if(1&o&&(e=t(e)),8&o)return e;if(4&o&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&o&&"string"!=typeof e)for(var n in e)t.d(r,n,function(o){return e[o]}.bind(null,n));return r},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,o){return Object.prototype.hasOwnProperty.call(e,o)},t.p="",t(t.s=1)}([function(e,o,t){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 235

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (385)
Category:	dropped
Size (bytes):	2543019
Entropy (8bit):	5.95592135068074
Encrypted:	false
SSDEEP:	49152:j7s5QExDjdm7zMT+XYlmQlkNWm/eHb71IVUtmV1qZbmnXXjqNhUmZ1yZSHJMuc6:rqZMU
MD5:	F9635763915B0C443AEA55F242E9A0DF
SHA1:	D6059AAD80590344A0EACAA21A18395A1C393C19
SHA-256:	3180B2F69A9F79DE8CEFD70DF30F49074EFF5E28A7FCEDA5911B1BABBD090AE8
SHA-512:	92789C370A6BB9A839FA517D6A2A29841F6B18B07FB7F96F9B3C8E448C3D9FD4B81C4F09737CA5AE6862CF68D5DB777844CBF5C19598913871F20F8D64EF4B7E
Malicious:	false
Reputation:	low
Preview:	/****/ (function(modules) { // webpackBootstrap./**/ .// The module cache./**/ .var installedModules = {};./**/./**/ .// The require function./**/ .function __webpack_require__(moduleId) {./**/./**/ ..// Check if module is in cache./**/ ..if(installedModules[moduleId])./**/ ...return installedModules[moduleId].exports;./**/./**/ ..// Create a new module (and put it into the cache)./**/ ..var module = installedModules[moduleId] = {./**/ ...exports: {},./**/ ...id: moduleId,./**/ ...loaded: false./**/ ..};./**/./**/ ..// Execute the module function./**/ ..modules[moduleId].call(module.exports, module, module.exports, __webpack_require__);./**/./**/ ..// Flag the module as loaded./**/ ..module.loaded = true;./**/./**/ ..// Return the exports of the module./**/ ..return module.exports;./**/ .}./**/./**/./**/ .// expose the modules object (__webpack_modules__)./****/ .__we

Chrome Cache Entry: 236

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8337
Entropy (8bit):	4.234901560641787
Encrypted:	false
SSDEEP:	192:x9RqnHMECMtU3MAMv5oMEEBEX33Ir3+E18g5ZMZMF5dLGjm3o3V5SUT9N:x9RqnHMECMtU3MAMv5oMEEBEX33Ir3Lu
MD5:	7AC8E3FC72C41AF2F48EB38ED55FD7BA
SHA1:	AC861F8CCBD42196A955ABEF3252C31456BEE811
SHA-256:	276618038F0474681826EED2CD12FAE281387DEABA057CEE6DEA869ECB8D292F
SHA-512:	4A125DC15B8B05F484CD15D2C2D2D5E9DC9A24F980FCA3F40C1A9C172AEB360D47667C9C27C2F3CC562489A3FC3E7C1691B06AF28DD26351EF0C7CA591343B24
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 160 160" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><linearGradient x1="100%" y1="100%" x2="50%" y2="50%" id="a"><stop stop-color="#8700FF" offset="0%"/><stop stop-color="#EE00E1" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="0%" y1="100%" x2="50%" y2="50%" id="c"><stop stop-color="#E00" offset="0%"/><stop stop-color="#EE00E1" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="100%" y1="0%" x2="50%" y2="50%" id="d"><stop stop-color="#00B1EE" offset="0%"/><stop stop-color="#00B1EE" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="-17.876%" y1="21.021%" x2="48.935%" y2="50%" id="e"><stop stop-color="#FFA456" offset="0%"/><stop stop-color="#FFA456" stop-opacity="0" offset="100%"/></linearGradient><path d="M89.905 152.381a3.81 3.81 0 1 1 0 7.619 3.81 3.81 0 0 1 0-7.619Zm-23.737 2.79a3.81 3.81 0 1 1 7.36 1.973 3.81 3.81 0 0 1-7.36-1.972Zm46.799-5.126a3.81 3.81 0 1 1-7.36 1

Chrome Cache Entry: 237

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22124
Entropy (8bit):	5.311977646975752
Encrypted:	false
SSDEEP:	384:c8i6a2S0gvVzN440/h7ZCkZYju3TqzabHFrVBtBxyYgKdvzGKou+rFVkhL3qqBmJ:c8i6a2S0gvVzN440/h7skYjdzabHFrVs
MD5:	C4B61D2A21F2723EA6D6F6A68412D1F2
SHA1:	1ACB40561D2D5E9E43D061B39B2C8C0CD3E8CCD2
SHA-256:	3031AA1B654CA979F7577E4706173D35A9D8FF35CBDB80A8E4911FD9423E2BC4
SHA-512:	6E2ED976F8B34B0D36B28FE1B7A4F21E45665C6644ABDDF25044FDA93ED6B14DC2A2E0C787F79D7412866C08622085401ED6E9D02827C5ABDDA9D103B81BE8F9
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v3\|SF+Pro+Icons,v3"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.eot');.../ (C) 2019 Apple Inc. All ri

Chrome Cache Entry: 238

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46673)
Category:	dropped
Size (bytes):	134281
Entropy (8bit):	5.315833008606401
Encrypted:	false
SSDEEP:	1536:McLDh9iasJAJWjL0//GL7+eYWaxsZdyriLM5ZabFkBC2Ekp8Br/SReLjK/JUmtvu:5s2JWqOLM5ZKM64eJYIgYrojr/Nmn
MD5:	B293E734E70FDD3941ED23CB75D798A7
SHA1:	45D46E2054A48DE58993A73E015E361AF58AE48C
SHA-256:	FA4CB957A209F05B0E7AAA99012E69B84E937A3CE6F5334064DC5572D3EF0EDE
SHA-512:	D8A8938D7F3C14D79A9CA2D5A8D4794653BE0B6E7A56CF6CF72237A2E13301E9A2DA2735CD1D17062F971FAA0F09D6DF85062458A74131EAD4F7F789C5C49DFD
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=865)}({105:function(e,t,n){"use strict";t.a=function(e,t){return e===t\|\|e!=e&&t!=t}},106:func

Chrome Cache Entry: 239

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	403005
Entropy (8bit):	5.385739809537511
Encrypted:	false
SSDEEP:	3072:Frt9Ou4cpNxMRPAVh2qwiq/lbYdSFd5wHudHucUDfdXT:pXFyqXq/KdS1S1D
MD5:	15F2817AFEF61C6122524F9B4653B7D0
SHA1:	E51B5F89BF1E8572C52B4EFC1AFCEC9C2A2AD6BC
SHA-256:	6462C6ADDF48E89BCC4653019FD5FDB8B632D57E984EC983629392E69A6AEEC0
SHA-512:	B1CF07F7460B4EF9EB11A9FF58F64960521CDAF12B54AB31A7190777D6C2491900922488CECB424B66B5D4C8611E4A4845442070C43DF7F28DD06FF6359B7BD4
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/module-assets/home-e917f8dc10ca3ca76ff5.js
Preview:	/! For license information please see home-e917f8dc10ca3ca76ff5.js.LICENSE.txt /.window.webpackChunk_idms_private_appleauth_web_sa&&delete window.webpackChunk_idms_private_appleauth_web_sa,function(){var e,t,n={8054:function(e,t,n){"use strict";n.d(t,{Kq:function(){return E},HY:function(){return M},Eu:function(){return q},VP:function(){return $},$V:function(){return K},LU:function(){return qe}});var r=n(1701),o=n(4747),i=n(4787);let a=function(e){e()};const u=()=>a;var s=n(6166);const c=Symbol.for("react-redux-context"),l="undefined"!=typeof globalThis?globalThis:{};function f(){var e;if(!s.createContext)return{};const t=null!=(e=l[c])?e:l[c]=new Map;let n=t.get(s.createContext);return n\|\|(n=s.createContext(null),t.set(s.createContext,n)),n}const d=f();function p(e=d){return function(){return(0,s.useContext)(e)}}const v=p();let h=()=>{throw new Error("uSES not initialized!")};const y=(e,t)=>e===t;function m(e=d){const t=e===d?v:p(e);return function(e,n={}){const{equalityFn:r=y,stabil

Chrome Cache Entry: 240

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28965)
Category:	dropped
Size (bytes):	285623
Entropy (8bit):	5.388109149443547
Encrypted:	false
SSDEEP:	6144:3jq53bMK8ei9UnZ7ZsiW0rfaLeqnILvKhTVcPQXBRC2ZxX12wwYhD4RxBgEVMSKL:3uJbM/MZ7ZK6qiKxZZ1HZ
MD5:	53A7A6669D95CB3397B26751EB7C51C4
SHA1:	CD3C5C6FA6937FF2D6DB64E0D51E5DB693BF8D36
SHA-256:	F569B9048466EB7C8FCA19901D92D8173467341CEBF4B4122149EDB9C9CDB235
SHA-512:	83E79E7CF7EA876EECA5E98558DBDAC6208F9F0E7979049421DA8DEDCA01C9D673832AB05CB06C3ECB37D07144AFBB795CB2EE41E231340A64AFB1A4F6E4D4FC
Malicious:	false
Reputation:	low
Preview:	//LAUNCH-VERSION: packager-20210806A.launch-20220913B-prod..(()=>{"use strict";var e={};function t(e,t){const i=";domain=.apple.com;path=/;expires="+new Date(0).toUTCString(),n=["acs_path","clk_pev","s_vi","mbox","s_sq","s_intcpm","s_cc","s_getNewRepeat","s_nr","s_ppv","s_orientation","s_lv","s_ppvl","s_AVT","s_vnum","s_fid","s_pathLength"];function r(e){return new RegExp(e+"=([^;]+)")}let a,o,s,l;for(a=0,o=n.length;a<o;a++)try{s=r(n[a]).exec(e),s[1].length>0&&(e=n[a]+"="+s[1]+";domain=.apple.com;path=/")}catch(e){}if(t)for(a=0,o=t.length;a<o;a++){l=r("("+t[a]+")").exec(e);try{e=l[1]+"=null"+i}catch(e){}}t&&!t.includes("s_vi")&&t.push("s_vi"),setTimeout((function(){window.launchClearCookieTimeout(e,t)}),18e5)}e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),e.g.fixLocationPath=function(e){return e.replace(/(\.\.)+/g,"").replace(/([?#[\]@!$&'()+,;=%].)$/,"").replace(/[^A

Chrome Cache Entry: 241

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4621)
Category:	downloaded
Size (bytes):	29685
Entropy (8bit):	5.5002113167866185
Encrypted:	false
SSDEEP:	768:QGi7hrUX3hXoqp2UAUUckgeuaiDi5EzblzoN5bc94:Q6hXoTUN6+zbJwD
MD5:	A8443919519C0AABB8805EDE5CDB64D9
SHA1:	17E517BB7EF1ACA6D81852DC473F2458868685E9
SHA-256:	C695DEA15D715E2EB7729AC12C70B1553C564637429946D43CD8F7CD8E4ADF40
SHA-512:	93C6479F8ACFC4ABF1F589E962C904DB04F7B77F82C171B8A356315FC63A177D73626324C30ED5BBB5A969BE0E1A1BDB5DAA4A6B9C70FC01013ADAFA24ABF8AA
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ
Preview:	<!DOCTYPE html><html lang="en-us" data-cw-private-path-prefix="" data-cw-private-build-number="2425Project45" data-cw-private-mastering-number="2425B25"><head><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src blob: 'self' .apple.com .apple-cloudkit.com .cdn-apple.com 'sha256-JFJvxqMr7d0c5kvkhpyFwvNHHhwfiIFw0UaFnTp+u9M=' 'sha256-vY8HZSVmcUbsI8RkfUEVTnl1U2Bz1CJzjgj6Iwu+/AQ=' 'sha256-26W8JbT1vQArZ+8F3eitbNZVzh5WonwHlQl29E4pato=' 'sha256-svdOQzSg9T05h6Q3mC/8FCU+2bG3vWTBwdPa+czq+YY=' 'sha256-HenvlWVrAISuwfRzCus0xoCe+m4/jV6vXViy4FodZC8=' 'sha256-lRaqSyfzcyRaZDbyf9zk3ZsU3HWpfeHMdgqioLyb3K4=' 'sha256-Pehjm3T5Rd/IWK326y6s3vNQ6aE9SViYeFnKDyN9Uo8='; style-src 'self' data: .apple.com 'unsafe-inline'; default-src 'none'; child-src blob: 'self'; connect-src blob: 'self' data: .icloud.com .icloud.com.cn .apple.com .cdn-apple.com .icloud-content.com .icloud-content.com.cn .apple-mapkit.com; form-action 'self' .apple.com .icloud.com .icloud

Chrome Cache Entry: 242

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 169880, version 1.0
Category:	downloaded
Size (bytes):	169880
Entropy (8bit):	7.998688662033474
Encrypted:	true
SSDEEP:	3072:34viM0ZsJFCpKS06b4rjYu+J/+5Yo/xlZKAZFKkEfY3isxjv84J:giM7JMo6cIu+J/+SAJHZkzOiK
MD5:	09FB0327FF81B3186001B2ED71717A31
SHA1:	72CFBB4127E0A8F8E7341D26229A9C91F25CF791
SHA-256:	970E676C52B275A819AB9170EC4427370CC6C7033AA2E6B0B9CB71B977B72542
SHA-512:	BBC27177D2F9B1FBB98E944C50B83D48E654C1A84E7D317D9D53D9E8E95CBEA8A8E722420C3B7AE1EF83BC7A0F273BDF247F3EFB36D45019C44012CF11BA5BE9
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v1/sf-pro-text_semibold.woff2
Preview:	wOF2...................)...........................N..N.`H...B..r..b.....0..S.6.$.....$.. ?meta....d. ..G8.t[.....w.....T......m.#@...Gw".c..eHi.8T.....9 nl;.ji.sl..)...9...............3I.lvs.. ....Zk.hOm...jt..>.Q.U.n.......'..L.+.w[)zE.....W#....X.k.SI.....(.L.L.SLM4..w~1[6..2S..+.+.....j/.JN.....0P..C~.+6.........M.sA.X.z......9.....n.!td...r.!..+..O........'y.K.....:.V.....@.a...T.r~8L..h)A0)-.....F..f...V.&b')sY....jsf........"...1\|.h....T..s..J.sz.....DEd!u.D1....D..S.Y+\|..[:....i.-{}~..5B.NQ....5Q...S..Qo..._..._#/..Obw.M........,{E.ck".....70.(.8.Q.......d&...x7...L6.s2.9.Q.L#(K.....cp...W..f.Q..2......gQR.$e....g.R).9d.. .!.x..........c.2.S..i$.i.v..>.m/.0@..A....S.T........6.x\]fea..x.*...jK.......T'.{..x[..!..\|....w/^.E90".=..7.P...../b~..vx^..^.mK...........i.J..... .q.@R..d.K....M;.Ah".\..Q;.C.%H...'...=.}..{He.....lu.H.._.<.E.....>..Ib~..........#.LL.&2.B).p.qNPn....b...t(....>....._.G.G...<....O..R....SQQ..t..67...m.\.M].M.`nn#Jb.E.

Chrome Cache Entry: 243

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	3005
Entropy (8bit):	5.056544406034801
Encrypted:	false
SSDEEP:	48:pt7FARkQYcN1VsQgokezwFMMCKOUlhoIGHmEjSdiGZVIO:ppFgqi65oJGOUzoI9EuIGZVL
MD5:	48F64032F368F28EB6BCC023E8356131
SHA1:	53DA77839238159D512DCB4BBB42B6D81E26AA65
SHA-256:	FB30947A7F55B40C8E6AA8F2F8A65CAF2A2ACBC6E6A6E213EA4F3436AD0C9516
SHA-512:	A0838CAE61255E9CE3F2401962F474665CAD22179FE96EE555B97C2DB7B9B1E59F4AAF929DABA98CFB9058E3A6A71072AA6C99108F85D1608704543AFB46D5D6
Malicious:	false
Reputation:	low
Preview:	'use strict';...(function(){.. var bootArgs = JSON.parse(document.getElementById('boot_args').textContent);.. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.idmswcConfig = window.idms.app_config.idmswcConfig \|\| {};. window.idms.app_config.idmswcConfig.formStyle = bootArgs.eyebrowFormStyle;.. var contextUrl = bootArgs.contextUrl;. if(contextUrl && contextUrl.substr(-1)==='/') {. contextUrl = contextUrl.substr(0, contextUrl.length - 1);. }. else {. contextUrl = '';. }... var _bootData = {. sstt: encodeURIComponent(bootArgs.sstt),. section: bootArgs.section,. location: bootArgs.location,. data: bootArgs.data,. contextUrl: contextUrl,. jsLogLevel: bootArgs.jsLogLevel,. inSite: bootArgs.inSite,. isInternal: bootArgs.isInternal,. isEnabledConfirmAccountName: bootArgs.isEnabledConfirmAccountName,. isEnabledLandingPagePhoneFormatting: bootArgs.isEnabledLandingPagePhoneFormatting,.

Chrome Cache Entry: 244

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	382960
Entropy (8bit):	5.361356865855945
Encrypted:	false
SSDEEP:	3072:ShI+bJHQWzy1nZBYyswJFi72WZmQxjD5ToMEqSEcBadc+NcK:/+9QWm7BCMjyEacBlXK
MD5:	47291FDA2689A4EBE29AFFDD80565682
SHA1:	BB660D1DD4C4C39F91EA6773A343F09ADA902328
SHA-256:	FD98BB5EFEBC9C999A8A6EB77C18E35ABCEA12AD18AA7907F039429900B9ECFE
SHA-512:	6EADF92BAF288DC7D574E162C0961C2AE464B8A754E14598399427FA441E9A1CB5DBA2AF699D4CAF52EB345D6E0048225658B4CAF5C0063CF5B7103C54A22A42
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/jsj/2137496771/iForgotWeb.js
Preview:	/! For license information please see iForgotWeb.js.LICENSE.txt /.(()=>{var e={2763:function(e){e.exports=function(){"use strict";const{entries:e,setPrototypeOf:t,isFrozen:r,getPrototypeOf:n,getOwnPropertyDescriptor:o}=Object;let{freeze:i,seal:a,create:l}=Object,{apply:c,construct:u}="undefined"!=typeof Reflect&&Reflect;i\|\|(i=function(e){return e}),a\|\|(a=function(e){return e}),c\|\|(c=function(e,t,r){return e.apply(t,r)}),u\|\|(u=function(e,t){return new e(...t)});const s=O(Array.prototype.forEach),f=O(Array.prototype.pop),d=O(Array.prototype.push),p=O(String.prototype.toLowerCase),m=O(String.prototype.toString),v=O(String.prototype.match),h=O(String.prototype.replace),y=O(String.prototype.indexOf),b=O(String.prototype.trim),g=O(Object.prototype.hasOwnProperty),w=O(RegExp.prototype.test),E=(S=TypeError,function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];return u(S,t)});var S;function O(e){return function(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),

Chrome Cache Entry: 245

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 155504, version 1.0
Category:	downloaded
Size (bytes):	155504
Entropy (8bit):	7.998614565058878
Encrypted:	true
SSDEEP:	3072:Dfat5DWMgNnIQjNgaklsMpaS9/Vt+dAu3Q5fJ8ASr3PxQjb:DatkMiv+aELa0nXBMA+pOb
MD5:	4487D81FAED77DCA1EEDB32FE8874CE6
SHA1:	AA519492C8D0B48C5DBB6812B84948FCEBEF569B
SHA-256:	78F1A8F3787F77F7AB4FCBB12C87F5CD412556C04991CDADAACDDCD9B5A3E68A
SHA-512:	1F4A78FB22C0CC78361F4746E2E44C48112068DFDD0ED2440C13100BEF9815FC3B2D907A336760A40DEB5828D46414FD16827B4DBE3D73674D23A5170CA64ABB
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v1/sf-pro-text_regular.woff2
Preview:	wOF2......_p.........._............................r..N.`H...B..r..b........\.6.$.....$.. ?meta....\. ..G8.t[...../....L.s.I....S.$[..Q<6...%c.0....t.Y.....K...9...`j5.s.m..B.u.........._.....7...l.......9.+^Xk....F...J....c..w.04.e..1n'#L.l.........VU../S.2.UJ)..z.S..b.6...[..v....L."S2.N~....&#.O.c...;,.4./w.iu;...Jv...e..@.}....t.m.y.F........?.~.!..P......C.cW!>..J.?.......]n.U..._.-N.....o.{... .rW<...D.@..Z.2.b.o.tP_<..o....U..7H/.)f.;i.]c.!_.K_a...'.T..[qS.s...I.'...Y..{x..L....wf....3.p..C......_.ne./{..O/k.T..Q.\|..n..U..>ec.f..S.-.....0.....k<.f.trfN.......W......Z.J..3....\|_..d6...H.;.\|....:..Y.Q...,..J.........mhH...W.P.~a..4...0.#..L.*..U.m..X.....0-.A..q..x.jTHR!I..../Q...O5..?T....e..+......).f......Fn....vQ..>"QM.4.f2.u...:k&..$(..Fc.<..7.....~].TR....6+.E......j...(&Qf..b...2.g.D.....V..Wd?..?............uw1T) <...ssf^...'%b\|".h.c.l.....[.f%?..\|.....@..s^ya.^.....C0V.5$....9jJD.....a..H`....U.BD.D......n...>...6...b.6+.3.

Chrome Cache Entry: 246

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3494)
Category:	downloaded
Size (bytes):	93606
Entropy (8bit):	5.079992462093098
Encrypted:	false
SSDEEP:	1536:k2kwvdecQJGzo+LzjeXVJdRe5G+J1LiPYH:UKjVH
MD5:	653D068FAF440A9C3D3632C3EB537DFF
SHA1:	378144367B6F63417E2FD5855782E11AE305CFD4
SHA-256:	41D1AD3FC1265A46CD081ADFA7E8A21501BF43657CAFFF71699E0FE95DBCDA43
SHA-512:	6FBB418B452FFF731ACC9E62B6F091DFABCDAC360F35A38AF41C3DFECADE5B34F85A198C3CA2E9DE441C881C3F772A82D4AA013AEF88E5AA4F73878BF55AEC4F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-US" lang="en-US" prefix="og: http://ogp.me/ns#" class="no-js">..<head>...<meta charset="utf-8">...<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">...<meta name="ac-gn-store-key" content="S2A49YFKJF2JAT22K" />...<meta name="ac-gn-search-action" content="https://support.apple.com/kb/index" />...<meta name="ac-gn-search-input" content="q" />...<meta name="ac-gn-search-field[src]" content="globalnav_support" />...<meta name="ac-gn-search-field[type]" content="organic" />...<meta name="ac-gn-search-field[page]" content="search" />...<meta name="ac-gn-search-field[locale]" content="en_US" />...<meta name="description" content="Status for all planned and unplanned events for Apple Services." />...<meta name="omni_page" content="acs::web::System Status"/>......<meta name="analytics:s-pagetype" content="home">...<title>Apple - Support - System Status</title>...<link rel="stylesheet" h

Chrome Cache Entry: 247

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.250414944135716
Encrypted:	false
SSDEEP:	3:GMUPA3GndKrig4ZclBF5YfuTp/2UuzIHgbRR:vUPYGnWD1PGfuTxMz+UD
MD5:	0112C3D6C20F0ED6F8C2BC05D51B747E
SHA1:	72A217344EF54EFBAA6DEE6681EC2F76C7E86D8C
SHA-256:	4DD4E712C0307525A3D863EB72EEAB5067B320FE498956CF2450C0CC419DA24F
SHA-512:	395D1AC3CCC0CA0235B3E05B8986DEB76BB78BF5E6CA0FA0208EA78D509C65944F3DA6E88116EDDD1DC5919DC7B33F593B9EE88EE6F3327BBE494322E2990727
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnXxKN5APiXQBIFDVuSjeESBQ3byczYEhcJ6GKHJBBNU0USBQ1bko3hEgUN28nM2A==?alt=proto
Preview:	ChIKBw1bko3hGgAKBw3byczYGgAKQAoNDVuSjeEaBAhWGAIgAQovDdvJzNgaBAhLGAIqIggKUh4KFCFALiQjKl8tPyYrJS8sKV46KD08EAEY/////w8=

Chrome Cache Entry: 248

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6756
Entropy (8bit):	4.638324890211791
Encrypted:	false
SSDEEP:	192:4KLcWazhi2qaOZBwK9m1VfkNV4eCwX8owDiU2+6jppkvwUvi/qHqyao:pgWali2aZ6K9m1C4wUDivDiqql
MD5:	D95841F7F8CA1E64B29B14EC1BF8B625
SHA1:	99ADB1F42583DF74F9529B472EFC3D95921A7A01
SHA-256:	F46F8884CEAA4D6AECBAD6B256014C541AB5F892B0D403F7B3F4E4CE9C6673D9
SHA-512:	74738A9C444E8E42E4B153416B2A84C9394872E3DA70F651D2F63A08EEDAE27AEAC8B59D3C915F497F44244AD85950BDDDA807B248B3D21297475F48C3834EA5
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/431342789/boot/initBootData.js
Preview:	"use strict";.(function (){.. /. bootArgs has the structure:.. bootArgs.additional = {} full of known arguments with specific js that must be applied,. ex: functions, string values that need to be manipulated prior to being set, etc. bootArgs.direct = {} keys/values which can be set wholesale into bootData.. /.. function populateFromBootArgs(bootArgs) {. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.bootData = window.idms.app_config.bootData \|\| {};. var bootData = window.idms.app_config.bootData;. bootData.canRoute2sv = false;.. // Process all direct fields into place. if (typeof bootArgs.direct === 'object') {. Object.keys(bootArgs.direct).forEach(function (key) {. bootData[key] = bootArgs.direct[key];. });. }.. // Functions for setting the the additional variables from the bootArgs. /*. Function to get the value at bootArgs.additional[pathElements],

Chrome Cache Entry: 249

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	476
Entropy (8bit):	4.822658001910672
Encrypted:	false
SSDEEP:	12:Y239WW/1Gg2rwSUb8WCULbmaUL1NAULV88pUf5bErS:YaRl2EgWnmpNnFO5I+
MD5:	8EF4B92D1963E76D87C230CB022581B4
SHA1:	0F478DD0CB80CBFB1834C23321D4FBD21586C255
SHA-256:	B992844FAC60940EA495671CE077FD461DB98AA7CF4E077212D1ECAA941612D2
SHA-512:	4B24274F4EFBDB2BC56BE16F2B1EE3E36844655C32710337EC52B073DCD9EC62B87C5D9E488DE1407006D5CD754AA35E8DACB6A3B740E506D02E944FCE448EE8
Malicious:	false
Reputation:	low
Preview:	{"id":"Aote09l8Szuabarro7vdkw","results":[{"sectionName":"quickLinks","sectionResults":[{"label":"Find a Store","url":"https://www.apple.com/retail/"},{"label":"Apple Vision Pro","url":"https://www.apple.com/apple-vision-pro/"},{"label":"AirPods","url":"https://www.apple.com/airpods/"},{"label":"AirTag","url":"https://www.apple.com/airtag/"},{"label":"Apple Trade In","url":"https://www.apple.com/us/shop/goto/trade_in"}]},{"sectionName":"suggestions","sectionResults":[]}]}

Chrome Cache Entry: 250

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	196938
Entropy (8bit):	5.135396650531942
Encrypted:	false
SSDEEP:	1536:+jNyqUXiJc25xwftWJc6qdcLwQnQoAkSWZmT6ocTzVqJlO4QA3chodGWXTDvFz8L:cUXiuatrXojm
MD5:	00457FBC4A59737B8E35F6AB9FA9CB0C
SHA1:	18E6E6066B28939E219A4CF8E45F07CF25C601F8
SHA-256:	F5EC5CFEFC085F50D63BC1E671B579DE23B1F9C0999A60DE6853552910730A31
SHA-512:	79B47CE7F6F45B4A80E2B808AA26072E627AA84A50C70E2E9E58E6DB31713CCF28AD79E45B15AB81DC4B74FFB2D4854D22E182C1EF1D666C65A9AABB9B0AC81E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Preview:	@charset "UTF-8";#globalheader{all:unset}#globalheader html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#globalheader body{margin:0;padding:0}#globalheader ul,#globalheader ol,#globalheader li,#globalheader dl,#globalheader dt,#globalheader dd,#globalheader h1,#globalheader h2,#globalheader h3,#globalheader h4,#globalheader h5,#globalheader h6,#globalheader hgroup,#globalheader p,#globalheader blockquote,#globalheader figure,#globalheader form,#globalheader fieldset,#globalheader input,#globalheader legend,#globalheader pre,#globalheader abbr,#globalheader button{margin:0;padding:0}#globalheader pre,#globalheader code,#globalheader address,#globalheader caption,#globalheader th,#globalheader figcaption{font-size:1em;font-weight:400;font-style:normal}#globalheader fieldset,#globalheader iframe{border:0}#globalheader caption,#globalheader th{text-align:left}#globalheader table{border-collapse:collapse;border-spacing:0}#globalheader main,#globalheader summary,#globalheader det

Chrome Cache Entry: 251

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (11857)
Category:	dropped
Size (bytes):	45018
Entropy (8bit):	5.358020920630629
Encrypted:	false
SSDEEP:	768:6ffMFzcFXMPC2UmAZwrbSc3kMs62HmqwxiApq/RoWBp:6XMFzcFXMPCDmaUSYkMs62HNApqOu
MD5:	BAA6703AE31B710081BC8F40796507CC
SHA1:	62A80AF2056252EF1942CB8CD392F8A67D8757C9
SHA-256:	B5A9BF072ADE217AB958474521D73134E7C3520E2FB56722A8BF555769DBFF72
SHA-512:	C584E8B692810F3E76526FB32AEAAB62DE7DD71DDFC262F72E71A7DBE3A518337C14DB9E99974037D1038A03EC1927972EDF207F29A3432BB75034F11625091D
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=0)}([function(e,t,n){n(1),n(3),e.exports=n(4)},function(e,t,n){(function(e){function t(e){ret

Chrome Cache Entry: 252

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32019)
Category:	downloaded
Size (bytes):	134839
Entropy (8bit):	5.341739822309292
Encrypted:	false
SSDEEP:	1536:LAPqGcoLDPmr1YnHR4JzsToYZXzq5ocTmlzea7xgq99GR7Mjluyr9zxjpP3:LAPzRqNYiaJDZ3
MD5:	6CCAC66D1223C6023F4E12578192F707
SHA1:	D100782390EC064BE1AFA4A665AE8CAF1E83C95A
SHA-256:	289E5C4F1FFCFFB74423120BC60E11F6FCF6D8786B66AC398C3CCF01EF658597
SHA-512:	B0B8572C17437EF684D0DE8222B25F7282029DB50665AEDD6FAAF1BA1CEB55F9CB9DB0F23451C39A8120F27344576FA806B4EAF47B566A1F873C3FC2F2F611D4
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalnav/4/en_US/scripts/ac-globalnav.built.js
Preview:	!function(){function t(e,n,i){function r(o,a){if(!n[o]){if(!e[o]){var c="function"==typeof require&&require;if(!a&&c)return c(o,!0);if(s)return s(o,!0);var l=new Error("Cannot find module '"+o+"'");throw l.code="MODULE_NOT_FOUND",l}var u=n[o]={exports:{}};e[o][0].call(u.exports,function(t){var n=e[o][1][t];return r(n?n:t)},u,u.exports,t,e,n,i)}return n[o].exports}for(var s="function"==typeof require&&require,o=0;o<i.length;o++)r(i[o]);return r}return t}()({1:[function(t,e,n){"use strict";t("@marcom/ac-polyfills/Promise"),t("@marcom/ac-polyfills/Object/create");var i=null;try{i=t("@marcom/ac-storage")}catch(r){}var s=t("@marcom/ac-event-emitter-micro").EventEmitterMicro,o=t("mustache"),a=t("Base64"),c=t("./cookie.js"),l="ac-store-cache",u={items:t("../mustache/items.mustache")},h=function(t,e){this.message=t,this.type=e,this.name="AcStoreError",this.stack=(new Error).stack};h.prototype=new Error,h.Types={BAD_JSON_RESPONSE:0,MISSING_API_ADD_TO_BAG:1,MISSING_API_FLYOUT:2,ITEM_NOT_ADDED:3}

Chrome Cache Entry: 253

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 168300, version 1.0
Category:	downloaded
Size (bytes):	168300
Entropy (8bit):	7.998603864544415
Encrypted:	true
SSDEEP:	3072:tuPtX+Wvg0f+QWknZf76gNucIp5C9gzl/+wCiYarUFC/DPGk9QX7bbJVBqPP:Cj+UnZ+g0cuzlhy0DL9m7fa
MD5:	96A72B57264B6EB5105F4869A2B4C4BA
SHA1:	738A62B76EC28DB64C4E03A3DB93FE6501EA47B3
SHA-256:	43E650A23426E937FE6CEF6B3AE53E3DE57D4A90BFD5EF585E11458A44229F50
SHA-512:	52A7A5B102F2010B743C231C0A238AA6396D5AC6AE04A7CDCFB4FFAA16DB14BB1CDF9FB16CC27CF5B193CC891E27AC6BE158AD8FBE048AA65CBEE3E93B854189
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v1/sf-pro-text_medium.woff2
Preview:	wOF2.......l..........................................N.`H...B..r..b.....(....6.$.....$.. ?meta.{..T. ..G8.t[n....>...f..Z....S.$.>-....e.....V.....4.........r.....,t....q^t...............7..of...%.._.+".Tk....;=Aa..yr.......R.x.c...uP...Q..R.#.)..NA...:..S.t1I....9...m...Sy$.j.......N.bY._..yv+...j..t..H......&1V]...V(:.......m.3.....7..k.C]......L..Kj.5..Q<.....GL.E7t...0e...'.q....&X....K.a._R..'..a!F.-.)....T..il.f.Sh.](.....;.I\...^....E`....~.=..o..q.../L.G.i.$..{.:D.7..^k3P3.k.j.5.LEA.._....V...........b'...<..]........~..M. ..4vc.v...vnE.."........".3N)......?.2...-..8....X.&=.T...!.....e........r....c..R...F.."4.IY.gW...~#&x.+o...^. b..>.....-.tI0......d.G~d]g.."..H.2.3.............\.0.Q.4.M.R2C5F..GZ..jI.......=...).A...Q]....x..[.K.E.V..?C>{.....N.M.Vc.......w....... ]p.8.V.bB.1..+f#.G9.y...../.C4....M...7@..'&.>Px...O...Ew.`...K.Q_.. .h-......Ph... Rya.TB...B..W..<..<@.v.R......F"@..@..%....5.wG.v.).RwU{?..\|....:%c...j

Chrome Cache Entry: 254

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 255

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (28965)
Category:	downloaded
Size (bytes):	285623
Entropy (8bit):	5.388109149443547
Encrypted:	false
SSDEEP:	6144:3jq53bMK8ei9UnZ7ZsiW0rfaLeqnILvKhTVcPQXBRC2ZxX12wwYhD4RxBgEVMSKL:3uJbM/MZ7ZK6qiKxZZ1HZ
MD5:	53A7A6669D95CB3397B26751EB7C51C4
SHA1:	CD3C5C6FA6937FF2D6DB64E0D51E5DB693BF8D36
SHA-256:	F569B9048466EB7C8FCA19901D92D8173467341CEBF4B4122149EDB9C9CDB235
SHA-512:	83E79E7CF7EA876EECA5E98558DBDAC6208F9F0E7979049421DA8DEDCA01C9D673832AB05CB06C3ECB37D07144AFBB795CB2EE41E231340A64AFB1A4F6E4D4FC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/scripts/packager-20210806A.launch-20220913B-prod.js
Preview:	//LAUNCH-VERSION: packager-20210806A.launch-20220913B-prod..(()=>{"use strict";var e={};function t(e,t){const i=";domain=.apple.com;path=/;expires="+new Date(0).toUTCString(),n=["acs_path","clk_pev","s_vi","mbox","s_sq","s_intcpm","s_cc","s_getNewRepeat","s_nr","s_ppv","s_orientation","s_lv","s_ppvl","s_AVT","s_vnum","s_fid","s_pathLength"];function r(e){return new RegExp(e+"=([^;]+)")}let a,o,s,l;for(a=0,o=n.length;a<o;a++)try{s=r(n[a]).exec(e),s[1].length>0&&(e=n[a]+"="+s[1]+";domain=.apple.com;path=/")}catch(e){}if(t)for(a=0,o=t.length;a<o;a++){l=r("("+t[a]+")").exec(e);try{e=l[1]+"=null"+i}catch(e){}}t&&!t.includes("s_vi")&&t.push("s_vi"),setTimeout((function(){window.launchClearCookieTimeout(e,t)}),18e5)}e.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),e.g.fixLocationPath=function(e){return e.replace(/(\.\.)+/g,"").replace(/([?#[\]@!$&'()+,;=%].)$/,"").replace(/[^A

Chrome Cache Entry: 256

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 9552, version 1.0
Category:	downloaded
Size (bytes):	9552
Entropy (8bit):	7.934254900729429
Encrypted:	false
SSDEEP:	192:fXRoWcf2Ly781d42jQQGoAdlFHNaXAjm6ztLo2Mj+uxIo4+2cWidi/6gBc:ZoWcpI3423GoAdrHowj39MjsigiM/A
MD5:	E9E7624727BA14678B9A71B6F90745E3
SHA1:	0F0B7625CD06387C601F1632B0F69719B920F68A
SHA-256:	6DE3580FDEACE0FF74927B2449E34587DD0B2A03C7711CF0087925E25429EFE3
SHA-512:	6093268C146DD14DFADF6C092D53DB3989AF0BCBAE012579C90E9C7AA64A00496E66BA1A4423F10AB0BEA805448170D95C17296AE030DDFA32ACA9062FBC418C
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/bin/cb3432457731/dist/assets/shared-icons.woff
Preview:	wOFF......%P......Ah........................FFTM...l.........9..GDEF.............'.=OS/2.......J...`@.]Ncmap.......B...B....cvt ...4.......".d..fpgm...H............gasp................glyf.......h..+..6.0head..!`...0...6....hhea..!.... ...$.Y.Dhmtx..!....{....e...loca..",...p...p/1:&maxp..".... ... ....name.."....?...aw.[.post..#........0.x..prep..$....}........x.c```d............h.Wk.}..x.c`d``..b1 fb`.B3 f.......ex.c`a\|.8......1.....J.e.dha``b`ef.....! .5...#.G.....0.1.a...3")Q``..g.....x.c```f.`..F.......\|... ...@.G....$....LP...l.0&.#..`b@.......u.....x.c`..<..x..2....B..x..V.s.F..\|$NB.....X.q..+.R..L..e...Z.J+.Nz..2.....3.7..~oe.@.v.i&....}...P......h=3f.Z4.s/..........)........}.....d.o.......Dt.PF....m............^ ...l..-AUF.0.IJ......J....1.y;.0....l..v..M2Zg..YQ.....0.d...0t(.....c......Kc..!..C9%a..&.}W.I...8.;.-...DO.pw../.. j[.v.....;..,vj....q..72ih...D...Sf.....\|.q%..)..,g....6..)Q].YP..)...=...z9...-f.&x.8.~O...)..h..`..J..e\OUL..:-.-.z....(.P.j2..

Chrome Cache Entry: 257

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	476
Entropy (8bit):	4.822658001910672
Encrypted:	false
SSDEEP:	12:Y239WW/1Gg2rwSUb8WCULbmaUL1NAULV88pUf5bErS:YaRl2EgWnmpNnFO5I+
MD5:	8EF4B92D1963E76D87C230CB022581B4
SHA1:	0F478DD0CB80CBFB1834C23321D4FBD21586C255
SHA-256:	B992844FAC60940EA495671CE077FD461DB98AA7CF4E077212D1ECAA941612D2
SHA-512:	4B24274F4EFBDB2BC56BE16F2B1EE3E36844655C32710337EC52B073DCD9EC62B87C5D9E488DE1407006D5CD754AA35E8DACB6A3B740E506D02E944FCE448EE8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/search-services/suggestions/defaultlinks/?src=globalnav&locale=en_US
Preview:	{"id":"Aote09l8Szuabarro7vdkw","results":[{"sectionName":"quickLinks","sectionResults":[{"label":"Find a Store","url":"https://www.apple.com/retail/"},{"label":"Apple Vision Pro","url":"https://www.apple.com/apple-vision-pro/"},{"label":"AirPods","url":"https://www.apple.com/airpods/"},{"label":"AirTag","url":"https://www.apple.com/airtag/"},{"label":"Apple Trade In","url":"https://www.apple.com/us/shop/goto/trade_in"}]},{"sectionName":"suggestions","sectionResults":[]}]}

Chrome Cache Entry: 258

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	dropped
Size (bytes):	159670
Entropy (8bit):	5.581906439638287
Encrypted:	false
SSDEEP:	1536:PnU1vlaLwQhFt0XvgXtYQpEdYhRYRApbQNyvVzdPrTKUKdu1eSs1Q6EbIsLHV0QG:sJbQyGmRqJIv7ElnG
MD5:	DACF3BF4ADF42A1965C33A55253687ED
SHA1:	3DC670CA94708976EDC18587096C3A4B3077B5AE
SHA-256:	A23EA48F42EDD03E41D2D3E75393B2D4717AD6E215887D6C3C334BBBF93AD238
SHA-512:	B9D1F8AEF1A5435CC207D64D6A4F381BF7C4EDB2164B39915CF151BB30D2810FB99EBC77E3B3C8FE3535066758658C02EE17400FFE44C7A792D8915175C4EC76
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 259

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 205, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	68036
Entropy (8bit):	7.992416269719688
Encrypted:	true
SSDEEP:	1536:c5LgkD5UhBFCOyXo2mblid0zuI7M5J5Zf2:c5LvD+hBQOyYZlvuI7M5J5V2
MD5:	52DA2BFB2F521C7B226CBE7C2BA3F01F
SHA1:	7FC0721EE21A7A22643E0E0D39BE1E670F0590AC
SHA-256:	C347366E5FC76ED933855C185A9A0B1A26DE9B5CD4CB1B50E5140C05CFF6FBDF
SHA-512:	6E664277B24046758EFB3B1CDC7AB7D482CF41D7B85915F2E7997F51A39C49BC3AD7AD0A872A3311485E2BE60174C2F5F3B00842AB4996BE38D836D116572A6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i........................................................n.h..@.IDATx..}....~m...N.)...)!@B...d.A`L.ar0.......y..m.`.l... .".....( .s.N.N..6...z.gggg..N...].o.{......:w.H......#.^...8.cp.8p.J<.....G...!n..'....\|{........d.........-_.....b..U........+............0..iu..x<......K..?..d.,.SJ...\...Sd....3.O..W.Z.......e.....x.x...+..ON.L._K."<..l...6..sD.8...@.^.z..>;?.yT.?JE.......s.....\.;.S\\\|.N....JqH...R.L."...E...Z[[...$........[<..<..Y..pL...M(++....`...j....{}=..[.....%..b...z.Z.6.Rv..;j..T.D.......FjU.^.8..h.<.T.a.M.i."2e_.\.QrI.F..y.{N....d..$.....l.X./.G..L.uE................h....{.............`..@.%d...K.O.A.G....m...$..I.E:...nw.K...$..p._..q..o~..;.<.b......[$.#F.G..@B.L.%....!....b.f{....r..g...Eb}b.y......._v...w&.=H.....d...\.P.o",..qH......;d{.GJ....d.NV.Qy..g2F.Z4..[\|...Kvn.../..g..B=......-[...Hj...`....W.....yw.O4q.o...G ....\|.Q.\|.Q...zg.=.5...k....

Chrome Cache Entry: 260

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 231048, version 1.0
Category:	downloaded
Size (bytes):	231048
Entropy (8bit):	7.998861039547291
Encrypted:	true
SSDEEP:	6144:f0qlANLlOdpD0F3z8qPvw5Y6TniomwkNaTaaZv:fLlycneoOvw5Y+iYkkTai
MD5:	01AE716A31EB383E1DF472E09888379C
SHA1:	9480B4273E241238E688FADD8A6E854B4236B08D
SHA-256:	39E23831B68995DBE602A60FAA248BE99E52B71730972DDB53378EBFC40A3A4F
SHA-512:	525488164554300677CA4C802950B66FEAF8C07B9BCF510C871255F8DCA6D848291BC9A17B3B6D6A7F019EF4365092E20B7E080180BBBED5797F28BFED2C02D0
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2
Preview:	wOF2..............................................$..f.`...B..l..b........Z.6.$..r..x.. ?meta.$..`. ..k[.._.w{...^.....T.d.....@.C...h..V%8....Dbm6$...A.T?...J...3@...H.1.t...\.....................M~D:.7.w3.{E.....H...E.QL05......N......:...H.L6..\|!JP..xbrj....{...".......&\.+R$sJ.........."d.!......e..(.DWj..k.u....m.UvU,c.Ek.8._..D....4..!..r.U&..$m[.7...EE .l..^.m.....%x...N1evI....$...I..<7.+.cz._.>.A.hjz...KF..63...Z..U.3..t..`.?.h....sL..u....)..P.[..=.V.Blh..O.%v.Y.q..@X.S58.....1.......G.....V._w.".#.8.\U...E.. v8...Ng.C~.]f.\|....9K..V..("...['.f...c..y.yiq.Er9.VH.eK....s..#\|^....y.5$WJ.....W..x..c..F.N^3..NL....Y....pbt.E..u[.h..zXt...(T.Z.B.N.#Q..)......M.'B&.^0xc.e~..@...r.kV0/..$..e...!...$}..}&....B..l/..d.c.[.2..6..V!...-w........v..?...%.w...<..L'.}.lbY..}......O...2qAW!..wDD.gBtO>.\].%Iun..gx...V!\........L.=.#1.M..N.~.>......O...*bw....H........_.....".3.....v...(Jq.........8.._h...o.Q...D....K.....A..~.$....BW...l...r

Chrome Cache Entry: 261

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12505)
Category:	dropped
Size (bytes):	13729
Entropy (8bit):	5.498642029507824
Encrypted:	false
SSDEEP:	192:7wI0dSohLI/vnpiTAvJu3CMS1lqjjk3/cGtjVQf3Wi83WO0q:n0dv+/PCA8Clqi/cRf3WiWj0q
MD5:	E6CA40918AC2AFF1C7DB95190691DF43
SHA1:	678831A3FE5460C97616AD0222B9E6A62F0416A0
SHA-256:	CF988504C0358A4646994323D302F0F61E1000BC86CA066502BECA562E18A04E
SHA-512:	F968040E03059EE8049F3D6B2AFAADEE7D17C8C8735AFDCD9259FB65FB4E8DDD111100F226067D09D803070FE6297E0592E893B77C2F07CD39AE9B72C943A04A
Malicious:	false
Reputation:	low
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};return e[o].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=860)}({860:function(e,n,t){t(861),t(862),t(863),e.exports=t(864)},861:function(e,n){(function

Chrome Cache Entry: 262

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3775
Entropy (8bit):	7.933892218866822
Encrypted:	false
SSDEEP:	96:pgn79kpWHHul8WtsiREv3vhputZaWWmYCfRbmgM7soc:pfp8Ol8UEPvhputZqCftmP7c
MD5:	326D20EADAD1A744B0AD8BDDDE18F987
SHA1:	7C29E96615B8444F9C9D8D3E2B2BFA0FDAD84EB8
SHA-256:	27A062E1F7C1F84BD52495DB51E4DE6E8FC9D95396B9EA40A454F158992F61BB
SHA-512:	E01FCA8E789198E884C570E3BF4810CE2B1FC38E727DAF01278C89139614F94678D2C25AD20E85349AC5F563E8FA72DA98D65DBC935FEFDA864BFD5FB6553637
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............IDATx^.1K#A..3.u....La+h!..~.I.O`..KX..Z[J.BH..p.wEP..Ab..R.E.Y!k....If......K..?..b...dV.2..UJEb\b....@.I.. ..#.q."y.HDb.....G..?rM..R......8.R^..5V..iY.......h..+.........Y.d....z..z....A.p.....3.$S.Y.l.....S.n.H.B@.$W.1..0sK.puWH...I..H?;...t....{.t1.3l........3..]yVb.x.Y..>$K$$^...i'..!...^U...H7U.(N...!6J.zs..6...&.}u2N,...2y.(.l.0.\|R..GD.c..........^.....s l97..4..h..... !_..d..f.....NK.....C...8....'.._}l..c.o........>DH ENl..^.5..........1c.v....:.i..n.H+..(....5U+....<......%B.....B .)...Z.JB.. >.F!@.!8......a...3s?...wo.{.....8X.k....s.Yk.u.N...]...AP.?U......._}.60y.F..pM_\|....7ux...V..]....U2....]f....+.#...._UP...b..bR.`f(...%;...9..>...m]....d\|.......o..o.0...X..]=Qw`....,.D.,+..A.-=.../.......<R....rWX>D.j.:....^4..'....C.xg..6QL{.qk...E8_.....'.......:.N.."...n....ydx..L.}......Q6..\..H.;-.U.s..w.xi...../.e...3..@.F....:.9...../.Zs..00.$.@B3. ..V.A......p.C.....9.%......@P....A...'...J..+b....

Chrome Cache Entry: 263

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	dropped
Size (bytes):	403005
Entropy (8bit):	5.385739809537511
Encrypted:	false
SSDEEP:	3072:Frt9Ou4cpNxMRPAVh2qwiq/lbYdSFd5wHudHucUDfdXT:pXFyqXq/KdS1S1D
MD5:	15F2817AFEF61C6122524F9B4653B7D0
SHA1:	E51B5F89BF1E8572C52B4EFC1AFCEC9C2A2AD6BC
SHA-256:	6462C6ADDF48E89BCC4653019FD5FDB8B632D57E984EC983629392E69A6AEEC0
SHA-512:	B1CF07F7460B4EF9EB11A9FF58F64960521CDAF12B54AB31A7190777D6C2491900922488CECB424B66B5D4C8611E4A4845442070C43DF7F28DD06FF6359B7BD4
Malicious:	false
Reputation:	low
Preview:	/! For license information please see home-e917f8dc10ca3ca76ff5.js.LICENSE.txt /.window.webpackChunk_idms_private_appleauth_web_sa&&delete window.webpackChunk_idms_private_appleauth_web_sa,function(){var e,t,n={8054:function(e,t,n){"use strict";n.d(t,{Kq:function(){return E},HY:function(){return M},Eu:function(){return q},VP:function(){return $},$V:function(){return K},LU:function(){return qe}});var r=n(1701),o=n(4747),i=n(4787);let a=function(e){e()};const u=()=>a;var s=n(6166);const c=Symbol.for("react-redux-context"),l="undefined"!=typeof globalThis?globalThis:{};function f(){var e;if(!s.createContext)return{};const t=null!=(e=l[c])?e:l[c]=new Map;let n=t.get(s.createContext);return n\|\|(n=s.createContext(null),t.set(s.createContext,n)),n}const d=f();function p(e=d){return function(){return(0,s.useContext)(e)}}const v=p();let h=()=>{throw new Error("uSES not initialized!")};const y=(e,t)=>e===t;function m(e=d){const t=e===d?v:p(e);return function(e,n={}){const{equalityFn:r=y,stabil

Chrome Cache Entry: 264

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45262)
Category:	downloaded
Size (bytes):	45448
Entropy (8bit):	4.991873929312288
Encrypted:	false
SSDEEP:	768:pS7p4W44vR3b8uuXTxXIXcave1vee/YNVwA1NAGCR//f5TTCE6/iSphWhO7E9Z85:pS7p4W44vR3b8uuXTxXIXcave1vee/YT
MD5:	7FB24D229E183AB411ED7662850CE5A0
SHA1:	AB45D979CF4185CA6B49BA7BCEBD7C0EA7A52F1A
SHA-256:	834F65E861D9E517777F27EBC9BBD2A2FDB291C9D2D913D03E8BAD40600DA99A
SHA-512:	8F5150BE52C163BC58AD27B4AB52DD2514AEEF9AB1D138C58C9F23EE702600637C0C6C06E8866718A281AD9A6B42514559BAB8C25C1936D9517FE9E085027ADE
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalfooter/7/en_US/styles/ac-globalfooter.built.css
Preview:	@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:100;src:local("."),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:200;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:300;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../assets/ac-f

Chrome Cache Entry: 265

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8337
Entropy (8bit):	4.234901560641787
Encrypted:	false
SSDEEP:	192:x9RqnHMECMtU3MAMv5oMEEBEX33Ir3+E18g5ZMZMF5dLGjm3o3V5SUT9N:x9RqnHMECMtU3MAMv5oMEEBEX33Ir3Lu
MD5:	7AC8E3FC72C41AF2F48EB38ED55FD7BA
SHA1:	AC861F8CCBD42196A955ABEF3252C31456BEE811
SHA-256:	276618038F0474681826EED2CD12FAE281387DEABA057CEE6DEA869ECB8D292F
SHA-512:	4A125DC15B8B05F484CD15D2C2D2D5E9DC9A24F980FCA3F40C1A9C172AEB360D47667C9C27C2F3CC562489A3FC3E7C1691B06AF28DD26351EF0C7CA591343B24
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/4f72d89d71e9abcc4e37c71fb77fe65b.svg
Preview:	<svg viewBox="0 0 160 160" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><defs><linearGradient x1="100%" y1="100%" x2="50%" y2="50%" id="a"><stop stop-color="#8700FF" offset="0%"/><stop stop-color="#EE00E1" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="0%" y1="100%" x2="50%" y2="50%" id="c"><stop stop-color="#E00" offset="0%"/><stop stop-color="#EE00E1" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="100%" y1="0%" x2="50%" y2="50%" id="d"><stop stop-color="#00B1EE" offset="0%"/><stop stop-color="#00B1EE" stop-opacity="0" offset="100%"/></linearGradient><linearGradient x1="-17.876%" y1="21.021%" x2="48.935%" y2="50%" id="e"><stop stop-color="#FFA456" offset="0%"/><stop stop-color="#FFA456" stop-opacity="0" offset="100%"/></linearGradient><path d="M89.905 152.381a3.81 3.81 0 1 1 0 7.619 3.81 3.81 0 0 1 0-7.619Zm-23.737 2.79a3.81 3.81 0 1 1 7.36 1.973 3.81 3.81 0 0 1-7.36-1.972Zm46.799-5.126a3.81 3.81 0 1 1-7.36 1

Chrome Cache Entry: 266

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	193567
Entropy (8bit):	5.506467371527496
Encrypted:	false
SSDEEP:	3072:svRxj7f264yVOb5cvmKoS4Tc1vmKoSHtjZd9wgq8jWl5fNgwace7CbNgwacJ//Ah:QRxj7f264yVOb5cvmKoS4Tc1vmKoSHtd
MD5:	BBE5E4971E8787C3CA3CE369EED3E731
SHA1:	547D40C5CFB5DE1AC48E918377EA82D5BCAEBB02
SHA-256:	606D44044A4EE370181442D65F2846C44C15F6CEAB8B887A4F64C87791357E30
SHA-512:	9E6ED37995B317EB1B6AC7BB629711B4DAD18214972226838999FFE95AB85F59AC57D5FEA4D5541A51D651C5C1425289DF2FC901E8FE6951A15D3A1DFCBBFDEA
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/support/systemstatus/styles/site.built.css
Preview:	@charset "UTF-8";.html {. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%; }..body {. margin: 0;. padding: 0; }..ul,.ol,.li,.dl,.dt,.dd,.h1,.h2,.h3,.h4,.h5,.h6,.hgroup,.p,.blockquote,.figure,.form,.fieldset,.input,.legend,.pre,.abbr,.button {. margin: 0;. padding: 0; }..pre,.code,.address,.caption,.th,.figcaption {. font-size: 1em;. font-weight: normal;. font-style: normal; }..fieldset,.iframe,.img {. border: 0; }..caption,.th {. text-align: left; }..table {. border-collapse: collapse;. border-spacing: 0; }..article,.aside,.footer,.header,.nav,.main,.section,.summary,.details,.hgroup,.figure,.figcaption {. display: block; }..audio,.canvas,.video,.progress {. display: inline-block;. vertical-align: baseline; }..button {. background: none;. border: 0;. box-sizing: content-box;. color: inherit;. cursor: pointer;. font: inherit;. line-height: inherit;. overflow: visible;. vertical-align: inherit; }. button:disabled {. cursor: default; }..:focus {.

Chrome Cache Entry: 267

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4621)
Category:	downloaded
Size (bytes):	29685
Entropy (8bit):	5.5002113167866185
Encrypted:	false
SSDEEP:	768:QGi7hrUX3hXoqp2UAUUckgeuaiDi5EzblzoN5bc94:Q6hXoTUN6+zbJwD
MD5:	A8443919519C0AABB8805EDE5CDB64D9
SHA1:	17E517BB7EF1ACA6D81852DC473F2458868685E9
SHA-256:	C695DEA15D715E2EB7729AC12C70B1553C564637429946D43CD8F7CD8E4ADF40
SHA-512:	93C6479F8ACFC4ABF1F589E962C904DB04F7B77F82C171B8A356315FC63A177D73626324C30ED5BBB5A969BE0E1A1BDB5DAA4A6B9C70FC01013ADAFA24ABF8AA
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/
Preview:	<!DOCTYPE html><html lang="en-us" data-cw-private-path-prefix="" data-cw-private-build-number="2425Project45" data-cw-private-mastering-number="2425B25"><head><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src blob: 'self' .apple.com .apple-cloudkit.com .cdn-apple.com 'sha256-JFJvxqMr7d0c5kvkhpyFwvNHHhwfiIFw0UaFnTp+u9M=' 'sha256-vY8HZSVmcUbsI8RkfUEVTnl1U2Bz1CJzjgj6Iwu+/AQ=' 'sha256-26W8JbT1vQArZ+8F3eitbNZVzh5WonwHlQl29E4pato=' 'sha256-svdOQzSg9T05h6Q3mC/8FCU+2bG3vWTBwdPa+czq+YY=' 'sha256-HenvlWVrAISuwfRzCus0xoCe+m4/jV6vXViy4FodZC8=' 'sha256-lRaqSyfzcyRaZDbyf9zk3ZsU3HWpfeHMdgqioLyb3K4=' 'sha256-Pehjm3T5Rd/IWK326y6s3vNQ6aE9SViYeFnKDyN9Uo8='; style-src 'self' data: .apple.com 'unsafe-inline'; default-src 'none'; child-src blob: 'self'; connect-src blob: 'self' data: .icloud.com .icloud.com.cn .apple.com .cdn-apple.com .icloud-content.com .icloud-content.com.cn .apple-mapkit.com; form-action 'self' .apple.com .icloud.com .icloud

Chrome Cache Entry: 268

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 153608, version 1.0
Category:	downloaded
Size (bytes):	153608
Entropy (8bit):	7.998521035575021
Encrypted:	true
SSDEEP:	3072:quckPmachlSNwn9JT9jZocA1n4hJK5Qi+D4T8rJtViop28OtNKLWVcOQoh6fL:0cwLnT9jZw1KC+Dtt5pYoutQowT
MD5:	5956C8D122E852DC9D4D412C26D29DFD
SHA1:	08653F33ED14E02161F27FD6F2FD813E5E39391E
SHA-256:	94DA02C4880017B0B78F5250D29C811777EC114427A0B2714AB695EB209CDAE1
SHA-512:	AD551377C29EC1B2696A5B0784B89A3695B6CE9AB1108A2D71FB957E5888FD90E0F483228D68EF90D2337F8C877A1EA2C8D2056E6FC13C5A4F7D63684B1EF46D
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v1/sf-pro-display_medium.woff2
Preview:	wOF2......X........D..W............................$....`H......r..b..........6.$..X..\.. ?meta.x..&. ..G8.t[%...Je..c..`..$....x.vU\|..>;..!................o....sC(....kQ........../....E~..+6,1.KHL%.?...9.C......f..!GU'.!....0....t..p.`.g...$.c.$..%Q....Q....k...[\q..}YW..F.n`.AP9.VL...\H.o.8.n.........(..?..J..JF.%/..K..m.y.[...Y..<...qk.J.9O...,].......=...zz.=...)5j%..X..V.tp.m..vO..w\| haPJ..wj...Wrw.-.......(......1..<.e.},[..<k..4.fT..A..NojL.#.C...UdR.~/...~C.9.J...@.....&<.........w..H.......+z.W`+...azB.Q....G.......e&R........?..%y...\|.3...Gf..~'.z'..$..@..T.@......^.YH..D....a2)E..'T..R.A..QmjH..aX.6...]#.c....&Ke.......h.....?..PM...T.Mk..M...Y....[....t<.A.I0.=.L.3...&...E..#Uc.a.Q..?."J..9....".(DiE.,..@6dg...R.k&A..\|......I`y'V3...P1.....{9.v.).q......o......`YG=.X.WfMA..T...T..-..cY...6\q...R.........u......}..........#90D..6e&bb0!.F...../?#k..`.b...1#1*AL...A.0@TP.EL..Y=u....^..N.67......+8.{g.(..V..3@sk.v.......`

Chrome Cache Entry: 269

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 220536, version 1.0
Category:	downloaded
Size (bytes):	220536
Entropy (8bit):	7.99894522755539
Encrypted:	true
SSDEEP:	3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q
MD5:	059D2EDEB663A16DE959975D5ED21DB8
SHA1:	3674A0E6FBC086CF109A1B192EF5016D328FDFA5
SHA-256:	3231B77EE2775DADBAA76DE85F95763976AFF1091F63A67FA553D727A6EDB933
SHA-512:	FC26A8FB8B2EE58FE21FB45A1812F6CCCCFC5F8ED55B4ACD49657C9E4DE33FBFE0171C01A7A8FD13FC1E4090CC5D003C760054029F76AF6004A0DD3462112CEC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
Preview:	wOF2......]x..........]............................D..f.`...B..l..b.....\..H.6.$..r..x.. ?meta. ..8. ..k[8^...D.OK..Q.....)s..n..R...L#09..Mq..}.. ..z...z..E. ....u...............Z....{.....[.I...Y...RKl......4J.a"0.Y^.e...z......V/n2...j..g;...A..d..j..@....w..e...q2......U.qT.c....q.m.#...z.s@... =..X.Y x^b.a.....6M...y3........x....R33.25.H......TZ.z.e..z".kQ....%b.M....0.b.y.oG9Z.V.]g.......X....:...N..J.?.O......,.....3O.. .>.3....a.{.a..T.......M4Zy..K....t..L7XL.G..".^3\....zH.x...d..UD..m~WKS7._.....v#.rq.P..k.-j].C..E.R7s...S.....f.o............'..'.....q..}G..<.8:pO5.k.^3......[P.8.B.s...0a..F.C3a\.$.0f!..!../<....ke.........Z..?..G.D..Q.....S........<..N.]1d........Q_.2.M.._..2..Q[Nm:59E.N&..B......\|"....T..e.}1....>rg....~.~.#Y....A.....x.Fz",}.../.Os...FW...8.A...SzEm........Mu..5..........H7.....v.@Ijw&_@..K\...d.w.'..oQ...M...nc4M.r....".V.......k.9...c.U...(.Z..~..b.6}.K.n..n...a...Q.......0q.P......4S..f2K..`.~/.i....

Chrome Cache Entry: 270

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	13051
Entropy (8bit):	7.882469968715526
Encrypted:	false
SSDEEP:	384:sx3Hl+P5oqnacR+uAdlCWgDRSbPzczJ4T:kl+P5oqnaA+uAdEWg4bPIN4T
MD5:	F7EB42B4E079B6664C87E6497E655B03
SHA1:	4547D8AC1550DC25F15564FE0E4082F52A8EE36C
SHA-256:	68BAEA62F2BA96C88CF2A80059CAD2C735DFEFE0035B02CF9A5A699DFA554F72
SHA-512:	1243236FA889E8448F41B4FD3CAE6C4BC74F2138A99C3F15749B8F8433CF2450E87FBA2A360C6D97920087399F4118DA9329DB4854F0ECAFE9F29D5F87A5329E
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/images@1x.bin
Preview:	.......<svg viewBox="0 0 268.0201416015625 158.116943359375" version="1.1" xmlns="http://www.w3.org/2000/svg">. <g transform="matrix(1 0 0 1 79.49508056640616 114.2884521484375)">. <path d="M46.3867 8.59375C49.2676 8.59375 51.5137 7.4707 53.0762 5.12695L98.7793-65.5762C99.9512-67.334 100.391-68.8965 100.391-70.4102C100.391-74.2676 97.5586-77.0508 93.6035-77.0508C90.8691-77.0508 89.209-76.0742 87.5488-73.4375L46.1914-7.91016L25-34.7656C23.3887-36.7676 21.7285-37.6465 19.3359-37.6465C15.332-37.6465 12.4512-34.8145 12.4512-30.9082C12.4512-29.1992 13.0371-27.5879 14.4531-25.8789L39.7461 5.27344C41.6016 7.56836 43.6523 8.59375 46.3867 8.59375Z" />. </g>.</svg>......t<svg width="66px" height="61px" viewBox="0 0 66 61" xmlns="http://www.w3.org/2000/svg">. <g stroke="none" stroke-width="1">. <g>. <path d="M7.8,61 L58.2,61 C62.9,61 66,57.4827018 66,53.1614498 C66,51.8550247 65.6,50.5485997 64.9,49.3426689 L39.7,3.91927512 C38.3,1.30642504 35.6,0 33,0 C30.4,0 27.7,1.306

Chrome Cache Entry: 271

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	4.765675884187388
Encrypted:	false
SSDEEP:	3:+JdL0EcgtKJRKnmvaEf5AVeMvSSxK+wx8FECxnTXLog4z/85G2AY:+JztiKyf5weMaoK+S8mC1XLOU5b9
MD5:	A995CE7CB1A998673679B6C0B4E346AB
SHA1:	8212F2EAB4920A5B4F67A7C32EA847918818C3EE
SHA-256:	976DAD86563D55F8AF1EDA1DBF885BEA55FFD0984F62817CB0359268254C692C
SHA-512:	8EF917FC43490356D105A14BF2588658069B244CE3A8F3D10E57A15ACA1FD569ADA60F5A3200CC0AEF9D98B27BE08C7F4A5F95FB94D5C195DBBE26A189DF4D9D
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/iforgot/static/cssj/N680915563/iForgotWeb.css
Preview:	.two-column-layout__column-content{}.hsa2-sk7{display:none}.hsa2-sk7--isReactStep{display:block}.idms-modal .idms-modal-dialog .button-group:not(.full-width){flex-direction:row-reverse}

Chrome Cache Entry: 272

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	dropped
Size (bytes):	2639821
Entropy (8bit):	5.48048116225346
Encrypted:	false
SSDEEP:	49152:y6x77AoKWQmDhZf/R7Tb1qW+8uyRWc6eyVEuHfWvY7AMgk1TE86rzqK0a5eMhqsa:yW0LhfMh4
MD5:	BA1D74D08046597782DE877BE89E4583
SHA1:	94D659C204C6A4F5F21C74F0133D4E91D1F37868
SHA-256:	F2D8DF5852352452D9F8EFA902BC56B743A0058462F9F72AC9688DE259FC0AAB
SHA-512:	D889208B05433B1E7A091D63B88594F3B30732B1013C4A1EAA0E65017B22F6F00E21DFB12AC72756131D46DCAE9EA1B675388C610F211791A0476BCEA08799C8
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 273

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.081903144584382
Encrypted:	false
SSDEEP:	12:sumkJW2E+eR63cCRa4hQaOMQJxGGGGGGGGGGGGBAyjctlrszXkl6wTQ05ljX2zIa:sumD2E+/3cCTFlrwXs647jX2pG/YgkLP
MD5:	AF050CA08B2FCF65ED89C9C4C4DB68CA
SHA1:	A16AB35F73FDF3EFF6843BDF96AD337231717C6C
SHA-256:	1FC96B235BBB7AD450A3D7B0CB1632F06F7A174EFE637005C4A8FC4101352676
SHA-512:	97992D5BB347022DF9723D9189E8D7C4196ADE491BA83CF7C796E5F5815C8BCD4335650FCDD02F5A5C0FC93D9B4E61E4DD38CA02BE72C86795E0025404D176A6
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................~~~.yyy.................................................................................................................aaa.iii.cccpaaa.bbb{ggg3ppp.{{{.jjj.ccc[ccc.ccc.fff6........................................................................fff.jjj.aaa.^^^.^^^.^^^.___.aaa.bbb.```.___.^^^.^^^.___.fffKKKK.vvv.........................................................ooo.www.ccc.__

Chrome Cache Entry: 274

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh, Copyright (c) 2018, Gurpreet Kaur Balgir1shared-iconsiconsFontForge 2.0 : shared-icons : 23-7-20
Category:	downloaded
Size (bytes):	16672
Entropy (8bit):	6.310786385029788
Encrypted:	false
SSDEEP:	384:1E4VocGSRB1aWsGHjQjlIhNvkiiNfLbV91aA7YkLK:1DZvaWs1ja1kiefLLoA7BLK
MD5:	E48C756B6037D6D7EC88E3E75F2F0E83
SHA1:	7822FDF8E0E11F419930F413E2B9766284543EB5
SHA-256:	7B28292CD7FB89CAF6051AD0EB4E464C1EA4F83062842AA95CC697152A135D48
SHA-512:	04AD2C880DE12140FDFBF1B2E863724098A2F335683B1089305E405BF5C9C8D38249B7F111779DE9C716B93DA0D5E1A3BD34B85769C1E05DB32C7D878588228D
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/bin/cb3537100279/dist/assets/shared-icons.ttf
Preview:	...........pFFTM.9..........OS/2@.]N.......`cmap.......x...Bcvt .d....4...."fpgm......4.....gasp......4.....glyf.6.0......+.head.s.........6hhea.Y.D.......$hmtxe...........loca/1:%../....pmaxp......04... name..q...0T...Lpost....2....0prep......@..............A.......{.......{.............L.f...G.L.f....................................PfEd.....4.........Z............... .....................<........... ...........4.................................................................................................................................................................................................................................................................................................U.....*@'.......a.....U....Y.....M..............+3.3.'3.#..wff.U....3...............7.S.c.s.v@sE....F0)%......S.....J........c.........c..........a.........c.....W....[.....OedVTmjdser^[TcVcRPIGDB;9.....'#'!...+7.3254'&54632..&#".......#"'7&5...#'&'#....#73...36?.3.#7.3254'&54632..&#"......

Chrome Cache Entry: 275

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65025)
Category:	downloaded
Size (bytes):	930163
Entropy (8bit):	5.426756056876735
Encrypted:	false
SSDEEP:	6144:Kgefaq/OoNPCQLMYxhKYS+BmCqjma3PzK9NiEa4XTiT5EKlmukNMpvXjTeyPE:Kge/OoNPxxhOPnFvvBc
MD5:	D3D1CF1A1DBE03AF725D767ECB280600
SHA1:	1367AFC16A4141890BDD643B192574F6F905497D
SHA-256:	700725C6974D9B4C1923549312B03E7EFCE718D08B08DA7D17F4E06E0A4A4564
SHA-512:	60EBD7DFA1CBDC598851F6F2317F518E9DEB60C93B82141196C35AEFB1CEEA90C908FD75901F24D1AC5F280E66C664663680CDD554EA532BEAE3C5AB6FAF1172
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2425Project45/en-us/4.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2425Project45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.po

Chrome Cache Entry: 276

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	96474
Entropy (8bit):	5.159548388268102
Encrypted:	false
SSDEEP:	1536:LybJYQY9PxX7cOOJzR3m32oDeMvZxSELIFzpBpJXLM0p5VOkQe1SIO/BIMK91PpW:LybJYQY9PxX7cOOJzR3m32oDeMvZxSEF
MD5:	003DE04CB9FA854BD69806F54EF471D0
SHA1:	D8C62248B4810DAF11C71C82332C8F954C49F7F3
SHA-256:	D1EE22C2F6AE161D8AD110BECEBB5459D251E8258B58E885F2CDF51B8B7E83F4
SHA-512:	D901C04167EDC6B47CCB6D54F09DD191B2467699A67C42940F7F4E7F27C9F75DBF449DE6A673A6B40CEA14D06B86A837A7C44D70EE00CD8302F06529D779864E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/ac/globalnav/4/en_US/styles/ac-globalnav.built.css
Preview:	@-webkit-keyframes ac-gn-header-slideup-searchshow{0%{-webkit-transform:none;transform:none}100%{-webkit-transform:translateY(-32px);transform:translateY(-32px)}}@keyframes ac-gn-header-slideup-searchshow{0%{-webkit-transform:none;transform:none}100%{-webkit-transform:translateY(-32px);transform:translateY(-32px)}}#ac-gn-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1;x-content:"large"}#ac-gn-viewport-emitter::before{content:"large"}@media only screen and (max-width: 1023px){#ac-gn-viewport-emitter{x-content:"medium"}#ac-gn-viewport-emitter::before{content:"medium"}}@media only screen and (max-width: 767px){#ac-gn-viewport-emitter{x-content:"small"}#ac-gn-viewport-emitter::before{content:"small"}}@media only screen and (max-width: 419px){#ac-gn-viewport-emitter{x-content:"xsmall"}#ac-gn-viewport-emitter::before{content:"xsmall"}}html,body{margin:0;padding:0}#ac-globalnav,#ac-gn-segmentbar{font-weight:normal;-webkit-text-size

Chrome Cache Entry: 277

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1621)
Category:	dropped
Size (bytes):	1622
Entropy (8bit):	5.190331536255181
Encrypted:	false
SSDEEP:	24:c4hmMd7biG4WL7f5iQVGtWjxwY096IOOr9zxDhOSDPGxJqnJkJGa94c6DmiVKob7:fhTBjf5ZVGMjf1olqxJqJkTiNZ/ANXlM
MD5:	CA38A87A6C6AEEDCB2E175F99CD7C6FB
SHA1:	E0B51B38E39473D63F32AC7F17AFE1403711E2A6
SHA-256:	0BFF01B41B8CB4029163BB35826202FA274A6E27570D61AAA39232FC5158275E
SHA-512:	AEF96E158B9D853C9B83B7E0075103838C829987CB25F7BE8D79B2B6858EB1285BEC71FAB05DC1722B1554002D79E9B5510AF9989D29D2A0C6160C740A3A44CA
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var n,e={},r={};function t(n){var o=r[n];if(void 0!==o)return o.exports;var i=r[n]={exports:{}};return e[n].call(i.exports,i,i.exports,t),i.exports}t.m=e,t.amdO={},n=[],t.O=function(e,r,o,i){if(!r){var u=1/0;for(l=0;l<n.length;l++){r=n[l][0],o=n[l][1],i=n[l][2];for(var f=!0,a=0;a<r.length;a++)(!1&i\|\|u>=i)&&Object.keys(t.O).every((function(n){return t.O[n](r[a])}))?r.splice(a--,1):(f=!1,i<u&&(u=i));if(f){n.splice(l--,1);var c=o();void 0!==c&&(e=c)}}return e}i=i\|\|0;for(var l=n.length;l>0&&n[l-1][2]>i;l--)n[l]=n[l-1];n[l]=[r,o,i]},t.n=function(n){var e=n&&n.__esModule?function(){return n.default}:function(){return n};return t.d(e,{a:e}),e},t.d=function(n,e){for(var r in e)t.o(e,r)&&!t.o(n,r)&&Object.defineProperty(n,r,{enumerable:!0,get:e[r]})},t.g=function(){if("object"==typeof globalThis)return globalThis;try{return this\|\|new Function("return this")()}catch(n){if("object"==typeof window)return window}}(),t.o=function(n,e){return Object.prototype.hasOwnProperty.c

Chrome Cache Entry: 278

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	22382
Entropy (8bit):	1.8139780344520928
Encrypted:	false
SSDEEP:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
MD5:	310FD67D702063937E39C17B2060067F
SHA1:	503B0C1CD35674B8E58B6B35431F381F1417A1A5
SHA-256:	2EE7CA9B189DF54D7CCDD064D75D0143A8229BAE9BDB69F37105E59F433C0A8B
SHA-512:	D523F0CAA326B7842CB2A0D13D95E2D4CF432FC7A6B12FA503B7175AA188A848C9AFF631685BFA2D2D3609B7FCC6AB398FD9CC95ECAE436FFA9EA2D55550E616
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .........@@.... .(B..F...(....... ..... ................................................................................................................z...t...$.......S......./...............................................................4...........................t....................................................................................................h..................._.........................................K...........................................................I...............................................................................................................................................................................................*.......................)..................................................................P..................m...............................................5...'..."...o...,...6.................................................../.........................................

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:50:45.873135090 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 7, 2024 16:50:55.485960960 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 7, 2024 16:50:56.198692083 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.198749065 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.198802948 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.198998928 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.199007034 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.199027061 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.199031115 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.199165106 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.199410915 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.199420929 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.681716919 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.682074070 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.682090044 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.683315992 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.683406115 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.684022903 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.684437990 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.684508085 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.684618950 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.684648991 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.684849024 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.684859991 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.686295986 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.686359882 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.686636925 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.686711073 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.731015921 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.731024027 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.777247906 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.808233976 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:56.808484077 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.808860064 CEST	49735	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:50:56.808892012 CEST	443	49735	17.253.144.10	192.168.2.4
Oct 7, 2024 16:50:58.111135006 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:58.111183882 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.111340046 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:58.112363100 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:58.112379074 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.137543917 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.137567997 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.137613058 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.155034065 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.155112982 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.179552078 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:58.179615021 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:58.179682016 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:58.190220118 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:58.190254927 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:58.190344095 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:58.191030025 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:58.191066980 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:58.191817999 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:58.191844940 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:58.761828899 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.762397051 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.762423038 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.763883114 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.763961077 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.765786886 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.765855074 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.811798096 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.811815977 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:50:58.859786034 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:50:58.959372997 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:58.959731102 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:58.959794998 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:58.960916996 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:58.960997105 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:58.973783970 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.974065065 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:58.974080086 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.974651098 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.974714994 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:58.975308895 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:58.975416899 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.041480064 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.041718960 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.041775942 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.042196035 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.042262077 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.042903900 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.042968988 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.313858986 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:59.314019918 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:59.316013098 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.316395998 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.317002058 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.317018032 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.317434072 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.317594051 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.329627991 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:50:59.329665899 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:50:59.330019951 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:50:59.352757931 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:50:59.352778912 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:50:59.358309984 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.358423948 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:59.358457088 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:50:59.358501911 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.358510017 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:50:59.406533003 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:50:59.406941891 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:50:59.589481115 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.589570999 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.589699984 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.624047995 CEST	49746	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.624073982 CEST	443	49746	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.624641895 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.624691963 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.625000000 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.625530005 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:50:59.625541925 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:50:59.961484909 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:00.003690004 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.081614017 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.081624031 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:00.083328009 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:00.083409071 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.191970110 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.192183018 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:00.232685089 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.232697964 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:00.272859097 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:00.495424032 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.533343077 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:00.533364058 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.534029007 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.543226957 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:00.543311119 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.553761959 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:00.595396042 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.871088982 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.871175051 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:00.871231079 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:00.873816967 CEST	49753	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:00.873836040 CEST	443	49753	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:01.466732025 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:01.466828108 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:01.466943979 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:01.477644920 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:01.477679014 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.150300980 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.150435925 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.158011913 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.158052921 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.158405066 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.242954016 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.283407927 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.437191963 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.437360048 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.437479973 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.437818050 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.437843084 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.437859058 CEST	49755	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.437868118 CEST	443	49755	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.501781940 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.501837969 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:02.501908064 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.502788067 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:02.502821922 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.099807024 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.099895000 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.101686954 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.101696968 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.102057934 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.103494883 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.151401997 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.353693008 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.353765011 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.353816032 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.495033026 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.495062113 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:03.495076895 CEST	49763	443	192.168.2.4	2.19.244.127
Oct 7, 2024 16:51:03.495085001 CEST	443	49763	2.19.244.127	192.168.2.4
Oct 7, 2024 16:51:09.419586897 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:09.419636011 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:09.419692993 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:09.422539949 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:09.422550917 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:09.497139931 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 7, 2024 16:51:09.497185946 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 7, 2024 16:51:09.864900112 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:09.865060091 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:09.865225077 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:10.135231972 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.261595011 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.261660099 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.262244940 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.262264967 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.262655020 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.262957096 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.263880014 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.291470051 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.291588068 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.291642904 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.292886972 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.292908907 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.354307890 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.471415043 CEST	49752	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:10.471446991 CEST	443	49752	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:10.649681091 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.649872065 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:10.650096893 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.685647964 CEST	49789	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:10.685740948 CEST	443	49789	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:12.440357924 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:12.440376997 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:12.440661907 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:12.441036940 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:12.441062927 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:12.789273977 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 7, 2024 16:51:12.794989109 CEST	80	49723	88.221.110.91	192.168.2.4
Oct 7, 2024 16:51:12.795042992 CEST	49723	80	192.168.2.4	88.221.110.91
Oct 7, 2024 16:51:13.122627974 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.123162031 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.123182058 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.123716116 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.123780966 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.124722958 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.124773979 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.125468969 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.125550032 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.126188993 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.126197100 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.173017979 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.460556984 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.460644007 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:13.460690022 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.461504936 CEST	49809	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:13.461523056 CEST	443	49809	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:15.790941954 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:15.796247005 CEST	53	53124	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:15.796319008 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:15.798764944 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:15.803772926 CEST	53	53124	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:16.225055933 CEST	53	53124	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:16.234761000 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:16.240009069 CEST	53	53124	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:16.240215063 CEST	53124	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.233450890 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.233522892 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.233618021 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.233896971 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.233930111 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.239665985 CEST	58330	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.244724035 CEST	53	58330	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:17.244808912 CEST	58330	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.244853973 CEST	58330	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.249766111 CEST	53	58330	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:17.710860968 CEST	53	58330	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:17.711232901 CEST	58330	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.716721058 CEST	53	58330	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:17.716818094 CEST	58330	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:17.859571934 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.859836102 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.859857082 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.860225916 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.860544920 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.860686064 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.860690117 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.860775948 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:17.860794067 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:17.902720928 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:18.254395008 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:18.254477024 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:18.254548073 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:18.256037951 CEST	53128	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:18.256062031 CEST	443	53128	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:18.258954048 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.258994102 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.259155989 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.259368896 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.259390116 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.861954927 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.862276077 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.862317085 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.862626076 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.862973928 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.863043070 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:18.863188982 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:18.903403044 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:19.214461088 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:19.214549065 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:19.214597940 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:19.216646910 CEST	58332	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:19.216674089 CEST	443	58332	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:27.268066883 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:51:27.268151999 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:51:27.268199921 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:51:27.510082960 CEST	49736	443	192.168.2.4	17.253.144.10
Oct 7, 2024 16:51:27.510179996 CEST	443	49736	17.253.144.10	192.168.2.4
Oct 7, 2024 16:51:27.867238045 CEST	80	49724	217.20.57.18	192.168.2.4
Oct 7, 2024 16:51:27.867369890 CEST	49724	80	192.168.2.4	217.20.57.18
Oct 7, 2024 16:51:28.088072062 CEST	49724	80	192.168.2.4	217.20.57.18
Oct 7, 2024 16:51:28.288405895 CEST	80	49724	217.20.57.18	192.168.2.4
Oct 7, 2024 16:51:36.323756933 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:36.323837996 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:36.324173927 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:36.331449986 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:36.331490993 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.223676920 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.224236965 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.224272966 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.224642038 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.225903988 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.225967884 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.226793051 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.267414093 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.737097979 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.737166882 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.737371922 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.738064051 CEST	58376	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.738111019 CEST	443	58376	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.738882065 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.738914967 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:37.738971949 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.739377022 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:37.739398003 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.426542044 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.426942110 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:38.426950932 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.427313089 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.427839041 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:38.427900076 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.428066969 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:38.471407890 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.818367004 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.818454027 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:38.818536997 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:38.819360018 CEST	58380	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:51:38.819401979 CEST	443	58380	17.248.209.70	192.168.2.4
Oct 7, 2024 16:51:42.992913961 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:42.992957115 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:42.993035078 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:42.993823051 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:42.993833065 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:43.824846983 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:51:43.824872017 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:51:43.859467030 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:43.859740973 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:43.859766960 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:43.860097885 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:43.860387087 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:43.860454082 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:43.860753059 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:43.860793114 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:43.860830069 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:44.259618998 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:44.259710073 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:44.259779930 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:44.374018908 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:51:44.374020100 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:51:44.374056101 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:51:44.374067068 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:51:44.380417109 CEST	58390	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:51:44.380455017 CEST	443	58390	17.248.209.74	192.168.2.4
Oct 7, 2024 16:51:44.404896975 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:44.404941082 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:44.405003071 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:44.405224085 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:44.405236959 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.102322102 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.102588892 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.102601051 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.102921963 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.103190899 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.103257895 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.103317022 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.146523952 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.146533966 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.566873074 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.566940069 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:45.567207098 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.568025112 CEST	58394	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:51:45.568047047 CEST	443	58394	17.248.209.69	192.168.2.4
Oct 7, 2024 16:51:50.244244099 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.244292021 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:50.244574070 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.244719982 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.244733095 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:50.889605999 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:50.889672041 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.895554066 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.895585060 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:50.895838976 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:50.936064959 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.942677975 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:50.983407021 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040812969 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040836096 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040843964 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040853024 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040872097 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040887117 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.040909052 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.040924072 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.040951967 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.125286102 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.125308037 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.125365973 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.125389099 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.125423908 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.127250910 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.127275944 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.127311945 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.127327919 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.127350092 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.127368927 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.211882114 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.211918116 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.211951971 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.211980104 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.211998940 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.212013006 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.212157011 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.212177038 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.212203979 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.212213039 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.212238073 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.212250948 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.213123083 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.213136911 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.213175058 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.213187933 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.213212967 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.213229895 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.214010000 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.214031935 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.214067936 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.214077950 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.214112043 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.214131117 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.297909021 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.297925949 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.297972918 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.298007965 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.298026085 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.298046112 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.298439980 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.298455954 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.298496962 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.298506021 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.298527956 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.298542023 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.299405098 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299420118 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299462080 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.299473047 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299516916 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.299659014 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299675941 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299799919 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.299808025 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.299844980 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.300463915 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.300478935 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.300525904 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.300534010 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.300570011 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301368952 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.301383972 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.301426888 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.301429033 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301439047 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.301464081 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301493883 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301500082 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.301549911 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301577091 CEST	58406	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.301594973 CEST	443	58406	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.885962963 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.885999918 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.886151075 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.886483908 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.886588097 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.886666059 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.887329102 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.887403965 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.887485981 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.887487888 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.887521029 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.887582064 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888180017 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888204098 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.888446093 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888446093 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888461113 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.888463020 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888504982 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.888571024 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888585091 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.888689041 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888706923 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:51.888818979 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:51.888828039 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.495239973 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.496695995 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.500354052 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.520437002 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.523374081 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.546675920 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.546680927 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.546904087 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.567423105 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.598767996 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.638283968 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.638315916 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.638876915 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.638885021 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.640290976 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.640307903 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.640949011 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.640959024 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.641196012 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.641205072 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.642754078 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.642787933 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.647070885 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.647125959 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.647681952 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.647701025 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.648053885 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.648072004 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.648530960 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.648538113 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.733719110 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.733797073 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.733884096 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.734167099 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.734167099 CEST	58418	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.734184980 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.734200001 CEST	443	58418	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735053062 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735130072 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735440969 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.735692978 CEST	58416	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.735714912 CEST	443	58416	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735863924 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735928059 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735977888 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.735985994 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.735997915 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.736064911 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.737037897 CEST	58417	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.737051964 CEST	443	58417	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738390923 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738414049 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738488913 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.738529921 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738585949 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.738689899 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738737106 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.738873959 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.739653111 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.739686966 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.739712000 CEST	58415	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.739726067 CEST	443	58415	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.739873886 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.739931107 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.740001917 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.740016937 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.740060091 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.740062952 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.740108013 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.743465900 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.743491888 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.743556023 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.744658947 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.744700909 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.744812012 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.744934082 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.744960070 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.745126963 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.745135069 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.745165110 CEST	58414	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.745170116 CEST	443	58414	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.751312971 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.751337051 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.751441002 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.751609087 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.751633883 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.753665924 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.753709078 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.753768921 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.753920078 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.753931046 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.754470110 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.754482031 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.755697012 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.755733013 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:52.755853891 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.756109953 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:52.756119967 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.379715919 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.383188963 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.384123087 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.384258986 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.394767046 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.423471928 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.423500061 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.438774109 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.438810110 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.438810110 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.625327110 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.625349998 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.626368999 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.626375914 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.626874924 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.626884937 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.627701998 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.627710104 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.628463984 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.628494024 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.629261017 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.629267931 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.629837036 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.629846096 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.630625963 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.630630970 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.630873919 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.630902052 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.633032084 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.633045912 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.741285086 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.741365910 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.741780043 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.741957903 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.742158890 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.742208004 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.742223024 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.742676973 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.742727041 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.742947102 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.743423939 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.743473053 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.745440006 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.745496988 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.745542049 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.796694994 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.796703100 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.796715975 CEST	58424	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.796721935 CEST	443	58424	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.796888113 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.796905994 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.796917915 CEST	58428	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.796922922 CEST	443	58428	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.796987057 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.797039032 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.797070026 CEST	58425	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.797086954 CEST	443	58425	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.801996946 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.802006960 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.802006960 CEST	58427	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.802011013 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.802026987 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.802047968 CEST	443	58427	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.802072048 CEST	58426	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.802083015 CEST	443	58426	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.807811975 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.807843924 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.807919025 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.808300972 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.808310986 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.808366060 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.810830116 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.810853958 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.811023951 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.811038017 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.812000036 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.812020063 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.812369108 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.812617064 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.812628031 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.813153028 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813163996 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.813235044 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813429117 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813435078 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813436985 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.813469887 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:53.813517094 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813592911 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:53.813611984 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.419225931 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.420022964 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.445777893 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.447297096 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.447333097 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.447825909 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.447839022 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.448251963 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.448297024 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.450423002 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.450438976 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.456007957 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.456254959 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.456470013 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.456481934 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.457406998 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.457412004 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.458097935 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.458121061 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.458465099 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.458472967 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.458657026 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.458677053 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.459177971 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.459183931 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.539422989 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.539573908 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.539669991 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.539875031 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.539896965 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.539910078 CEST	58436	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.539916039 CEST	443	58436	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.542444944 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.542526007 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.542802095 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.542932034 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.542958021 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.542973042 CEST	58433	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.542979956 CEST	443	58433	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.543400049 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.543441057 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.544569969 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.544569969 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.544603109 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.545136929 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.545170069 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.546005011 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.546114922 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.546127081 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.552203894 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.552270889 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.552407026 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.552433968 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.552448988 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.552479029 CEST	58437	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.552485943 CEST	443	58437	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.554321051 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.554373026 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.554604053 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.554709911 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.554727077 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557142019 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557193041 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557264090 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.557444096 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.557459116 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557470083 CEST	58435	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.557475090 CEST	443	58435	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557593107 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557650089 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.557745934 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.558608055 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.558615923 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.558628082 CEST	58434	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.558633089 CEST	443	58434	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.562000036 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562041998 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.562105894 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562118053 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.562128067 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562165022 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562313080 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562324047 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:54.562325954 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:54.562345982 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.105304956 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.105760098 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.105794907 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.106183052 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.106190920 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.177341938 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.177736998 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.177761078 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.178412914 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.178421021 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.182738066 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.183058977 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.183116913 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.183474064 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.183496952 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.183804989 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.184344053 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.184360981 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.184982061 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.184986115 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.200779915 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.200850964 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.200901031 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.201195955 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.201195955 CEST	58446	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.201215982 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.201225042 CEST	443	58446	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.204377890 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.204421043 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.204488993 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.204773903 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.204790115 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.207494020 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.207812071 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.207828045 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.208424091 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.208429098 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.277926922 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.277972937 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.278223991 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.278650045 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.278713942 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.278920889 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.281074047 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.281100035 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.281155109 CEST	58447	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.281162024 CEST	443	58447	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.281672955 CEST	58443	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.281691074 CEST	443	58443	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.285029888 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285068989 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.285140038 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285329103 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285372972 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.285489082 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285608053 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285624981 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.285654068 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.285671949 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.287496090 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.287650108 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.287792921 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.287827969 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.287834883 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.287851095 CEST	58444	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.287854910 CEST	443	58444	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.289690018 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.289726019 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.289798021 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.289915085 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.289930105 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.306797981 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.306843996 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.306941986 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.307157993 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.307157993 CEST	58445	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.307167053 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.307173967 CEST	443	58445	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.308964968 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.308994055 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.309413910 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.310323954 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.310338020 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.825305939 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.825880051 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.825911045 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.826389074 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.826394081 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.831281900 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.831702948 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.831722021 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.832072973 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.832077026 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.910852909 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.911351919 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.911381006 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.911756039 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.911776066 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.921449900 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.921518087 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.921576023 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.921700001 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.921715021 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.921746016 CEST	58453	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.921752930 CEST	443	58453	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.922990084 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.923559904 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.923607111 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.924175024 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.924194098 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.924536943 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.924575090 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.924633026 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.924758911 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.924771070 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.928896904 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.928955078 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.929013014 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.929101944 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.929119110 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.929131985 CEST	58454	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.929136992 CEST	443	58454	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.931237936 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.931263924 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.931380987 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.931524992 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.931533098 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.952641010 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.953032017 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.953064919 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:55.953567028 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:55.953572035 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.008673906 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.008759022 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.008858919 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.016300917 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.016331911 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.016347885 CEST	58456	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.016355038 CEST	443	58456	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.020874023 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.020916939 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.021152973 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.021296024 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.021311045 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.023128033 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.023190022 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.023248911 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.023366928 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.023366928 CEST	58455	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.023397923 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.023411036 CEST	443	58455	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.025572062 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.025599003 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.025667906 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.025769949 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.025779963 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.050705910 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.050880909 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.050983906 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.050983906 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.051103115 CEST	58457	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.051119089 CEST	443	58457	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.053591013 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.053623915 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.053687096 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.053852081 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.053865910 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.590655088 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.594948053 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.637068033 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.637084007 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.649133921 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.649143934 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.650882006 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.650891066 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.652090073 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.652111053 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.652487993 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.652507067 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.672175884 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.678430080 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.711664915 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.730849028 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.730851889 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.752474070 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.752650023 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.752782106 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.762109995 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.808157921 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.808178902 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.811556101 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.811567068 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.811680079 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.811714888 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.811729908 CEST	58461	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.811738014 CEST	443	58461	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.814140081 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.814224958 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.814359903 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.814819098 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.814835072 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.815404892 CEST	58460	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.815413952 CEST	443	58460	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.835956097 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.835982084 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.839019060 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.839024067 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.902936935 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.903004885 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.903131008 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.910887003 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.910916090 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.911649942 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.911667109 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.934128046 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.934201956 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.934278965 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.961982965 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.962012053 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.963195086 CEST	58462	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.963217974 CEST	443	58462	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.963505983 CEST	58463	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.963521004 CEST	443	58463	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.994259119 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:56.994298935 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:56.994369030 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.038290977 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.038330078 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.053746939 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.053781986 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.053865910 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.054624081 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.054632902 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.056344986 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.056382895 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.056442976 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.056731939 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.056746006 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.070523977 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.070573092 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.070811033 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.071266890 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.071288109 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.213479996 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.213560104 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.213599920 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.215696096 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.215696096 CEST	58464	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.215713024 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.215722084 CEST	443	58464	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.220634937 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.220670938 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.220746040 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.220874071 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.220890045 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.854336023 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.854794025 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.855405092 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.856102943 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.856118917 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.856195927 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.857789993 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.857806921 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.858791113 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.858804941 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.859738111 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.859908104 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.859916925 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.861064911 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.861099958 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.862066984 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.862071991 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.862512112 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.862519026 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.863953114 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.863956928 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.865000963 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.865025043 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.865959883 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.865966082 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.953671932 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.953790903 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.953860998 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.954113960 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.954142094 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.954148054 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.954194069 CEST	58471	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.954207897 CEST	443	58471	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.954214096 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.954291105 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.956022978 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.956049919 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.956064939 CEST	58468	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.956075907 CEST	443	58468	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.957446098 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.957524061 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.957602978 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.958894968 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.958924055 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.958939075 CEST	58466	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.958944082 CEST	443	58466	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.958946943 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.958997965 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.959099054 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.960820913 CEST	58467	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.960841894 CEST	443	58467	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.963948011 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.963994980 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.964066029 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.964808941 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.964844942 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.964910030 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.968559027 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.968569994 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.968885899 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.968915939 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.968916893 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.969105959 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.969120026 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.970491886 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.970526934 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.970657110 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.970899105 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.970913887 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:57.974071026 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:57.974078894 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.001301050 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.001373053 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.001621008 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.001935959 CEST	58465	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.001951933 CEST	443	58465	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.006808043 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.006855011 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.007030964 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.007365942 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.007379055 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.666392088 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:51:58.666472912 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:51:58.666615009 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:51:58.668378115 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.669276953 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.669296980 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.669948101 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.669955015 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.671989918 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.672452927 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.672702074 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.672722101 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.673567057 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.673573017 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.673882008 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.673902988 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.674304008 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.674310923 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.677095890 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.677844048 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.677856922 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.677875996 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.678777933 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.678790092 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.679042101 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.679058075 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.679548025 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.679554939 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.698451042 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:51:58.698529959 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:51:58.698590994 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:51:58.699333906 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:51:58.699404001 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:51:58.699445963 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:51:58.763555050 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.763619900 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.763751030 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.763855934 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.763871908 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.763884068 CEST	58473	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.763890028 CEST	443	58473	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.766453981 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.766494036 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.766554117 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.766799927 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.766812086 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.769256115 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.769306898 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.769453049 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.769454002 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.769608021 CEST	58476	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.769630909 CEST	443	58476	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.769793034 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.769848108 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.770071030 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.770243883 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.770265102 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.770276070 CEST	58475	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.770281076 CEST	443	58475	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.771553040 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.771584988 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.771864891 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.771864891 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.771883965 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.772202015 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.772237062 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.772288084 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.772427082 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.772437096 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777075052 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777127028 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777232885 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777256966 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777266026 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777277946 CEST	58474	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777282953 CEST	443	58474	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777390957 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777447939 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777611971 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777861118 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777865887 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.777893066 CEST	58472	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.777895927 CEST	443	58472	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.779150963 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.779170036 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.779299974 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.779392958 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.779402018 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.780179024 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.780184984 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:58.780235052 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.780379057 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:58.780385971 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.148562908 CEST	49748	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:51:59.148592949 CEST	443	49748	17.248.209.73	192.168.2.4
Oct 7, 2024 16:51:59.148612022 CEST	49750	443	192.168.2.4	17.248.209.33
Oct 7, 2024 16:51:59.148617983 CEST	443	49750	17.248.209.33	192.168.2.4
Oct 7, 2024 16:51:59.148617983 CEST	49747	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:51:59.148660898 CEST	443	49747	17.248.209.64	192.168.2.4
Oct 7, 2024 16:51:59.286165953 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:59.286218882 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.287410975 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:59.290430069 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:59.290441036 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.378973961 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.387427092 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.387631893 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.394646883 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.397968054 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.416225910 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.416260004 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.419303894 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.419317961 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.419766903 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.419780016 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.422785997 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.422800064 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.422894955 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.425637960 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.425662994 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.431570053 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.431586981 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.431994915 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.432023048 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.432395935 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.432401896 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.435431004 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.462186098 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.462208986 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.463340044 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.463346004 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667078018 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667078972 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667139053 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667138100 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667172909 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667196035 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667198896 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667220116 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667237997 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667260885 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667445898 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667495012 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667793989 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667793989 CEST	58478	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.667814970 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.667824030 CEST	443	58478	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.669825077 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.669846058 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.669873953 CEST	58481	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.669881105 CEST	443	58481	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.671998978 CEST	58480	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.672032118 CEST	443	58480	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.672569990 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.672581911 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.672789097 CEST	58482	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.672795057 CEST	443	58482	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.680340052 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.680386066 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.680524111 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.682470083 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.682509899 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.682564974 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.684839964 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.684890985 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.684957981 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.685982943 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686002970 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.686248064 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686448097 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686461926 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.686522007 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686543941 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.686629057 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686642885 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.686814070 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.686829090 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.754738092 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.755086899 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.755148888 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.755786896 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.755811930 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.755819082 CEST	58479	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.755825043 CEST	443	58479	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.758989096 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.759025097 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.759191990 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.759396076 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:51:59.759407043 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:51:59.892091990 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.892354965 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:59.892374992 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.892718077 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.893672943 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:51:59.893783092 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:51:59.935220003 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:52:00.299860001 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.300574064 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.300604105 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.301702976 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.301731110 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.302195072 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.302880049 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.302906990 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.303649902 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.303673029 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.308552027 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.309138060 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.309161901 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.309942007 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.309950113 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.348004103 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.348858118 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.348892927 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.349874020 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.349885941 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.373764992 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.374346018 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.374378920 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.375232935 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.375245094 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.398693085 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.398761034 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.398823023 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.399276972 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.399316072 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.399331093 CEST	58485	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.399339914 CEST	443	58485	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.400911093 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.400979042 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.401057959 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.401681900 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.401681900 CEST	58486	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.401700020 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.401710987 CEST	443	58486	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.405738115 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.405781031 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.405855894 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.406040907 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.406109095 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.406158924 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.406205893 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.406219959 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.406627893 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.406655073 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.406668901 CEST	58487	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.406673908 CEST	443	58487	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.409930944 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.409960032 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.410022974 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.411418915 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.411462069 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.412034035 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.412058115 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.412161112 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.412161112 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.412194967 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.886970043 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887001038 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887032986 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887052059 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887098074 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887193918 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887270927 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887300968 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887322903 CEST	58489	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887329102 CEST	443	58489	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887336016 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887355089 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.887366056 CEST	58488	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.887372971 CEST	443	58488	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.890325069 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890379906 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.890466928 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890603065 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890633106 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.890678883 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890811920 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890822887 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:00.890899897 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:00.890918970 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.066860914 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.067460060 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.067502975 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.068600893 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.068609953 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.068877935 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.069365978 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.069382906 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.070254087 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.070264101 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.075890064 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.076433897 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.076461077 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.077244043 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.077248096 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.161798954 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.161871910 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.162172079 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.166063070 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.166143894 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.166261911 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.166750908 CEST	58493	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.166789055 CEST	443	58493	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.167808056 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.167828083 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.167840958 CEST	58492	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.167846918 CEST	443	58492	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.174568892 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.174616098 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.174751997 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.175405979 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.175416946 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.176454067 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.176461935 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.176561117 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.176718950 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.176778078 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.176832914 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.176892996 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.176899910 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.177299023 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.177314997 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.177331924 CEST	58491	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.177337885 CEST	443	58491	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.182013988 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.182054996 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.182148933 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.183270931 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.183295965 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.503896952 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.520972013 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.521003008 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.522042036 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.522049904 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.553731918 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.554466009 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.554486990 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.555290937 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.555298090 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.614269018 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.614330053 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.614577055 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.614685059 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.614685059 CEST	58494	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.614712000 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.614722967 CEST	443	58494	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.618463993 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.618494987 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.618755102 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.618987083 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.618994951 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.682044983 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.682117939 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.682223082 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.682820082 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.682835102 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.682863951 CEST	58495	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.682871103 CEST	443	58495	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.688154936 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.688199997 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.688570976 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.688570976 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.688605070 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.785424948 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.786340952 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.786384106 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.787039042 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.787045956 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.790142059 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.790587902 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.790596962 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.791183949 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.791189909 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.793322086 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.793765068 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.793776989 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.797451019 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.797456980 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.885082960 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.885169983 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.885263920 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.885883093 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.885910034 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.885922909 CEST	58497	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.885927916 CEST	443	58497	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.891048908 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.891112089 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:01.891182899 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.891767025 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:01.891784906 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.142582893 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.142621994 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.142673016 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.142726898 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.142728090 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.142766953 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.142947912 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.142971992 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.143064022 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.143086910 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.143102884 CEST	58498	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.143106937 CEST	443	58498	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.143258095 CEST	58499	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.143265963 CEST	443	58499	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.146306038 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146327019 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.146392107 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146505117 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146553040 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.146554947 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146565914 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.146595955 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146723032 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.146737099 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.336945057 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.338906050 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.338947058 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.339338064 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.340639114 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.340648890 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.341795921 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.341810942 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.342788935 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.342797041 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.431643963 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.431716919 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.431771040 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.432352066 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.432377100 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.432389021 CEST	58501	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.432394981 CEST	443	58501	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.436391115 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.436456919 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.436496019 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.437536001 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.437571049 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.437625885 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.437974930 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.437987089 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.437997103 CEST	58500	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.438002110 CEST	443	58500	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.439256907 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.439270020 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.441550970 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.441601038 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.441668034 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.441791058 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.441802979 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.786235094 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.796724081 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.804908991 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.841468096 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.844381094 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.844479084 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.847161055 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.847181082 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.847938061 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.847945929 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.848474026 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.848488092 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.848766088 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.848778963 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.848891020 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.848896027 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.849195957 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.849200964 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.942265987 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.942332983 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.942502975 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.943177938 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.943198919 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.943209887 CEST	58504	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.943216085 CEST	443	58504	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.943864107 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.943923950 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.944026947 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.944580078 CEST	58503	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.944591999 CEST	443	58503	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.946660995 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.946691036 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.946775913 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.946842909 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.946856022 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.946904898 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948143005 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948163986 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.948245049 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948451996 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948465109 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.948568106 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948585033 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.948590994 CEST	58502	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.948596001 CEST	443	58502	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.974447966 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.974490881 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.974715948 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.974893093 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.974925041 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:02.975327015 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:02.975337982 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.054248095 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.067678928 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.106534958 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.122195959 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.651781082 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.651813984 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.652570009 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.652579069 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.653039932 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.653084040 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.653917074 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.653938055 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.691646099 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.691653967 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.695372105 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.746675968 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.746676922 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.751934052 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.774791956 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.775021076 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.775578976 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.775633097 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.776081085 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.776127100 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.804804087 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.804812908 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.805329084 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.805334091 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.805649042 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.805679083 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.805691957 CEST	58507	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.805699110 CEST	443	58507	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.805754900 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.805754900 CEST	58506	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.805780888 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.805792093 CEST	443	58506	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.808269024 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.808281898 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.808846951 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.808855057 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.809216976 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.809222937 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.809776068 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.809779882 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.817831993 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.817886114 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.817936897 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.818325043 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.818344116 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.820544958 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.820583105 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.820628881 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.821052074 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.821063042 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.897197962 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.897279024 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.897336006 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.897949934 CEST	58509	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.897969961 CEST	443	58509	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.902065039 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.902252913 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.902362108 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.915390968 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.915431023 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.915496111 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.916343927 CEST	58510	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.916361094 CEST	443	58510	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.941374063 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.941396952 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.943075895 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.943129063 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.943191051 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.943512917 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.943522930 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.983345032 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.983428001 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.983477116 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.985057116 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.985066891 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.985079050 CEST	58511	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.985083103 CEST	443	58511	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.989896059 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.989908934 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:03.989959955 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.990320921 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:03.990330935 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.429188013 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.433768988 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.440438986 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.440475941 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.441344023 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.441351891 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.441982031 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.441993952 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.442676067 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.442679882 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.535325050 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.535396099 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.535434008 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.535612106 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.535629034 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.535638094 CEST	58517	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.535644054 CEST	443	58517	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.539524078 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.539563894 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.539617062 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.540452003 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.540462971 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.543777943 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.543952942 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.544004917 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.553719044 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.553755999 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.553772926 CEST	58516	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.553778887 CEST	443	58516	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.557101011 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.560214043 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.560252905 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.560297966 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.560580969 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.560600042 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.561136961 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.561145067 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.562033892 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.562037945 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.600241899 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.623939991 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.623965979 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.624640942 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.624645948 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.627762079 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.628098965 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.628114939 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.628540039 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.628545046 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.715085983 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.715162992 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.715244055 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.715342999 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.715356112 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.715367079 CEST	58518	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.715372086 CEST	443	58518	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.721268892 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.721313953 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.721376896 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.721534967 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.721548080 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.726135015 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.726197004 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.726244926 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.726339102 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.726356030 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.726366997 CEST	58519	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.726372004 CEST	443	58519	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.727900028 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.727966070 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.727999926 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.728247881 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.728261948 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.728275061 CEST	58522	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.728285074 CEST	443	58522	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.762608051 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.762634993 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.762784958 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.764142990 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.764183998 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.764291048 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.764561892 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.764575958 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.764849901 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:04.764863968 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:04.839915037 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:04.839956999 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:04.842272043 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:04.845211983 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:04.845243931 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:04.845410109 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:04.847971916 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:04.847986937 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:04.848499060 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:04.848535061 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:04.849425077 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:04.849452019 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:04.849601984 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:04.850712061 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:04.850723028 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:04.859170914 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:04.859194994 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:04.859246969 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:04.859872103 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:04.859886885 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:05.159179926 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.159905910 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.159943104 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.160226107 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.160233974 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.206651926 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.207082033 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.207110882 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.208169937 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.208175898 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.257070065 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.257129908 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.257394075 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.257394075 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.257424116 CEST	58523	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.257437944 CEST	443	58523	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.260281086 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.260322094 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.260559082 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.260559082 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.260584116 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.305843115 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.306018114 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.306154013 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.306186914 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.306186914 CEST	58524	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.306200981 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.306210041 CEST	443	58524	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.308816910 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.308850050 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.311655998 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.311655998 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.311682940 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.334301949 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.335130930 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.335130930 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.335164070 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.335177898 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.388147116 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.388642073 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.388663054 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.389286041 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.389301062 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.420639038 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.421535969 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.421535969 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.421551943 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.421556950 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.430779934 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.430797100 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.431031942 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.431041956 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.431144953 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.431144953 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.431159973 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.431303024 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.431332111 CEST	443	58525	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.431397915 CEST	58525	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.433598995 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.433628082 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.434230089 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.434230089 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.434259892 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.483979940 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.484041929 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.484265089 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.484265089 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.484626055 CEST	58527	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.484642029 CEST	443	58527	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.487169981 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.487215042 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.487406015 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.487406015 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.487435102 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.522521019 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.522669077 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.522964001 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.522964001 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.522991896 CEST	58526	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.523011923 CEST	443	58526	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.525793076 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.525834084 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.525986910 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.526215076 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:05.526230097 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:05.563486099 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:05.563781977 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:05.563849926 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:05.564191103 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:05.564625978 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:05.564697027 CEST	443	58528	17.248.209.64	192.168.2.4
Oct 7, 2024 16:52:05.607224941 CEST	58528	443	192.168.2.4	17.248.209.64
Oct 7, 2024 16:52:05.633497000 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:05.634865999 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:05.634895086 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:05.635272980 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:05.637914896 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:05.638030052 CEST	443	58532	17.248.209.36	192.168.2.4
Oct 7, 2024 16:52:05.691011906 CEST	58532	443	192.168.2.4	17.248.209.36
Oct 7, 2024 16:52:05.715154886 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:05.727016926 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:05.727030993 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:05.727437973 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:05.728548050 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:05.728548050 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:05.728570938 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:05.728621960 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:05.730716944 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:05.764312983 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:05.764327049 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:05.765625000 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:05.770925999 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:05.775382042 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:05.775854111 CEST	443	58529	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:05.830768108 CEST	58529	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:06.283046961 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:06.283072948 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.283123970 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:06.283164978 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:06.283327103 CEST	58530	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:06.283346891 CEST	443	58530	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:06.283699989 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:06.283724070 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:06.283792973 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:06.284138918 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:06.284151077 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:06.284162998 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.284176111 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.285094976 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.285100937 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.289308071 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.289813995 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.289836884 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.290415049 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.290421009 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380009890 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380029917 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380089998 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.380105019 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380428076 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.380434990 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380448103 CEST	58534	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.380451918 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.380465984 CEST	443	58534	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.383399963 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.383440018 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.383524895 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.383654118 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.383663893 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389041901 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389070988 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389128923 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.389148951 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389167070 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389184952 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.389220953 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.389396906 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.389406919 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.389417887 CEST	58536	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.389421940 CEST	443	58536	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.392024994 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.392066956 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.392144918 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.392261028 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.392270088 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.661170959 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.662369967 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.662381887 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.662641048 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.663039923 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.663887978 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.663892984 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.663997889 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.664010048 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.664426088 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.664429903 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.664618969 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.664644003 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.664951086 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.664954901 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.747553110 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:06.747606039 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:06.747667074 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:06.748054981 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:06.748069048 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:06.757997990 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.758208990 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.758254051 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.758335114 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.758343935 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.758361101 CEST	58538	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.758371115 CEST	443	58538	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.759032965 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.759124041 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.759174109 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.759264946 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.759284019 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.759296894 CEST	58539	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.759303093 CEST	443	58539	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761364937 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761399031 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761451960 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761482000 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761503935 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761548996 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761554956 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761564016 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761580944 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761604071 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761620045 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761639118 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761738062 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761755943 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761755943 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761768103 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.761856079 CEST	58537	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.761862040 CEST	443	58537	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.762227058 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.762243986 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.764053106 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.764077902 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.764142990 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.764522076 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:06.764539003 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:06.996726036 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.002984047 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.003015995 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.003834963 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.003842115 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.049402952 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.082909107 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.082940102 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.084044933 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.084052086 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.104720116 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.104774952 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.104866982 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.105207920 CEST	58542	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.105221987 CEST	443	58542	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.110131979 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.110171080 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.110259056 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.110436916 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.110450029 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.171792984 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.172125101 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:07.172137976 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.173324108 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.174114943 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:07.174279928 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.174408913 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:07.181166887 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.181561947 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.181651115 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.181715965 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.181735039 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.181751013 CEST	58543	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.181756973 CEST	443	58543	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.187489986 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.187529087 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.187757015 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.187954903 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.187968969 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.219408035 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.351484060 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.351756096 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.351778030 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.352113008 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.352523088 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.352576017 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.352663994 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.352704048 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.352721930 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.377010107 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.377585888 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.377604008 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.378046036 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.378052950 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.427822113 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.428313017 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.428334951 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.428769112 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.428774118 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.429523945 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.430176020 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.430211067 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.430233955 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.430238962 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.475059986 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.475507975 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.475594044 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.475594044 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.475636959 CEST	58547	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.475653887 CEST	443	58547	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.479173899 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.479204893 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.479403019 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.479535103 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.479546070 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.492964983 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.493052006 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.493433952 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:07.493906021 CEST	58541	443	192.168.2.4	17.248.209.70
Oct 7, 2024 16:52:07.493936062 CEST	443	58541	17.248.209.70	192.168.2.4
Oct 7, 2024 16:52:07.529489040 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.529901028 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.529998064 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.531375885 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.531455040 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.531563997 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.531779051 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.531794071 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.531825066 CEST	58546	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.531831980 CEST	443	58546	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.533051968 CEST	58548	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.533065081 CEST	443	58548	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.535953999 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.535995960 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.536164999 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.537197113 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.537211895 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.537386894 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.537432909 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.537511110 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.537750006 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.537763119 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.704811096 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.704888105 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.704987049 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.705471039 CEST	58545	443	192.168.2.4	17.248.209.74
Oct 7, 2024 16:52:07.705487967 CEST	443	58545	17.248.209.74	192.168.2.4
Oct 7, 2024 16:52:07.710542917 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:07.710591078 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:07.710796118 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:07.711410046 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:07.711422920 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:07.725795031 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.726412058 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.726437092 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.726969004 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.726974010 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.804526091 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.805052042 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.805080891 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.805656910 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.805664062 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.819951057 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.820152998 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.820225954 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.820262909 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.820280075 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.820291042 CEST	58549	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.820297003 CEST	443	58549	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.823446989 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.823472023 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.823529959 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.823679924 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.823690891 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.901144028 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.901313066 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.901387930 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.901506901 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.901529074 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.901540041 CEST	58550	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.901546955 CEST	443	58550	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.904725075 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.904741049 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:07.904798985 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.904956102 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:07.904963970 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.107978106 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.145392895 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.156380892 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.169754028 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.186659098 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.216882944 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.423892021 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:08.441293001 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.441328049 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.445130110 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.445137024 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.466303110 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:08.471138954 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.513180017 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.518146992 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.537120104 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.537189007 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.537266016 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.560019970 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.607326031 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.607364893 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.607892036 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.607898951 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.608704090 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.608758926 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.608789921 CEST	58551	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.608807087 CEST	443	58551	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.619024992 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.619075060 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.619874954 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.619884968 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.620796919 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:08.620820999 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:08.621557951 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:08.627943993 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:08.628014088 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:08.628747940 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:08.630883932 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.630898952 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.631619930 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.631624937 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.632168055 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.632173061 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.632668018 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.632673025 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.642126083 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.642163992 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.642246962 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.642579079 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.642596960 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.671406031 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:08.699631929 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.699795008 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.699853897 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.708870888 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.708900928 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.708915949 CEST	58553	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.708923101 CEST	443	58553	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.711677074 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.712270021 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.712325096 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.712352991 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.712389946 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.712433100 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.712728024 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.712743044 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.712753057 CEST	58552	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.712758064 CEST	443	58552	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.720027924 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.720053911 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.720109940 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.722681046 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.722693920 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.722847939 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.722887993 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.722932100 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.724026918 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.724042892 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.724639893 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.725203037 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.725244999 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.725352049 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.725367069 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.725379944 CEST	58558	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.725383997 CEST	443	58558	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.726994991 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.727097034 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.727144957 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.727153063 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.727219105 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.727258921 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.728616953 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.728621960 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.728641987 CEST	58557	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.728646040 CEST	443	58557	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.734330893 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.734355927 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.734397888 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.735469103 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.735482931 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.738437891 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.738471985 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:08.738518953 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.738780022 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:08.738795996 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.254137993 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.257664919 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.257699966 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.259059906 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.259073973 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.395086050 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.395859957 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.395927906 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.404396057 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.404396057 CEST	58559	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.404412985 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.404417038 CEST	443	58559	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.408783913 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.408842087 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:09.408906937 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.409559011 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:09.409576893 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:10.538108110 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:52:10.538163900 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:52:10.538187027 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:10.538209915 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:52:10.538264990 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:10.538297892 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:10.721662998 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:10.722184896 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:10.725717068 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:10.725995064 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:10.768621922 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:10.768749952 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:10.784612894 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:10.784612894 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.157749891 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.212157965 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.285917044 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.285917997 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.285934925 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.285952091 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.286266088 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.286292076 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.287194967 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.287200928 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.288161993 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.288175106 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.288815022 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.288819075 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.290055037 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.290055037 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.290076017 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.290081024 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.290747881 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.290761948 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.292164087 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.292170048 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.354201078 CEST	58555	443	192.168.2.4	17.248.209.69
Oct 7, 2024 16:52:11.354223013 CEST	443	58555	17.248.209.69	192.168.2.4
Oct 7, 2024 16:52:11.379044056 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.379112005 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.379281044 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.379542112 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.379543066 CEST	58563	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.379587889 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.379616022 CEST	443	58563	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.380896091 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.380969048 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.381093025 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.381417036 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.381417036 CEST	58565	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.381443977 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.381457090 CEST	443	58565	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.381578922 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.381699085 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.381875992 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.383518934 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.383554935 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.383557081 CEST	58560	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.383563042 CEST	443	58560	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.383580923 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.383585930 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.383646965 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.383650064 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.383662939 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.383697987 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.384982109 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.385104895 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.385104895 CEST	58561	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.385114908 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.385124922 CEST	443	58561	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.385143042 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.385162115 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.388153076 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388154984 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388180017 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.388180971 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.388258934 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388521910 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388586998 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388593912 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.388595104 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.388606071 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.394555092 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.394582987 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.396365881 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.396365881 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.396393061 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.475958109 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.476219893 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.480305910 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.480305910 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.483428955 CEST	58562	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.483449936 CEST	443	58562	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.508460045 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.508513927 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.509032965 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.509469032 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:11.509484053 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:11.799945116 CEST	58484	443	192.168.2.4	142.250.185.164
Oct 7, 2024 16:52:11.799978971 CEST	443	58484	142.250.185.164	192.168.2.4
Oct 7, 2024 16:52:12.166168928 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.167496920 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.167562008 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.167819977 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.171339989 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.198080063 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.198098898 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.198525906 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.198544025 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.199290037 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.199297905 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.200599909 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.200604916 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.201255083 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.201267958 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.202389002 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.202394962 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.203145027 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.203150988 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.204031944 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.204035997 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.205081940 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.205096960 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.205558062 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.205563068 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.292721987 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.292933941 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.292973995 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.292985916 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.293000937 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.293046951 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.293855906 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.293867111 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.293881893 CEST	58566	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.293886900 CEST	443	58566	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.295149088 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.295407057 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.295432091 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.295453072 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.296240091 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.296628952 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.296964884 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.297117949 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.297164917 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.297173977 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.297187090 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.297231913 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.297796965 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.297796965 CEST	58568	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.297805071 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.297812939 CEST	443	58568	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.301341057 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.301350117 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.301358938 CEST	58570	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.301363945 CEST	443	58570	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.302804947 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.302804947 CEST	58569	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.302810907 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.302817106 CEST	443	58569	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.307264090 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.307288885 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.307364941 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.309524059 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.309533119 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.309580088 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.309709072 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.309727907 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.321382999 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.321389914 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.321439028 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.321692944 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.321701050 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.323971033 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.323981047 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.324027061 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.324440002 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.324453115 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.324975967 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.324985981 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.367449999 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.369362116 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.369445086 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.369445086 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.369473934 CEST	58567	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.369483948 CEST	443	58567	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.379853964 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.379865885 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.379918098 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.380301952 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.380316973 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.943116903 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.944122076 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.944139957 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.944996119 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.945000887 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.947694063 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.947833061 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.948555946 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.948568106 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.950062990 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.950064898 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.950069904 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.950079918 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.951106071 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.951112032 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.968022108 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.973335028 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.973351955 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:12.974345922 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:12.974350929 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.030569077 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.030581951 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.030734062 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.031049967 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.031060934 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.040066957 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.040142059 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.040333986 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.040421009 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.040421009 CEST	58575	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.040427923 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.040436029 CEST	443	58575	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.043066978 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.043214083 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043222904 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.043283939 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.043350935 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043448925 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043448925 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043462992 CEST	58572	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043467045 CEST	443	58572	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.043914080 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.043927908 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.048161983 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.048178911 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.048269033 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.048574924 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.048589945 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.069211006 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.069329977 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.069472075 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.069480896 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.069544077 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.069618940 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.069627047 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.069648027 CEST	58573	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.069653034 CEST	443	58573	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.071952105 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.071979046 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.072221994 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.072349072 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.072355986 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.202013969 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.202084064 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.202332020 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.202332020 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.202920914 CEST	58574	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.202939987 CEST	443	58574	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.205368042 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.205388069 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.205493927 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.205562115 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.205568075 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.671799898 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.673823118 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.678778887 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.678792953 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.679579020 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.679579020 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.679584980 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.679611921 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.680219889 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.680227995 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.696609020 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.714557886 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.714581013 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.716716051 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.716722012 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.730837107 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.743413925 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.743423939 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.743745089 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.745836020 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.745836973 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.745896101 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.746021032 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.746082067 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:13.799144983 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:13.960134983 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960144043 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960171938 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960205078 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960223913 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960269928 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.960311890 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.960341930 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.960558891 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.960567951 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960582972 CEST	58580	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.960587025 CEST	443	58580	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960613012 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960753918 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.960804939 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.962017059 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.962203026 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.962214947 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.962229013 CEST	58579	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.962234974 CEST	443	58579	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.963362932 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.963362932 CEST	58581	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.963376045 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.963399887 CEST	443	58581	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.964893103 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.964907885 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.965421915 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.965429068 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.967812061 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.967825890 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.967889071 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.968648911 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.968662024 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.969620943 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.969630003 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.969687939 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.969784021 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.969796896 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.970465899 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.970473051 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:13.970530987 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.970928907 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:13.970941067 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.063381910 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.063646078 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.063699007 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.068461895 CEST	58582	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.068470955 CEST	443	58582	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.070825100 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.070858002 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.070944071 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.071122885 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.071136951 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.235893011 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:14.236064911 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:14.236152887 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:14.318836927 CEST	58578	443	192.168.2.4	17.248.209.68
Oct 7, 2024 16:52:14.318849087 CEST	443	58578	17.248.209.68	192.168.2.4
Oct 7, 2024 16:52:14.336885929 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:14.336900949 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:14.336973906 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:14.337229967 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:14.337243080 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:14.974534035 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.975059032 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.975071907 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.976006031 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.976011038 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.981014013 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.981031895 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.981884956 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.982604980 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.984426022 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.984451056 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.985728025 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.985733032 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.986589909 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.986608982 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.986814976 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.986826897 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.987020016 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.987025976 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.987571001 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.987574100 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.987577915 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.987581968 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:14.988233089 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:14.988236904 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.236344099 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.238346100 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:15.238354921 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.239542961 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.240128040 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:15.240300894 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.240458965 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:15.287404060 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.322163105 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.322870016 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.322913885 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.322922945 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.322978973 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.323029041 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.323122025 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.323129892 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.323139906 CEST	58584	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.323143959 CEST	443	58584	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.325053930 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.325522900 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.325563908 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.327131033 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.327524900 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.327579021 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.329292059 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.329705000 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.329744101 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.332592010 CEST	58587	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.332597017 CEST	443	58587	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.333028078 CEST	58586	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.333035946 CEST	443	58586	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.335398912 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.335398912 CEST	58585	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.335406065 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.335412979 CEST	443	58585	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.338294983 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.338538885 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.338579893 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.339154959 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.339179039 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.339229107 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.341167927 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.341177940 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.341222048 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.341468096 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.341478109 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.341490030 CEST	58576	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.341495037 CEST	443	58576	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.355130911 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.355139017 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.355185986 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.355449915 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.355462074 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.355535984 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.355546951 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.357414007 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.357423067 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.357469082 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.357554913 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.357566118 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.357579947 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.357584000 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.363681078 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.363689899 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.363735914 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.363876104 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:15.363888025 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:15.588920116 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.589087009 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:15.589152098 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:15.590538025 CEST	58588	443	192.168.2.4	17.248.209.73
Oct 7, 2024 16:52:15.590544939 CEST	443	58588	17.248.209.73	192.168.2.4
Oct 7, 2024 16:52:16.065437078 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.065613031 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.066281080 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.066298962 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.066535950 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.066757917 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.066780090 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.066870928 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.066875935 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.066901922 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067049980 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067107916 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067125082 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067404985 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067409992 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067646980 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067662001 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067812920 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067816973 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067917109 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067929983 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.067982912 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.067996025 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.068115950 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.068120003 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.614944935 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615128040 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615178108 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615279913 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615309954 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.615458965 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.615474939 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615483046 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.615483046 CEST	58591	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.615489006 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615494967 CEST	443	58591	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.615818024 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.616292953 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.616292953 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.616292953 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.616411924 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.616556883 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.616688967 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.617389917 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.617397070 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.617556095 CEST	58592	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.617558956 CEST	443	58592	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618314981 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618388891 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618510962 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618602991 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618640900 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618689060 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.618693113 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.618774891 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.619993925 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620023966 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.620109081 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620109081 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620109081 CEST	58590	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620126009 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.620136976 CEST	443	58590	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.620145082 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620145082 CEST	58593	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620148897 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.620150089 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620151043 CEST	443	58593	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.620157003 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.620166063 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.622232914 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.622235060 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.622246981 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.622252941 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.622323990 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.622338057 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.622711897 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.622725010 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.623796940 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.623796940 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.623806953 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.623817921 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.624269009 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.625009060 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.625009060 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.625016928 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.625016928 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.625142097 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.626157045 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.626166105 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:16.920511007 CEST	58594	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:16.920521021 CEST	443	58594	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.481843948 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.482517004 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.482537031 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.483128071 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.483131886 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.494998932 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.495347023 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.495359898 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.495868921 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.495873928 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.500617981 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.502118111 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.502118111 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.502134085 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.502140999 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.510575056 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.510875940 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.510886908 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.511207104 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.511210918 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.520567894 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.521321058 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.521321058 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.521339893 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.521352053 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841571093 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841618061 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841643095 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841662884 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841672897 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841727972 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841737032 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841746092 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841763973 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841782093 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841784000 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841784000 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841814995 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841821909 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841857910 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841861010 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841900110 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.841909885 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.841995001 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.842035055 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.842547894 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.842560053 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.842569113 CEST	58599	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.842573881 CEST	443	58599	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.850879908 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.850884914 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.850903988 CEST	58596	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.850907087 CEST	443	58596	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.852216959 CEST	58597	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.852222919 CEST	443	58597	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.853183985 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.853198051 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.853466034 CEST	58595	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.853471994 CEST	443	58595	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.854012966 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.854017019 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.854024887 CEST	58598	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.854028940 CEST	443	58598	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.859633923 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.859662056 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.859721899 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.879964113 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.879978895 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.880043030 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.880913019 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.880928993 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.880985975 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.881845951 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.881884098 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.882164001 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.882178068 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.882317066 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.882330894 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.883097887 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.883125067 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.883176088 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.883403063 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.883419037 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.884140015 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.884160042 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:17.884316921 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.884316921 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:17.884337902 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.432245970 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.432683945 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.432714939 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.433089018 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.433106899 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.499001980 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.499474049 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.499490023 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.499826908 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.499830961 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.516731977 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.517122030 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.517143965 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.517571926 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.517576933 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.522083998 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.522711992 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.522727966 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.522757053 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.522762060 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.530385971 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.530627966 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.530698061 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.530723095 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.530750036 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.530812979 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.531197071 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.531197071 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.531197071 CEST	58606	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.531209946 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.531239986 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.531250000 CEST	443	58606	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.533750057 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.533775091 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.533891916 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.534126997 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.534138918 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.598774910 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.598799944 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.598836899 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.598861933 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.598998070 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.599028111 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.599035978 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.599062920 CEST	58604	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.599067926 CEST	443	58604	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.601753950 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.601790905 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.601979971 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.601979971 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.602010965 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.616053104 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.617105961 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.617778063 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.617815018 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.617815018 CEST	58603	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.617825031 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.617834091 CEST	443	58603	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.620062113 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620074034 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.620182037 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620214939 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.620261908 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620268106 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.620418072 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.620508909 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620508909 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620590925 CEST	58602	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.620599031 CEST	443	58602	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.622457981 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.622468948 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.622550011 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.622670889 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.622684956 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.632513046 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.632531881 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.632566929 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.632594109 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.632741928 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.632741928 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.632930994 CEST	58605	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.632946968 CEST	443	58605	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.635442019 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.635457039 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:18.635584116 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.635627985 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:18.635633945 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.169905901 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.170443058 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.170464039 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.170914888 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.170921087 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.240170002 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.240722895 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.240751028 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.241229057 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.241235018 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.248302937 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.248642921 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.248683929 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.248996019 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.249006033 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.255023003 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.255326986 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.255342007 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.255882025 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.255887032 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.269596100 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.269659996 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.269723892 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.269926071 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.269926071 CEST	58608	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.269942999 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.269953966 CEST	443	58608	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.270921946 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.271234989 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.271259069 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.271600008 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.271605968 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.272469044 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.272485018 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.272655964 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.272886038 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.272891998 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.339363098 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.339524984 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.339572906 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.339821100 CEST	58609	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.339833021 CEST	443	58609	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.343200922 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.343211889 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.343292952 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.343596935 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.343611002 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344580889 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344779968 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344835043 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.344850063 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344890118 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344924927 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.344924927 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.344940901 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.344954967 CEST	58611	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.344959974 CEST	443	58611	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.346936941 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.346949100 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.347024918 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.347125053 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.347136974 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.351423979 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.351526976 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.351592064 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.351614952 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.351614952 CEST	58612	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.351620913 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.351624012 CEST	443	58612	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.353286982 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.353295088 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.353354931 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.353471041 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.353482008 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.373194933 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.373498917 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.373557091 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.373635054 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.373644114 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.373651981 CEST	58610	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.373658895 CEST	443	58610	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.375766039 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.375792980 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:19.376415968 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.376415968 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:19.376436949 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.004266977 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.004669905 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.004687071 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.005301952 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.005306959 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.038958073 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.039634943 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.039634943 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.039653063 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.039661884 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.058305025 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.058959961 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.058959961 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.058979034 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.058986902 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.074244022 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.074918985 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.074934959 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.075470924 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.075475931 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.100673914 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.100708961 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.100744963 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.100841045 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.101558924 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.101568937 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.101582050 CEST	58615	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.101588964 CEST	443	58615	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.104967117 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.104990005 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.105127096 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.106141090 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.106153011 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.359612942 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.359672070 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.360018969 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.360177994 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.360177994 CEST	58617	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.360194921 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.360203981 CEST	443	58617	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.360948086 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.361020088 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.361217976 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.361521006 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.361538887 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.361598969 CEST	58616	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.361605883 CEST	443	58616	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.362356901 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.362437010 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.362664938 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.363142014 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.363187075 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.363187075 CEST	58618	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.363193035 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.363199949 CEST	443	58618	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.363214016 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.363449097 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.363913059 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.364424944 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.364454985 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.364799976 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.364800930 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.364842892 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.365155935 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.365184069 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.365185976 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.365205050 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.365511894 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.365523100 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.366174936 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.366203070 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.366404057 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.366404057 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.366446018 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.462933064 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.463244915 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.463408947 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.463453054 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.463460922 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.463490009 CEST	58619	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.463494062 CEST	443	58619	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.465900898 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.465912104 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:20.465969086 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.466074944 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:20.466079950 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.040307045 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.040720940 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.040752888 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.041150093 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.041158915 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.041359901 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.041585922 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.041959047 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.041974068 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.042277098 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.042280912 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.042448997 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.042469025 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.042726994 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.042731047 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.063612938 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.063874960 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.063888073 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.064366102 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.064369917 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.091314077 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.091655016 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.091671944 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.091996908 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.092000961 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.138719082 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.138871908 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.138931036 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.138991117 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.139002085 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.139012098 CEST	58621	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.139015913 CEST	443	58621	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141644001 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141676903 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141676903 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141705036 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141720057 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141753912 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141796112 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141808033 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141927958 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141933918 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.141978979 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.141993999 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.142011881 CEST	58623	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.142016888 CEST	443	58623	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.144202948 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.144222975 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.144289970 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.144522905 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.144537926 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.148446083 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.148540974 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.149379969 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.149482965 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.149496078 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.149506092 CEST	58620	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.149513006 CEST	443	58620	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.151598930 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.151611090 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.151662111 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.151771069 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.151781082 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.166930914 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.167021990 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.167104006 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.167119980 CEST	58622	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.167128086 CEST	443	58622	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.169066906 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.169085026 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.169151068 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.169244051 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.169253111 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.189330101 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.189395905 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.189462900 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.189584017 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.189593077 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.189630032 CEST	58624	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.189635038 CEST	443	58624	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.191842079 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.191859007 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.191907883 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.192069054 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.192082882 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.770984888 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.771374941 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.771394014 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.771801949 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.771806955 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.780658960 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.781111002 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.781132936 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.781517982 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.781522989 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.799611092 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.800028086 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.800054073 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.800427914 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.800435066 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.803195953 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.803985119 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.804011106 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.804056883 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.804063082 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.810791016 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.811104059 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.811122894 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.812149048 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.812155962 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.868678093 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.868694067 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.868736982 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.868746996 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.869003057 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.869008064 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.869023085 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.869143009 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.869170904 CEST	443	58627	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.869213104 CEST	58627	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.871678114 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.871700048 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.871753931 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.871857882 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.871861935 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.874531984 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.874808073 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.874861002 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.874872923 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.874908924 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.874948025 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.874969006 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.875004053 CEST	58628	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.875016928 CEST	443	58628	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.877042055 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.877063990 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.877141953 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.877279997 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.877312899 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.899671078 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.899749994 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.899807930 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.899821043 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.899863005 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.899909973 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.900015116 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.900023937 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.900032043 CEST	58629	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.900037050 CEST	443	58629	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.902075052 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.902086973 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.902159929 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.902271032 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.902283907 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.906433105 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.906708002 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.906785011 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.906785011 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.906785011 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.907847881 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.908005953 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.908142090 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.908142090 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.908330917 CEST	58625	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.908338070 CEST	443	58625	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.909173965 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.909187078 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.909838915 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.909845114 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.909854889 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.909888029 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.909949064 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.909961939 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:21.910115004 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:21.910124063 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.209765911 CEST	58626	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.209779024 CEST	443	58626	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.445813894 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.446347952 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.446368933 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.446974993 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.446981907 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.505381107 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.505968094 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.505979061 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.506587982 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.506592989 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.519771099 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.520181894 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.520207882 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.520652056 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.520658970 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.542505026 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.542540073 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.542587042 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.542606115 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.542810917 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.542834044 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.542848110 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.542860031 CEST	58634	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.542865992 CEST	443	58634	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.545664072 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.545686007 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.545749903 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.545918941 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.545928001 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.545942068 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.546303034 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.546318054 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.546838045 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.546844006 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.604408026 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.604863882 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.604877949 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.605317116 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.605321884 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.607727051 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.607770920 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.607819080 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.608009100 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.608019114 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.608027935 CEST	58630	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.608032942 CEST	443	58630	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.610666037 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.610702991 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.610802889 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.611140966 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.611160994 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.618504047 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.618525028 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.618587971 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.618597984 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.618648052 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.618818045 CEST	58633	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.618829966 CEST	443	58633	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.621361971 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.621377945 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.621681929 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.621812105 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.621824980 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.644661903 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.645217896 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.645348072 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.645394087 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.645399094 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.645411015 CEST	58632	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.645415068 CEST	443	58632	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.647794962 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.647805929 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.647855997 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.647969961 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.647978067 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.742005110 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.742060900 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.742103100 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.742146015 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.742292881 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.742301941 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.742314100 CEST	58631	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.742319107 CEST	443	58631	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.745079041 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.745098114 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:22.745153904 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.745335102 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:22.745345116 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.192504883 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.192925930 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.192944050 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.193460941 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.193465948 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.225728989 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.226294994 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.226310015 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.226717949 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.226722002 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.231628895 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.232162952 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.232183933 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.232470036 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.232475042 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.293376923 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.293555975 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.293613911 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.293618917 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.293654919 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.293756962 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.293770075 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.293781042 CEST	58635	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.293786049 CEST	443	58635	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.296757936 CEST	58640	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.296786070 CEST	443	58640	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.296838045 CEST	58640	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.297025919 CEST	58640	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.297039986 CEST	443	58640	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.311817884 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.312197924 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.312215090 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.312738895 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.312753916 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.320837021 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.321290016 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.321347952 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.321436882 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.321444988 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.321454048 CEST	58636	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.321458101 CEST	443	58636	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.323745966 CEST	58641	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.323784113 CEST	443	58641	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.324132919 CEST	58641	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.324233055 CEST	58641	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.324250937 CEST	443	58641	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.326818943 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.326992035 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.327078104 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.327078104 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.327097893 CEST	58637	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.327106953 CEST	443	58637	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.329068899 CEST	58642	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.329081059 CEST	443	58642	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.329147100 CEST	58642	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.329237938 CEST	58642	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.329246998 CEST	443	58642	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.367898941 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.368221045 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.368238926 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.368710041 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.368714094 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.432939053 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.433077097 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.433310032 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.433340073 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.433346987 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.433358908 CEST	58638	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.433362007 CEST	443	58638	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.436549902 CEST	58643	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.436562061 CEST	443	58643	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.436657906 CEST	58643	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.436944008 CEST	58643	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.436960936 CEST	443	58643	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.462973118 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.463241100 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.463270903 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.463282108 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.463305950 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.463339090 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.463345051 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.463351965 CEST	58639	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.463355064 CEST	443	58639	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.467410088 CEST	58644	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.467439890 CEST	443	58644	13.107.246.45	192.168.2.4
Oct 7, 2024 16:52:23.469351053 CEST	58644	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.469351053 CEST	58644	443	192.168.2.4	13.107.246.45
Oct 7, 2024 16:52:23.469392061 CEST	443	58644	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 16:50:54.660737991 CEST	53	58854	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:55.065104008 CEST	53	62849	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:55.984920025 CEST	53	50727	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:56.190581083 CEST	50822	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:56.190849066 CEST	54584	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:56.197390079 CEST	53	50822	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:56.197913885 CEST	53	54584	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.072304010 CEST	52716	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.079284906 CEST	53	52716	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.097897053 CEST	49395	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.105310917 CEST	53	49395	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.122874022 CEST	56353	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.127902031 CEST	54446	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.133398056 CEST	53	56353	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.135940075 CEST	53	54446	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.155462027 CEST	50889	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.163829088 CEST	53	50889	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:58.168462038 CEST	50231	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:58.175839901 CEST	53	50231	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:59.318934917 CEST	61558	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:59.319453001 CEST	57474	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:50:59.326189995 CEST	53	61558	1.1.1.1	192.168.2.4
Oct 7, 2024 16:50:59.327198982 CEST	53	57474	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:09.410834074 CEST	63480	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:09.411139965 CEST	56659	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:09.418833971 CEST	53	63480	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:09.419020891 CEST	53	56659	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:12.357414961 CEST	53	53498	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:12.358562946 CEST	53	58840	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:12.398439884 CEST	62123	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:12.398439884 CEST	63052	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:51:12.406480074 CEST	53	62123	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:12.406526089 CEST	53	63052	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:13.338310957 CEST	138	138	192.168.2.4	192.168.2.255
Oct 7, 2024 16:51:14.935688972 CEST	53	63520	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:15.789902925 CEST	53	53306	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:17.239265919 CEST	53	59664	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:33.934997082 CEST	53	52675	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:53.806605101 CEST	53	54455	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:54.458893061 CEST	53	54963	1.1.1.1	192.168.2.4
Oct 7, 2024 16:51:56.442018032 CEST	53	60048	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:04.837753057 CEST	54820	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:04.838135004 CEST	55190	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:04.846508026 CEST	53875	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:04.846728086 CEST	51701	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:04.847018957 CEST	53	55190	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:04.847075939 CEST	53	54820	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:04.853709936 CEST	53	53875	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:04.854398966 CEST	53	51701	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:13.021673918 CEST	60018	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:13.021869898 CEST	55657	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:13.028572083 CEST	53	60018	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:13.029728889 CEST	53	55657	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:14.326708078 CEST	57125	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:14.326895952 CEST	63795	53	192.168.2.4	1.1.1.1
Oct 7, 2024 16:52:14.334999084 CEST	53	63795	1.1.1.1	192.168.2.4
Oct 7, 2024 16:52:14.335387945 CEST	53	57125	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 16:50:56.190581083 CEST	192.168.2.4	1.1.1.1	0xb39	Standard query (0)	icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:56.190849066 CEST	192.168.2.4	1.1.1.1	0x4544	Standard query (0)	icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:50:58.072304010 CEST	192.168.2.4	1.1.1.1	0x4dbf	Standard query (0)	setup.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.097897053 CEST	192.168.2.4	1.1.1.1	0x3106	Standard query (0)	setup.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:50:58.122874022 CEST	192.168.2.4	1.1.1.1	0xa298	Standard query (0)	ckdatabasews.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.127902031 CEST	192.168.2.4	1.1.1.1	0xae32	Standard query (0)	ckdatabasews.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:50:58.155462027 CEST	192.168.2.4	1.1.1.1	0xb0f1	Standard query (0)	cvws.icloud-content.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.168462038 CEST	192.168.2.4	1.1.1.1	0x8363	Standard query (0)	cvws.icloud-content.com	65	IN (0x0001)	false
Oct 7, 2024 16:50:59.318934917 CEST	192.168.2.4	1.1.1.1	0x3611	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:59.319453001 CEST	192.168.2.4	1.1.1.1	0xeba4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 16:51:09.410834074 CEST	192.168.2.4	1.1.1.1	0x6897	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.411139965 CEST	192.168.2.4	1.1.1.1	0x3d9d	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:51:12.398439884 CEST	192.168.2.4	1.1.1.1	0xb0aa	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:51:12.398439884 CEST	192.168.2.4	1.1.1.1	0xaa2f	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.837753057 CEST	192.168.2.4	1.1.1.1	0x2a11	Standard query (0)	setup.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.838135004 CEST	192.168.2.4	1.1.1.1	0xb324	Standard query (0)	setup.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:52:04.846508026 CEST	192.168.2.4	1.1.1.1	0x7d6e	Standard query (0)	cvws.icloud-content.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.846728086 CEST	192.168.2.4	1.1.1.1	0x8a8d	Standard query (0)	cvws.icloud-content.com	65	IN (0x0001)	false
Oct 7, 2024 16:52:13.021673918 CEST	192.168.2.4	1.1.1.1	0xdb49	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.021869898 CEST	192.168.2.4	1.1.1.1	0x663e	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false
Oct 7, 2024 16:52:14.326708078 CEST	192.168.2.4	1.1.1.1	0x7f00	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.326895952 CEST	192.168.2.4	1.1.1.1	0x7753	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 16:50:56.197390079 CEST	1.1.1.1	192.168.2.4	0xb39	No error (0)	icloud.com		17.253.144.10	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.079284906 CEST	1.1.1.1	192.168.2.4	0x4dbf	No error (0)	setup.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.105310917 CEST	1.1.1.1	192.168.2.4	0x3106	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.66	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.128683090 CEST	1.1.1.1	192.168.2.4	0x512	No error (0)	gateway.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.icloud.com	ckdatabasews.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.133398056 CEST	1.1.1.1	192.168.2.4	0xa298	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.135940075 CEST	1.1.1.1	192.168.2.4	0xae32	No error (0)	ckdatabasews.icloud.com	ckdatabasews.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.33	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.34	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.38	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.40	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.32	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.163829088 CEST	1.1.1.1	192.168.2.4	0xb0f1	No error (0)	cvws.apple-dns.net		17.248.209.42	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:58.175839901 CEST	1.1.1.1	192.168.2.4	0x8363	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:50:59.326189995 CEST	1.1.1.1	192.168.2.4	0x3611	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:50:59.327198982 CEST	1.1.1.1	192.168.2.4	0xeba4	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.418833971 CEST	1.1.1.1	192.168.2.4	0x6897	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:09.419020891 CEST	1.1.1.1	192.168.2.4	0x3d9d	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406480074 CEST	1.1.1.1	192.168.2.4	0xb0aa	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.69	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:12.406526089 CEST	1.1.1.1	192.168.2.4	0xaa2f	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:13.382889032 CEST	1.1.1.1	192.168.2.4	0x12b1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:13.382889032 CEST	1.1.1.1	192.168.2.4	0x12b1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:51:50.243565083 CEST	1.1.1.1	192.168.2.4	0xc9e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:51:50.243565083 CEST	1.1.1.1	192.168.2.4	0xc9e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847018957 CEST	1.1.1.1	192.168.2.4	0xb324	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.847075939 CEST	1.1.1.1	192.168.2.4	0x2a11	No error (0)	setup.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.36	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.41	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.33	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.40	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.42	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.39	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.853709936 CEST	1.1.1.1	192.168.2.4	0x7d6e	No error (0)	cvws.apple-dns.net		17.248.209.32	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:04.854398966 CEST	1.1.1.1	192.168.2.4	0x8a8d	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:07.800997972 CEST	1.1.1.1	192.168.2.4	0xb35c	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:07.800997972 CEST	1.1.1.1	192.168.2.4	0xb35c	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:07.800997972 CEST	1.1.1.1	192.168.2.4	0xb35c	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.028572083 CEST	1.1.1.1	192.168.2.4	0xdb49	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:13.029728889 CEST	1.1.1.1	192.168.2.4	0x663e	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:14.334999084 CEST	1.1.1.1	192.168.2.4	0x7753	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.69	A (IP address)	IN (0x0001)	false
Oct 7, 2024 16:52:14.335387945 CEST	1.1.1.1	192.168.2.4	0x7f00	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

icloud.com

https:

setup.icloud.com

feedbackws.icloud.com

fs.microsoft.com

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	17.253.144.10	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:50:56 UTC	677	OUT	GET /v/2tqVpt2Lj2_CSM8CTbaGkQ HTTP/1.1 Host: icloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:50:56 UTC	647	IN	HTTP/1.1 301 Moved Permanently Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:50:56 GMT Content-Length: 17 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cache-Control: max-age=3600 Location: https://www.icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ via: 49ed01272a7e88a19263fc26c7d05c4e:a9b158f08e34092bde5bcbf6a478f1ae:usuyk1, https/1.1 usewr1-edge-bx-021.ts.apple.com (acdn/255.14450) X-Apple-Request-UUID: d6a80cdd-96ae-4c33-9931-e29d29995989 access-control-expose-headers: X-Apple-Request-UUID,Via Age: 0 Connection: close X-Cache: miss CDNUUID: a3a6c3cb-a682-46ce-90e0-78c647bbb4eb-20140028085
2024-10-07 14:50:56 UTC	17	IN	Data Raw: 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 Data Ascii: Moved Permanently

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49746	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:50:59 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=8b7c3f99-e038-4c8b-af54-ab46989ae81e HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:50:59 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:50:59 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:15700801:st57p57ic-qukt06060301:8001:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 57 via: xrail:st53p00ic-qujn11073001.me.com:8301:24R492:grp61,631194250daa17e24277dea86cf30319:06b1f7d3a40f45adfe60f8d8da135f7e:defra2 X-Apple-Request-UUID: eef44b78-fd7d-40d7-8e68-690fbec6c5ef access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 101
2024-10-07 14:50:59 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49753	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:00 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=8b7c3f99-e038-4c8b-af54-ab46989ae81e HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:00 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:00 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:45300803:pv51p53ic-qukt21030501:8003:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 53 via: xrail:pv54p00ic-qujn03151502.me.com:8301:24R492:grp42,631194250daa17e24277dea86cf30319:b607d1d4decbb867aff55f26f3353382:defra2 X-Apple-Request-UUID: a1d9d2de-faff-4c1e-9e34-3e3ac1bacf6d access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 144
2024-10-07 14:51:00 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49755	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:02 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 14:51:02 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=179625 Date: Mon, 07 Oct 2024 14:51:02 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49763	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 14:51:03 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=179611 Date: Mon, 07 Oct 2024 14:51:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 14:51:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49789	17.248.209.74	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:10 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 3359 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:10 UTC	3359	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 22 3a 34 32 31 2c 22 75 70 64 61 74 65 53 6f 75 72 63 65 22 3a 22 76 61 6c 69 64 61 74 65 55 73 65 72 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 30 37 20 32 30 32 34 20 31 30 3a 35 31 3a 30 30 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 38 33 31 32 36 36 30 38 31 31 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 73 74 61 74 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 2e 75 70 64 61 74 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 69 73 53 65 73 73 69 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 Data Ascii: {"stats":[{"httpStatusCode":421,"updateSource":"validateUser","time":"Mon Oct 07 2024 10:51:00 GMT-0400 (Eastern Daylight Time) (1728312660811)","timezone":"Eastern Daylight Time","statName":"cloudos2.updateConfiguration","isSessionAuthenticated":false,"a
2024-10-07 14:51:10 UTC	849	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:10 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p164-feedbackws-5db4c5787d-j8jl5:prod-p164-feedbackws-5db4c5787d-j8jl5:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 164 via: xrail:icloud-xrail-group164-ext-577595486c-hh9x6:8301:24R492:grp164,631194250daa17e24277dea86cf30319:e4a557aa469d26282f7f670b5e68c248:defra2 X-Apple-Request-UUID: e9f0fa2f-8d9d-45c4-bbb5-cc1de51c7291 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 100
2024-10-07 14:51:10 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49809	17.248.209.69	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:13 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:13 UTC	726	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:13 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p147-feedbackws-78c5998658-b6wmz:prod-p147-feedbackws-78c5998658-b6wmz:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 147 via: xrail:icloud-xrail-group147-ext-7d4d86785d-5dj72:8301:24R492:grp147,631194250daa17e24277dea86cf30319:27b9fac05bf2d0eca6e8272b04956961:defra2 X-Apple-Request-UUID: 6fe0e7ee-36c8-491c-8ce7-98e5b3027c2a access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 85
2024-10-07 14:51:13 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	53128	17.248.209.74	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:17 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 2599 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:17 UTC	2599	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 30 37 20 32 30 32 34 20 31 30 3a 35 31 3a 31 34 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 38 33 31 32 36 37 34 35 37 37 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 72 65 64 69 72 65 63 74 54 69 6d 65 22 3a 36 35 38 2c 22 61 70 70 43 61 63 68 65 54 69 6d 65 22 3a 36 35 38 2c 22 64 6e 73 4c 6f 6f 6b 75 70 54 69 6d 65 22 3a 31 30 2c 22 74 63 70 54 69 6d 65 22 3a 38 30 30 2c 22 73 65 63 75 72 65 43 6f 6e 6e 65 63 74 69 6f 6e 53 74 61 72 74 22 3a 38 30 30 2c 22 70 72 6f 63 65 73 73 69 6e 67 54 69 6d 65 22 3a 31 37 32 39 33 2c 22 74 69 6d Data Ascii: {"stats":[{"time":"Mon Oct 07 2024 10:51:14 GMT-0400 (Eastern Daylight Time) (1728312674577)","timezone":"Eastern Daylight Time","redirectTime":658,"appCacheTime":658,"dnsLookupTime":10,"tcpTime":800,"secureConnectionStart":800,"processingTime":17293,"tim
2024-10-07 14:51:18 UTC	795	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:18 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:32604201:mr55p26ic-qukt01191301:20201:2425B33:30b3ccd28d8b access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 26 via: xrail:mr42p00ic-qujn08143002.me.com:8301:24R492:grp21,631194250daa17e24277dea86cf30319:a2a5f639517ae8733102ce86f71e4351:defra2 X-Apple-Request-UUID: 9f825e44-7d4b-4b02-a66b-47e1e9bea031 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 140
2024-10-07 14:51:18 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	58332	17.248.209.69	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:18 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:19 UTC	672	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:12502201:st43p25ic-qukt02161102:20201:2425B33:30b3ccd28d8b Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 25 via: xrail:st53p00ic-qujn13040102.me.com:8301:24R492:grp62,631194250daa17e24277dea86cf30319:7be7101908dc9cba830e499b12df8036:defra2 X-Apple-Request-UUID: 4155b9d8-c4ef-4305-869b-52351d4b8c44 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 98
2024-10-07 14:51:19 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	58376	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:37 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=4418704d-e46f-4d95-8832-40b16fc5d063 HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:37 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:37 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:35600901:mr51p56ic-qukt03091902:8001:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 56 via: xrail:mr42p00ic-qujn08141702.me.com:8301:24R492:grp21,631194250daa17e24277dea86cf30319:d7f1a24959c70d807cd8ea5d6bb7b874:defra2 X-Apple-Request-UUID: 6ea306ff-2ab9-4f86-98ca-a1fb55fc6bb7 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 139
2024-10-07 14:51:37 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	58380	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:38 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=4418704d-e46f-4d95-8832-40b16fc5d063 HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:38 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:38 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:37000903:mr30p70ic-hygg09040301:8003:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 70 via: xrail:mr42p00ic-qujn08143002.me.com:8301:24R492:grp21,631194250daa17e24277dea86cf30319:d7f1a24959c70d807cd8ea5d6bb7b874:defra2 X-Apple-Request-UUID: 978e8991-3888-4a2f-b0f5-02f18309a0c4 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 138
2024-10-07 14:51:38 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	58390	17.248.209.74	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:43 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 6928 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:43 UTC	6928	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 68 74 74 70 4d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 32 30 30 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 69 63 6c 6f 75 64 2e 63 6f 6d 22 2c 22 73 65 72 76 69 63 65 4e 61 6d 65 22 3a 22 77 77 77 22 2c 22 63 6c 69 65 6e 74 54 69 6d 69 6e 67 22 3a 36 30 30 2c 22 6e 65 74 5f 75 6e 63 6f 6d 70 72 65 73 73 65 64 52 65 73 70 6f 6e 73 65 53 69 7a 65 22 3a 22 33 31 34 38 22 2c 22 74 69 6d 65 64 4f 75 74 22 3a 66 61 6c 73 65 2c 22 75 72 6c 50 61 74 68 22 3a 22 2f 6c 6f 63 61 6c 65 73 2f 35 2f 65 6e 2d 55 53 2e 6a 73 6f 6e 22 2c 22 73 65 72 76 65 72 48 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 69 63 6c 6f 75 64 2e 63 6f 6d 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 30 37 Data Ascii: {"stats":[{"httpMethod":"GET","statusCode":200,"hostname":"www.icloud.com","serviceName":"www","clientTiming":600,"net_uncompressedResponseSize":"3148","timedOut":false,"urlPath":"/locales/5/en-US.json","serverHostname":"www.icloud.com","time":"Mon Oct 07
2024-10-07 14:51:44 UTC	833	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:44 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p102-feedbackws-fcfcffcb6-28chz:prod-p102-feedbackws-fcfcffcb6-28chz:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 102 via: xrail:ms15p00ic-qujn16141902.me.com:8301:24R492:grp70,631194250daa17e24277dea86cf30319:54fb2204ab4d7350ba489f16a77a28ad:defra2 X-Apple-Request-UUID: 4c208e76-449d-4258-8cdd-e881de940813 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 142
2024-10-07 14:51:44 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	58394	17.248.209.69	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:45 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:51:45 UTC	710	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:51:45 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p115-feedbackws-94dd4b996-l5sx6:prod-p115-feedbackws-94dd4b996-l5sx6:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 115 via: xrail:st53p00ic-qujn11071102.me.com:8301:24R492:grp62,631194250daa17e24277dea86cf30319:a859848722ee6af70eb158645f082408:defra2 X-Apple-Request-UUID: 1fd97fb4-8d46-4bb3-bf02-ccdf4afdde8b access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 98
2024-10-07 14:51:45 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	58406	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:50 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:51 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:50 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sun, 06 Oct 2024 16:59:23 GMT ETag: "0x8DCE6283A3FA58B" x-ms-request-id: 86eceaf5-401e-00a3-6fa2-188b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145150Z-1657d5bbd48brl8we3nu8cxwgn00000003vg00000000wpkz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:51 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 14:51:51 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	58416	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:52 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:52 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145152Z-1657d5bbd48vlsxxpe15ac3q7n00000003mg00000000evbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:52 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	58417	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:52 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:52 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145152Z-1657d5bbd48762wn1qw4s5sd3000000003bg000000012hg8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:52 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	58418	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:52 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:52 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:52 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145152Z-1657d5bbd48sdh4cyzadbb374800000003gg00000000auye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:52 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	58415	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:52 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:52 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145152Z-1657d5bbd48vhs7r2p1ky7cs5w000000041g000000000ker x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:52 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	58414	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:52 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:52 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145152Z-1657d5bbd48cpbzgkvtewk0wu000000003qg00000000m5nn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:52 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	58425	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:53 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:53 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145153Z-1657d5bbd48wd55zet5pcra0cg00000003k000000000p5ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:53 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	58426	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:53 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:53 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145153Z-1657d5bbd48xsz2nuzq4vfrzg800000003k0000000006dc5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:53 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	58424	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:53 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:53 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145153Z-1657d5bbd4824mj9d6vp65b6n400000003t000000000s9pe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:53 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	58427	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:53 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:53 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145153Z-1657d5bbd48vlsxxpe15ac3q7n00000003hg00000000qr74 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:53 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	58428	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:53 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:53 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:53 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145153Z-1657d5bbd4824mj9d6vp65b6n400000003ug00000000k4y8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:53 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	58436	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:54 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145154Z-1657d5bbd48jwrqbupe3ktsx9w00000003sg00000000vgu9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	58433	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:54 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145154Z-1657d5bbd48cpbzgkvtewk0wu000000003ng00000000v19m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	58437	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:54 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:54 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145154Z-1657d5bbd48cpbzgkvtewk0wu000000003tg000000004n9m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:54 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	58434	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:54 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:54 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145154Z-1657d5bbd48tnj6wmberkg2xy800000003r000000000fh2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:54 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	58435	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:54 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:54 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:54 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145154Z-1657d5bbd48dfrdj7px744zp8s000000038g00000000yx8a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:54 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	58446	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd4824mj9d6vp65b6n400000003v000000000evpt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	58443	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd482tlqpvyz9e93p5400000003sg000000008r98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	58447	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48wd55zet5pcra0cg00000003kg00000000kzz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	58444	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48xlwdx82gahegw4000000003w0000000009g7b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	58445	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48vlsxxpe15ac3q7n00000003r0000000000t1n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	58453	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48tqvfc1ysmtbdrg000000003k000000000688w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	58454	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:55 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48cpbzgkvtewk0wu000000003ng00000000v1cu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:55 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	58456	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48762wn1qw4s5sd3000000003kg000000003nun x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	58455	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48q6t9vvmrkd293mg00000003ng00000000bdb9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	58457	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:55 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:55 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145155Z-1657d5bbd48wd55zet5pcra0cg00000003f000000000zu0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	58460	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:56 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:56 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145156Z-1657d5bbd482lxwq1dp2t1zwkc00000003b000000000qewx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	58461	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:56 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145156Z-1657d5bbd48xlwdx82gahegw4000000003wg000000006tfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	58463	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:56 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:56 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145156Z-1657d5bbd48sdh4cyzadbb374800000003eg00000000kybs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	58462	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:56 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:56 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145156Z-1657d5bbd48762wn1qw4s5sd3000000003eg00000000sduf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	58464	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:56 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:56 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145156Z-1657d5bbd48sqtlf1huhzuwq7000000003dg0000000082se x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	58468	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:57 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:57 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145157Z-1657d5bbd48xlwdx82gahegw4000000003ug00000000gq4t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	58471	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:57 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:57 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145157Z-1657d5bbd48qjg85buwfdynm5w00000003mg00000000yst1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	58465	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:57 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:57 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145157Z-1657d5bbd48sdh4cyzadbb374800000003f000000000h4hn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	58466	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:57 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:57 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145157Z-1657d5bbd482krtfgrg72dfbtn00000003c000000000fyfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	58467	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:57 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:57 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 92e59db7-001e-002b-6700-1799f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145157Z-1657d5bbd4824mj9d6vp65b6n400000003vg00000000d6c5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	58473	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:58 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:58 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145158Z-1657d5bbd482tlqpvyz9e93p5400000003s000000000adqn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:58 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	58475	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:58 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:58 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145158Z-1657d5bbd487nf59mzf5b3gk8n000000036g00000000s9gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:58 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	58476	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:58 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:58 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145158Z-1657d5bbd48762wn1qw4s5sd3000000003fg00000000mxsy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:58 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	58472	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:58 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:58 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145158Z-1657d5bbd48t66tjar5xuq22r800000003h000000000vkx0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:58 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	58474	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:58 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:58 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145158Z-1657d5bbd48xlwdx82gahegw4000000003v000000000e9mg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:58 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	58481	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:59 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:59 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145159Z-1657d5bbd48f7nlxc7n5fnfzh000000003a000000000a2f5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:59 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	58482	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:59 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:59 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145159Z-1657d5bbd48cpbzgkvtewk0wu000000003qg00000000m62m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:59 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	58480	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:59 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:59 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145159Z-1657d5bbd4824mj9d6vp65b6n400000003w0000000009w1b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:59 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	58478	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:59 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:59 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145159Z-1657d5bbd48qjg85buwfdynm5w00000003m0000000010utt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:59 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	58479	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:51:59 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:51:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:51:59 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145159Z-1657d5bbd48vlsxxpe15ac3q7n00000003f000000000z3m8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:51:59 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	58486	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:00 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145200Z-1657d5bbd482tlqpvyz9e93p5400000003kg00000000y7kg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	58485	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:00 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:00 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145200Z-1657d5bbd4824mj9d6vp65b6n400000003u000000000n9mt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:00 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	58487	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:00 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145200Z-1657d5bbd48sdh4cyzadbb374800000003c000000000vekk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	58488	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:00 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145200Z-1657d5bbd48qjg85buwfdynm5w00000003r000000000gnyw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	58489	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:00 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:00 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145200Z-1657d5bbd48xsz2nuzq4vfrzg800000003d000000000wysq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:00 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	58493	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48sqtlf1huhzuwq7000000003d000000000aemm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	58492	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd482lxwq1dp2t1zwkc00000003ag00000000t1z2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	58491	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48xdq5dkwwugdpzr000000003y000000000k775 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	58494	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48tqvfc1ysmtbdrg000000003bg000000012mrc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	58495	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48sdh4cyzadbb374800000003eg00000000kypz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	58498	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48qjg85buwfdynm5w00000003pg00000000r6uq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	58497	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48f7nlxc7n5fnfzh0000000036g00000000uw66 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:01 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	58499	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:01 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:01 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145201Z-1657d5bbd48q6t9vvmrkd293mg00000003h000000000v6sx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	58501	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:02 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:02 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145202Z-1657d5bbd48cpbzgkvtewk0wu000000003u00000000026tb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	58500	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:02 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145202Z-1657d5bbd48sdh4cyzadbb374800000003b000000000zg2a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	58504	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:02 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:02 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145202Z-1657d5bbd4824mj9d6vp65b6n400000003ug00000000k5q6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	58503	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:02 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:02 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145202Z-1657d5bbd48sqtlf1huhzuwq7000000003eg000000003d9b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	58502	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:02 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:02 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145202Z-1657d5bbd48qjg85buwfdynm5w00000003p000000000u69y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:02 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	58506	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:03 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:03 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145203Z-1657d5bbd48xlwdx82gahegw4000000003sg00000000u14u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:03 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	58507	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:03 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:03 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145203Z-1657d5bbd48xdq5dkwwugdpzr000000003xg00000000p5zg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:03 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	58509	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:03 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:03 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145203Z-1657d5bbd4824mj9d6vp65b6n400000003u000000000n9ut x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:03 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	58511	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:03 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:03 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145203Z-1657d5bbd48vhs7r2p1ky7cs5w0000000400000000007sbn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:03 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	58510	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:03 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:03 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: bfab55ab-401e-0015-6202-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145203Z-1657d5bbd48wd55zet5pcra0cg00000003qg000000001hz8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:03 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	58516	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:04 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:04 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145204Z-1657d5bbd48qjg85buwfdynm5w00000003qg00000000mp2c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:04 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	58517	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:04 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:04 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 3b7b7106-501e-0064-43e7-161f54000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145204Z-1657d5bbd48vhs7r2p1ky7cs5w00000003wg00000000t2dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:04 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	58518	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:04 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 3c7823fd-401e-0015-0c60-170e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145204Z-1657d5bbd48gqrfwecymhhbfm800000002ag00000000zw7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:04 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	58519	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:04 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:04 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 2f576d96-401e-0047-3902-178597000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145204Z-1657d5bbd48xlwdx82gahegw4000000003tg00000000puk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:04 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	58522	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:04 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:04 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: dfb96d6a-f01e-003f-17e5-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145204Z-1657d5bbd48xsz2nuzq4vfrzg800000003dg00000000umky x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:04 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	58523	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: f5ee0945-901e-0083-4202-17bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145205Z-1657d5bbd48cpbzgkvtewk0wu000000003rg00000000dzeu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	58524	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 0607cd43-401e-0078-1b00-174d34000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145205Z-1657d5bbd48jwrqbupe3ktsx9w00000003wg000000008kyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:05 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	58525	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:05 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: a5ff6bd9-301e-005d-3af2-16e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145205Z-1657d5bbd48cpbzgkvtewk0wu000000003p000000000szkh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:05 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	58527	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: c2f609cb-201e-0003-75fd-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145205Z-1657d5bbd48f7nlxc7n5fnfzh000000003b0000000005rdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:05 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	58526	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 0c165d1d-a01e-000d-7dfe-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145205Z-1657d5bbd48wd55zet5pcra0cg00000003f000000000zunq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:05 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	58530	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:05 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=783a6cf1-c049-485a-86df-8b929774f3e2 HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:06 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:05 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:46900303:pv48p69ic-hygg12051501:8003:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 69 via: xrail:pv54p00ic-qujn03151502.me.com:8301:24R492:grp42,631194250daa17e24277dea86cf30319:8345617a73e1232edf849ddfb252cc0b:defra2 X-Apple-Request-UUID: 056dd09b-e209-4448-b4ad-2768a7789928 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 143
2024-10-07 14:52:06 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	58534	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:06 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:06 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 33b4d0ae-a01e-0032-35ff-161949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145206Z-1657d5bbd48vlsxxpe15ac3q7n00000003kg00000000mt4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:06 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	58536	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:06 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:06 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 960edd56-701e-005c-4100-17bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145206Z-1657d5bbd487nf59mzf5b3gk8n000000035g00000000uk2r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:06 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	58538	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:06 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:06 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 8a5fd43d-c01e-0066-4506-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145206Z-1657d5bbd48sqtlf1huhzuwq7000000003d000000000aeyf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:06 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	58537	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:06 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:06 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: b738acd5-401e-0067-1502-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145206Z-1657d5bbd48tqvfc1ysmtbdrg000000003e000000000smev x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:06 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	58539	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:06 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:06 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:06 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 0480ed94-801e-00ac-5102-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145206Z-1657d5bbd48vlsxxpe15ac3q7n00000003gg00000000uwgm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:06 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	58542	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: b72ef555-401e-0067-78fe-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd48jwrqbupe3ktsx9w00000003vg00000000czvt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	58543	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: db28c537-d01e-0065-47fe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd48sqtlf1huhzuwq7000000003bg00000000k574 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	58541	17.248.209.70	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	688	OUT	POST /setup/ws/1/validate?clientBuildNumber=2425Project45&clientMasteringNumber=2425B25&clientId=783a6cf1-c049-485a-86df-8b929774f3e2 HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:07 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1380 Connection: close X-Responding-Instance: setupservice:36600303:mr30p66ic-tyfb03080701:8003:2425B610:23a8b9d81896 Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 66 via: xrail:mr42p00ic-qujn04130702.me.com:8301:24R492:grp23,631194250daa17e24277dea86cf30319:4ce1e954b411283f4b61095dad047722:defra2 X-Apple-Request-UUID: 111d9067-af52-4958-a4c4-dabd3e4c9cee access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 141
2024-10-07 14:52:07 UTC	1380	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 45 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 4a 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"EST","region":"NJ"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	58545	17.248.209.74	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 4426 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:07 UTC	4426	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 68 74 74 70 4d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 32 30 30 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 69 63 6c 6f 75 64 2e 63 6f 6d 22 2c 22 73 65 72 76 69 63 65 4e 61 6d 65 22 3a 22 77 77 77 22 2c 22 63 6c 69 65 6e 74 54 69 6d 69 6e 67 22 3a 32 30 30 2c 22 6e 65 74 5f 75 6e 63 6f 6d 70 72 65 73 73 65 64 52 65 73 70 6f 6e 73 65 53 69 7a 65 22 3a 22 33 31 34 38 22 2c 22 74 69 6d 65 64 4f 75 74 22 3a 66 61 6c 73 65 2c 22 75 72 6c 50 61 74 68 22 3a 22 2f 6c 6f 63 61 6c 65 73 2f 35 2f 65 6e 2d 55 53 2e 6a 73 6f 6e 22 2c 22 73 65 72 76 65 72 48 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 69 63 6c 6f 75 64 2e 63 6f 6d 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 30 37 Data Ascii: {"stats":[{"httpMethod":"GET","statusCode":200,"hostname":"www.icloud.com","serviceName":"www","clientTiming":200,"net_uncompressedResponseSize":"3148","timedOut":false,"urlPath":"/locales/5/en-US.json","serverHostname":"www.icloud.com","time":"Mon Oct 07
2024-10-07 14:52:07 UTC	794	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:12703201:st41p27ic-ztfb07113701:20201:2425B33:30b3ccd28d8b access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 27 via: xrail:st53p00ic-qujn12071501.me.com:8301:24R492:grp63,631194250daa17e24277dea86cf30319:ebe1e21d4a10df976fd8d3751edb5618:defra2 X-Apple-Request-UUID: 05914e96-beb4-4468-b2ba-742a5470c3d5 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 99
2024-10-07 14:52:07 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	58547	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: 84e7aa3f-c01e-008e-74ff-167381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd48tqvfc1ysmtbdrg000000003gg00000000cqz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	58546	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: cb759915-201e-003f-5f03-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd482krtfgrg72dfbtn00000003a000000000rzrr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	58548	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: b6c21a8e-c01e-008e-115a-177381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd482lxwq1dp2t1zwkc00000003b000000000qfw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	58549	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 76165599-601e-000d-1a02-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd48q6t9vvmrkd293mg00000003gg00000000w9ef x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	58550	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:07 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:07 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:07 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 29f28342-e01e-003c-5d00-17c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145207Z-1657d5bbd48jwrqbupe3ktsx9w00000003t000000000tmva x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:07 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	58551	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:08 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: a9a45936-c01e-00a1-54f1-167e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145208Z-1657d5bbd48xsz2nuzq4vfrzg800000003e000000000u6mq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:08 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	58553	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:08 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: 173e0f62-801e-00a3-24fe-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145208Z-1657d5bbd48sqtlf1huhzuwq7000000003bg00000000k5bb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:08 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	58552	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:08 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: 6f1c5b1d-901e-0048-485a-17b800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145208Z-1657d5bbd48xsz2nuzq4vfrzg800000003c000000000zdgk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:08 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	58555	17.248.209.69	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:10 UTC	721	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p44-feedbackws-test-5fdc7677b8-hftv2:prod-p44-feedbackws-test-5fdc7677b8-hftv2:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 44 via: xrail:mr47p00ic-qujn03090301.me.com:8301:24R492:grp20,631194250daa17e24277dea86cf30319:7be7101908dc9cba830e499b12df8036:defra2 X-Apple-Request-UUID: af025645-f7e1-4b1c-a2b0-21f0e7e0f7c2 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 1029
2024-10-07 14:52:10 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	58557	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:08 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 6bee43b5-001e-00a2-2106-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145208Z-1657d5bbd4824mj9d6vp65b6n400000003ug00000000k659 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:08 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	58558	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:08 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:08 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:08 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 04600955-801e-00ac-55f4-16fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145208Z-1657d5bbd48qjg85buwfdynm5w00000003s000000000d9vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:08 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	58559	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:09 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:09 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:09 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 4035d6e2-a01e-0002-4602-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145209Z-1657d5bbd482tlqpvyz9e93p5400000003t0000000006a6e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:09 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	58565	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:11 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:11 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fbb49b00-e01e-00aa-4806-17ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145211Z-1657d5bbd48jwrqbupe3ktsx9w00000003wg000000008m9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	58563	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:11 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:11 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:11 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: fcca05a5-501e-00a0-3202-179d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145211Z-1657d5bbd48vhs7r2p1ky7cs5w00000003y000000000k03c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:11 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	58560	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:11 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:11 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:11 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: 62f7f1ae-f01e-0096-4d0c-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145211Z-1657d5bbd48sqtlf1huhzuwq70000000039g00000000tv24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:11 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	58562	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:11 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:11 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:11 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 31868579-401e-008c-0af2-1686c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145211Z-1657d5bbd482lxwq1dp2t1zwkc00000003eg000000005t1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:11 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	58561	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:11 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:11 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:11 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 87e26173-201e-0051-15e7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145211Z-1657d5bbd48xdq5dkwwugdpzr000000003zg00000000ad9d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:11 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	58567	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: 7d21ea5d-701e-0098-0502-17395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd48jwrqbupe3ktsx9w00000003v000000000fnk4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:12 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	58570	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: a18d9b1d-601e-0002-1f03-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd487nf59mzf5b3gk8n000000037g00000000mnyc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:12 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	58566	13.107.246.45	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 08bf7a15-f01e-0020-7706-17956b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd482tlqpvyz9e93p5400000003u0000000001uwz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:12 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	58569	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 77012b0e-b01e-0097-0bff-164f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd48t66tjar5xuq22r800000003mg00000000gr1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:12 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	58568	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:12 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: b6fa471e-401e-0067-43e5-1609c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd48tqvfc1ysmtbdrg000000003m0000000001dm5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:12 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	58575	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 76dbcc6a-501e-0035-36ed-16c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd48wd55zet5pcra0cg00000003g000000000wyfz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	58572	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: d4fd285a-d01e-005a-06ed-167fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd48wd55zet5pcra0cg00000003mg00000000ezzp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	58574	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: c9f5ea47-201e-0071-33fe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145213Z-1657d5bbd487nf59mzf5b3gk8n000000036000000000tkvm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	58573	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:12 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:12 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 4d5cca78-701e-0021-6ae5-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145212Z-1657d5bbd4824mj9d6vp65b6n400000003s000000000wcz1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	58580	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:13 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:13 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: 8a56303a-c01e-0066-0f01-17a1ec000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145213Z-1657d5bbd48f7nlxc7n5fnfzh000000003ag000000007bbx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	58579	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:13 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:13 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 4d8e5842-701e-0021-0efe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145213Z-1657d5bbd48vlsxxpe15ac3q7n00000003mg00000000ex4c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	58581	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:13 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:13 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:13 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: cd0b82ba-d01e-0049-1304-17e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145213Z-1657d5bbd48cpbzgkvtewk0wu000000003sg000000008x2v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:13 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	58578	17.248.209.68	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:13 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 2093 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:13 UTC	2093	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 22 3a 34 32 31 2c 22 75 70 64 61 74 65 53 6f 75 72 63 65 22 3a 22 76 61 6c 69 64 61 74 65 55 73 65 72 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 30 37 20 32 30 32 34 20 31 30 3a 35 32 3a 30 36 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 38 33 31 32 37 32 36 38 34 38 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 73 74 61 74 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 2e 75 70 64 61 74 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 69 73 53 65 73 73 69 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 Data Ascii: {"stats":[{"httpStatusCode":421,"updateSource":"validateUser","time":"Mon Oct 07 2024 10:52:06 GMT-0400 (Eastern Daylight Time) (1728312726848)","timezone":"Eastern Daylight Time","statName":"cloudos2.updateConfiguration","isSessionAuthenticated":false,"a
2024-10-07 14:52:14 UTC	846	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:14 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p158-feedbackws-d5f4796f9-82thq:prod-p158-feedbackws-d5f4796f9-82thq:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 158 via: xrail:icloud-xrail-group158-ext-6d5497866-tv2pk:8301:24R492:grp158,631194250daa17e24277dea86cf30319:6e0f02fae2019c45d5a06226b05e9bb0:defra2 X-Apple-Request-UUID: 545638f4-f84f-42c9-9af2-584fad6b2430 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 100
2024-10-07 14:52:14 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	58582	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:13 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:14 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:14 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: 0c184816-a01e-000d-72ff-16d1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145214Z-1657d5bbd482lxwq1dp2t1zwkc000000039000000000yff1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:14 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	58584	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:14 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: d3a3eb01-b01e-003d-1ef1-16d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145215Z-1657d5bbd48xsz2nuzq4vfrzg800000003dg00000000unfq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:15 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	58586	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:14 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: ca2bab4f-201e-0071-5e14-17ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145215Z-1657d5bbd48sqtlf1huhzuwq7000000003b000000000muu0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:15 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	58576	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:14 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 838d785c-001e-0014-24fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145215Z-1657d5bbd487nf59mzf5b3gk8n00000003bg000000002n0c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	58587	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:14 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: 4ef38422-401e-000a-160c-174a7b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145215Z-1657d5bbd48qjg85buwfdynm5w00000003n000000000xntf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:15 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	58585	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:14 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:15 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: 4d8e59a4-701e-0021-64fe-163d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145215Z-1657d5bbd48xlwdx82gahegw4000000003s000000000wrzc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:15 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	58588	17.248.209.73	443	3992	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:15 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 14:52:15 UTC	722	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 07 Oct 2024 14:52:15 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p131-feedbackws-669655696b-rpmtk:prod-p131-feedbackws-669655696b-rpmtk:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 131 via: xrail:icloud-xrail-group88-ext-849c8f8d-2sw4j:8301:24R492:grp88,631194250daa17e24277dea86cf30319:0cf24ce02aeeab935a806752be5e96a6:defra2 X-Apple-Request-UUID: 6061e2a0-dac9-4f5d-80d9-9898e0a801a2 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 99
2024-10-07 14:52:15 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	58594	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:16 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 87e265fd-201e-0051-4fe7-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145216Z-1657d5bbd48jwrqbupe3ktsx9w00000003sg00000000vm8k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:16 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	58592	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:16 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 75ef523f-601e-000d-02f2-162618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145216Z-1657d5bbd48t66tjar5xuq22r800000003h000000000vn83 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:16 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	58593	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:16 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: c9f5e5fc-201e-0071-5dfe-16ff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145216Z-1657d5bbd482tlqpvyz9e93p5400000003rg00000000d8bw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:16 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	58590	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:16 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: c326dec7-201e-0003-0c12-17f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145216Z-1657d5bbd48xdq5dkwwugdpzr000000003w000000000vt22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:16 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	58591	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:16 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:16 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:16 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: cad35e9e-b01e-0021-3602-17cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145216Z-1657d5bbd48sdh4cyzadbb374800000003bg00000000z6pp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:16 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	58596	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:17 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: c7b470af-b01e-005c-24fe-164c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145217Z-1657d5bbd48lknvp09v995n79000000003b000000000491y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:17 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	58599	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:17 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 838d7376-001e-0014-17fe-165151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145217Z-1657d5bbd48xdq5dkwwugdpzr0000000041g000000000nce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:17 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	58597	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:17 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: dfa7567c-f01e-003f-67de-16d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145217Z-1657d5bbd48jwrqbupe3ktsx9w00000003sg00000000vmbd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:17 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	58595	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:17 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 3e7839e3-701e-0053-5cff-163a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145217Z-1657d5bbd48sdh4cyzadbb374800000003c000000000vg6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:17 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	58598	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:17 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:17 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:17 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 20e89b60-501e-008c-3a03-17cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145217Z-1657d5bbd48brl8we3nu8cxwgn00000004100000000036va x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:17 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	58606	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 14:52:18 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 14:52:18 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 14:52:18 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: 096083c7-101e-008d-1673-1792e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T145218Z-1657d5bbd48dfrdj7px744zp8s00000003c000000000hn24 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 14:52:18 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4856, Parent PID: 5496

General

Target ID:	0
Start time:	10:50:49
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3992, Parent PID: 4856

General

Target ID:	2
Start time:	10:50:53
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6360, Parent PID: 5496

General

Target ID:	3
Start time:	10:50:55
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://icloud.com/v/2tqVpt2Lj2_CSM8CTbaGkQ"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6104, Parent PID: 4856

General

Target ID:	7
Start time:	10:51:41
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4060 --field-trial-handle=2436,i,370648912622758880,3145389205500354980,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly