Edit tour

Windows Analysis Report
https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0

Overview

General Information

Sample URL:	https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3
Analysis ID:	1530943
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3716 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2248,i,618462383061727548,14457692398767864436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true

HTTP Parser: Number of links: 0

HTTP Parser: Title: Sign in to your account does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-request-id=f8b68b3a-f897-4fff-9616-f0ad0fd5f3a1&response_mode=fragment&response_type=code&x-client-SKU=msal.js.browser&x-client-VER=2.37.1&client_info=1&code_challenge=Y2htBQ72ly0UYYD4zGminv9Wx1wS-qNRePtRw57JKw8&code_challenge_method=S256&nonce=f45cf66f-0b61-4989-a631-dd94a0581d13&state=eyJpZCI6ImJmODJhZTc4LWZjYTctNGY2ZC1iOGQ2LTVmMzViYjdkZTYxNiIsIm1ldGEiOnsiaW50ZXJhY3Rpb25UeXBlIjoicmVkaXJlY3QifX0%3D&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.4:49810 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:62113 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.60.203.209
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1Host: aadcdn.msauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/other-Win32-v19.bundle HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120402v21s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120600v4s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224902v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120608v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120611v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120612v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120613v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120615v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120614v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120616v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120618v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120617v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120620v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120619v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120621v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120623v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120624v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120626v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120625v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120628v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120629v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120630v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120622v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120627v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120631v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120632v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120633v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120634v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120635v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120637v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120638v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120636v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120639v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120641v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120642v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120643v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120644v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120640v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120646v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120647v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120648v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120649v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120650v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120652v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120651v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120653v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120645v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120654v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120656v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120655v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120657v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120658v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120659v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120660v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120661v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120662v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120663v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120664v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120665v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120666v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120668v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120671v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120667v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120669v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120670v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120673v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120675v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120672v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120674v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120676v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120679v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120680v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120677v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120678v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120682v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120602v10s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule224901v11s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120681v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120601v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule90401v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701251v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701250v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702950v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702951v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701151v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701150v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700401v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702200v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702201v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700400v2s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703900v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703901v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703351v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701801v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703501v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703350v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703500v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701051v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701800v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702751v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702750v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702300v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703401v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule703400v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700501v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule700500v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702551v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702301v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701351v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701050v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule701350v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule702550v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net

Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: sets.json.0.dr	String found in binary or memory: https://07c225f3.online
Source: sets.json.0.dr	String found in binary or memory: https://24.hu
Source: sets.json.0.dr	String found in binary or memory: https://aajtak.in
Source: sets.json.0.dr	String found in binary or memory: https://abczdrowie.pl
Source: sets.json.0.dr	String found in binary or memory: https://alice.tw
Source: sets.json.0.dr	String found in binary or memory: https://ambitionbox.com
Source: sets.json.0.dr	String found in binary or memory: https://autobild.de
Source: sets.json.0.dr	String found in binary or memory: https://baomoi.com
Source: sets.json.0.dr	String found in binary or memory: https://bild.de
Source: sets.json.0.dr	String found in binary or memory: https://blackrock.com
Source: sets.json.0.dr	String found in binary or memory: https://blackrockadvisorelite.it
Source: sets.json.0.dr	String found in binary or memory: https://bluradio.com
Source: sets.json.0.dr	String found in binary or memory: https://bolasport.com
Source: sets.json.0.dr	String found in binary or memory: https://bonvivir.com
Source: sets.json.0.dr	String found in binary or memory: https://bumbox.com
Source: sets.json.0.dr	String found in binary or memory: https://businessinsider.com.pl
Source: sets.json.0.dr	String found in binary or memory: https://businesstoday.in
Source: sets.json.0.dr	String found in binary or memory: https://cachematrix.com
Source: sets.json.0.dr	String found in binary or memory: https://cafemedia.com
Source: sets.json.0.dr	String found in binary or memory: https://caracoltv.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.be
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://carcostadvisor.fr
Source: sets.json.0.dr	String found in binary or memory: https://cardsayings.net
Source: sets.json.0.dr	String found in binary or memory: https://chatbot.com
Source: sets.json.0.dr	String found in binary or memory: https://chennien.com
Source: sets.json.0.dr	String found in binary or memory: https://citybibleforum.org
Source: sets.json.0.dr	String found in binary or memory: https://clarosports.com
Source: sets.json.0.dr	String found in binary or memory: https://clmbtech.com
Source: sets.json.0.dr	String found in binary or memory: https://closeronline.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://clubelpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://cmxd.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://cognitive-ai.ru
Source: sets.json.0.dr	String found in binary or memory: https://cognitiveai.ru
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.com
Source: sets.json.0.dr	String found in binary or memory: https://commentcamarche.net
Source: sets.json.0.dr	String found in binary or memory: https://computerbild.de
Source: sets.json.0.dr	String found in binary or memory: https://content-loader.com
Source: sets.json.0.dr	String found in binary or memory: https://cookreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://cricbuzz.com
Source: sets.json.0.dr	String found in binary or memory: https://css-load.com
Source: sets.json.0.dr	String found in binary or memory: https://deccoria.pl
Source: sets.json.0.dr	String found in binary or memory: https://deere.com
Source: sets.json.0.dr	String found in binary or memory: https://desimartini.com
Source: sets.json.0.dr	String found in binary or memory: https://dewarmsteweek.be
Source: sets.json.0.dr	String found in binary or memory: https://drimer.io
Source: sets.json.0.dr	String found in binary or memory: https://drimer.travel
Source: sets.json.0.dr	String found in binary or memory: https://economictimes.com
Source: sets.json.0.dr	String found in binary or memory: https://een.be
Source: sets.json.0.dr	String found in binary or memory: https://efront.com
Source: sets.json.0.dr	String found in binary or memory: https://eleconomista.net
Source: sets.json.0.dr	String found in binary or memory: https://elfinancierocr.com
Source: sets.json.0.dr	String found in binary or memory: https://elgrafico.com
Source: sets.json.0.dr	String found in binary or memory: https://ella.sv
Source: sets.json.0.dr	String found in binary or memory: https://elpais.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://elpais.uy
Source: sets.json.0.dr	String found in binary or memory: https://etfacademy.it
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookcloud.com
Source: sets.json.0.dr	String found in binary or memory: https://eworkbookrequest.com
Source: sets.json.0.dr	String found in binary or memory: https://fakt.pl
Source: sets.json.0.dr	String found in binary or memory: https://finn.no
Source: sets.json.0.dr	String found in binary or memory: https://firstlook.biz
Source: sets.json.0.dr	String found in binary or memory: https://gallito.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://geforcenow.com
Source: sets.json.0.dr	String found in binary or memory: https://gettalkdesk.com
Source: chromecache_113.2.dr, chromecache_116.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_113.2.dr, chromecache_116.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.31.1/LICENSE
Source: sets.json.0.dr	String found in binary or memory: https://gliadomain.com
Source: sets.json.0.dr	String found in binary or memory: https://gnttv.com
Source: sets.json.0.dr	String found in binary or memory: https://graziadaily.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://grid.id
Source: sets.json.0.dr	String found in binary or memory: https://gridgames.app
Source: sets.json.0.dr	String found in binary or memory: https://growthrx.in
Source: sets.json.0.dr	String found in binary or memory: https://grupolpg.sv
Source: sets.json.0.dr	String found in binary or memory: https://gujaratijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://hapara.com
Source: sets.json.0.dr	String found in binary or memory: https://hazipatika.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1.global
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.com
Source: sets.json.0.dr	String found in binary or memory: https://hc1cas.global
Source: sets.json.0.dr	String found in binary or memory: https://healthshots.com
Source: sets.json.0.dr	String found in binary or memory: https://hearty.app
Source: sets.json.0.dr	String found in binary or memory: https://hearty.gift
Source: sets.json.0.dr	String found in binary or memory: https://hearty.me
Source: sets.json.0.dr	String found in binary or memory: https://heartymail.com
Source: sets.json.0.dr	String found in binary or memory: https://heatworld.com
Source: sets.json.0.dr	String found in binary or memory: https://helpdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://hindustantimes.com
Source: sets.json.0.dr	String found in binary or memory: https://hj.rs
Source: sets.json.0.dr	String found in binary or memory: https://hjck.com
Source: sets.json.0.dr	String found in binary or memory: https://html-load.cc
Source: sets.json.0.dr	String found in binary or memory: https://html-load.com
Source: sets.json.0.dr	String found in binary or memory: https://human-talk.org
Source: sets.json.0.dr	String found in binary or memory: https://idbs-cloud.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-dev.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-eworkbook.com
Source: sets.json.0.dr	String found in binary or memory: https://idbs-staging.com
Source: sets.json.0.dr	String found in binary or memory: https://img-load.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatimes.com
Source: sets.json.0.dr	String found in binary or memory: https://indiatoday.in
Source: sets.json.0.dr	String found in binary or memory: https://indiatodayne.in
Source: sets.json.0.dr	String found in binary or memory: https://infoedgeindia.com
Source: sets.json.0.dr	String found in binary or memory: https://interia.pl
Source: sets.json.0.dr	String found in binary or memory: https://intoday.in
Source: sets.json.0.dr	String found in binary or memory: https://iolam.it
Source: sets.json.0.dr	String found in binary or memory: https://ishares.com
Source: sets.json.0.dr	String found in binary or memory: https://jagran.com
Source: sets.json.0.dr	String found in binary or memory: https://johndeere.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldesfemmes.fr
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.com
Source: sets.json.0.dr	String found in binary or memory: https://journaldunet.fr
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://joyreactor.com
Source: sets.json.0.dr	String found in binary or memory: https://kaksya.in
Source: sets.json.0.dr	String found in binary or memory: https://knowledgebase.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.com
Source: sets.json.0.dr	String found in binary or memory: https://kompas.tv
Source: sets.json.0.dr	String found in binary or memory: https://kompasiana.com
Source: sets.json.0.dr	String found in binary or memory: https://lanacion.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.com
Source: sets.json.0.dr	String found in binary or memory: https://landyrev.ru
Source: sets.json.0.dr	String found in binary or memory: https://laprensagrafica.com
Source: sets.json.0.dr	String found in binary or memory: https://lateja.cr
Source: sets.json.0.dr	String found in binary or memory: https://libero.it
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.com
Source: sets.json.0.dr	String found in binary or memory: https://linternaute.fr
Source: sets.json.0.dr	String found in binary or memory: https://livechat.com
Source: sets.json.0.dr	String found in binary or memory: https://livechatinc.com
Source: sets.json.0.dr	String found in binary or memory: https://livehindustan.com
Source: sets.json.0.dr	String found in binary or memory: https://livemint.com
Source: chromecache_91.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/discovery/v2.0/keys
Source: chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/token
Source: chromecache_121.2.dr, chromecache_122.2.dr	String found in binary or memory: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0
Source: chromecache_123.2.dr, chromecache_104.2.dr	String found in binary or memory: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0/.well-known/openid-confi
Source: chromecache_91.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: sets.json.0.dr	String found in binary or memory: https://max.auto
Source: sets.json.0.dr	String found in binary or memory: https://medonet.pl
Source: sets.json.0.dr	String found in binary or memory: https://meo.pt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.co.cr
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.bo
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.do
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.gt
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.hn
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ni
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pa
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.py
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.sv
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadolibre.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadolivre.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ec
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.pe
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://mercadopago.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.cl
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.ar
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.br
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.co
Source: sets.json.0.dr	String found in binary or memory: https://mercadoshops.com.mx
Source: sets.json.0.dr	String found in binary or memory: https://mighty-app.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://mightytext.net
Source: sets.json.0.dr	String found in binary or memory: https://mittanbud.no
Source: sets.json.0.dr	String found in binary or memory: https://money.pl
Source: sets.json.0.dr	String found in binary or memory: https://motherandbaby.com
Source: sets.json.0.dr	String found in binary or memory: https://mystudentdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://nacion.com
Source: sets.json.0.dr	String found in binary or memory: https://naukri.com
Source: sets.json.0.dr	String found in binary or memory: https://nidhiacademyonline.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.co
Source: sets.json.0.dr	String found in binary or memory: https://nien.com
Source: sets.json.0.dr	String found in binary or memory: https://nien.org
Source: sets.json.0.dr	String found in binary or memory: https://nlc.hu
Source: sets.json.0.dr	String found in binary or memory: https://nosalty.hu
Source: sets.json.0.dr	String found in binary or memory: https://noticiascaracol.com
Source: sets.json.0.dr	String found in binary or memory: https://nourishingpursuits.com
Source: sets.json.0.dr	String found in binary or memory: https://nvidia.com
Source: sets.json.0.dr	String found in binary or memory: https://o2.pl
Source: sets.json.0.dr	String found in binary or memory: https://ocdn.eu
Source: sets.json.0.dr	String found in binary or memory: https://onet.pl
Source: sets.json.0.dr	String found in binary or memory: https://ottplay.com
Source: sets.json.0.dr	String found in binary or memory: https://p106.net
Source: sets.json.0.dr	String found in binary or memory: https://p24.hu
Source: sets.json.0.dr	String found in binary or memory: https://paula.com.uy
Source: sets.json.0.dr	String found in binary or memory: https://pdmp-apis.no
Source: sets.json.0.dr	String found in binary or memory: https://phonandroid.com
Source: sets.json.0.dr	String found in binary or memory: https://player.pl
Source: sets.json.0.dr	String found in binary or memory: https://plejada.pl
Source: sets.json.0.dr	String found in binary or memory: https://poalim.site
Source: sets.json.0.dr	String found in binary or memory: https://poalim.xyz
Source: sets.json.0.dr	String found in binary or memory: https://pomponik.pl
Source: sets.json.0.dr	String found in binary or memory: https://portalinmobiliario.com
Source: sets.json.0.dr	String found in binary or memory: https://prisjakt.no
Source: sets.json.0.dr	String found in binary or memory: https://pudelek.pl
Source: sets.json.0.dr	String found in binary or memory: https://punjabijagran.com
Source: sets.json.0.dr	String found in binary or memory: https://radio1.be
Source: sets.json.0.dr	String found in binary or memory: https://radio2.be
Source: sets.json.0.dr	String found in binary or memory: https://reactor.cc
Source: sets.json.0.dr	String found in binary or memory: https://repid.org
Source: sets.json.0.dr	String found in binary or memory: https://reshim.org
Source: sets.json.0.dr	String found in binary or memory: https://rws1nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws2nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://rws3nvtvt.com
Source: sets.json.0.dr	String found in binary or memory: https://sackrace.ai
Source: sets.json.0.dr	String found in binary or memory: https://salemoveadvisor.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovefinancial.com
Source: sets.json.0.dr	String found in binary or memory: https://salemovetravel.com
Source: sets.json.0.dr	String found in binary or memory: https://samayam.com
Source: sets.json.0.dr	String found in binary or memory: https://sapo.io
Source: sets.json.0.dr	String found in binary or memory: https://sapo.pt
Source: sets.json.0.dr	String found in binary or memory: https://shock.co
Source: sets.json.0.dr	String found in binary or memory: https://smaker.pl
Source: sets.json.0.dr	String found in binary or memory: https://smoney.vn
Source: sets.json.0.dr	String found in binary or memory: https://smpn106jkt.sch.id
Source: sets.json.0.dr	String found in binary or memory: https://socket-to-me.vip
Source: sets.json.0.dr	String found in binary or memory: https://songshare.com
Source: sets.json.0.dr	String found in binary or memory: https://songstats.com
Source: sets.json.0.dr	String found in binary or memory: https://sporza.be
Source: sets.json.0.dr	String found in binary or memory: https://standardsandpraiserepurpose.com
Source: sets.json.0.dr	String found in binary or memory: https://startlap.hu
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.com
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.net
Source: sets.json.0.dr	String found in binary or memory: https://startupislandtaiwan.org
Source: sets.json.0.dr	String found in binary or memory: https://stripe.com
Source: sets.json.0.dr	String found in binary or memory: https://stripe.network
Source: sets.json.0.dr	String found in binary or memory: https://stripecdn.com
Source: sets.json.0.dr	String found in binary or memory: https://supereva.it
Source: sets.json.0.dr	String found in binary or memory: https://takeabreak.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskqaid.com
Source: sets.json.0.dr	String found in binary or memory: https://talkdeskstgid.com
Source: sets.json.0.dr	String found in binary or memory: https://teacherdashboard.com
Source: sets.json.0.dr	String found in binary or memory: https://technology-revealed.com
Source: sets.json.0.dr	String found in binary or memory: https://terazgotuje.pl
Source: sets.json.0.dr	String found in binary or memory: https://text.com
Source: sets.json.0.dr	String found in binary or memory: https://textyserver.appspot.com
Source: sets.json.0.dr	String found in binary or memory: https://the42.ie
Source: sets.json.0.dr	String found in binary or memory: https://thejournal.ie
Source: sets.json.0.dr	String found in binary or memory: https://thirdspace.org.au
Source: sets.json.0.dr	String found in binary or memory: https://timesinternet.in
Source: sets.json.0.dr	String found in binary or memory: https://timesofindia.com
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.app
Source: sets.json.0.dr	String found in binary or memory: https://tolteck.com
Source: sets.json.0.dr	String found in binary or memory: https://top.pl
Source: sets.json.0.dr	String found in binary or memory: https://tribunnews.com
Source: sets.json.0.dr	String found in binary or memory: https://trytalkdesk.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.co
Source: sets.json.0.dr	String found in binary or memory: https://tucarro.com.ve
Source: sets.json.0.dr	String found in binary or memory: https://tvid.in
Source: sets.json.0.dr	String found in binary or memory: https://tvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://tvn24.pl
Source: sets.json.0.dr	String found in binary or memory: https://unotv.com
Source: sets.json.0.dr	String found in binary or memory: https://victorymedium.com
Source: sets.json.0.dr	String found in binary or memory: https://vrt.be
Source: sets.json.0.dr	String found in binary or memory: https://vwo.com
Source: sets.json.0.dr	String found in binary or memory: https://welt.de
Source: sets.json.0.dr	String found in binary or memory: https://wieistmeineip.de
Source: sets.json.0.dr	String found in binary or memory: https://wildix.com
Source: sets.json.0.dr	String found in binary or memory: https://wildixin.com
Source: sets.json.0.dr	String found in binary or memory: https://wingify.com
Source: sets.json.0.dr	String found in binary or memory: https://wordle.at
Source: sets.json.0.dr	String found in binary or memory: https://wp.pl
Source: sets.json.0.dr	String found in binary or memory: https://wpext.pl
Source: sets.json.0.dr	String found in binary or memory: https://www.asadcdn.com
Source: sets.json.0.dr	String found in binary or memory: https://ya.ru
Source: sets.json.0.dr	String found in binary or memory: https://yours.co.uk
Source: sets.json.0.dr	String found in binary or memory: https://zalo.me
Source: sets.json.0.dr	String found in binary or memory: https://zdrowietvn.pl
Source: sets.json.0.dr	String found in binary or memory: https://zingmp3.vn

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 62114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62160
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62161
Source: unknown	Network traffic detected: HTTP traffic on port 62137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62163
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62158
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62159
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62171
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62172
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62174
Source: unknown	Network traffic detected: HTTP traffic on port 62190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62164
Source: unknown	Network traffic detected: HTTP traffic on port 62166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62165
Source: unknown	Network traffic detected: HTTP traffic on port 62131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62169
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62180
Source: unknown	Network traffic detected: HTTP traffic on port 62183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62183
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62185
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62175
Source: unknown	Network traffic detected: HTTP traffic on port 62201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 62167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62190
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62191
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62195
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62196
Source: unknown	Network traffic detected: HTTP traffic on port 62178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62187
Source: unknown	Network traffic detected: HTTP traffic on port 62189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 62185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 62156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62179 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62118
Source: unknown	Network traffic detected: HTTP traffic on port 62130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62116
Source: unknown	Network traffic detected: HTTP traffic on port 62180 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62130
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62128
Source: unknown	Network traffic detected: HTTP traffic on port 62124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62129
Source: unknown	Network traffic detected: HTTP traffic on port 62173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62127
Source: unknown	Network traffic detected: HTTP traffic on port 62135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62140
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62141
Source: unknown	Network traffic detected: HTTP traffic on port 62211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62139
Source: unknown	Network traffic detected: HTTP traffic on port 62174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62135
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62136
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62137
Source: unknown	Network traffic detected: HTTP traffic on port 62205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62138
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62150
Source: unknown	Network traffic detected: HTTP traffic on port 62157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62151
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62152
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62143
Source: unknown	Network traffic detected: HTTP traffic on port 62200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62145
Source: unknown	Network traffic detected: HTTP traffic on port 62168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62147
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62148
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62149
Source: unknown	Network traffic detected: HTTP traffic on port 62181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62208
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62209
Source: unknown	Network traffic detected: HTTP traffic on port 62128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62200
Source: unknown	Network traffic detected: HTTP traffic on port 62187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62202
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62204
Source: unknown	Network traffic detected: HTTP traffic on port 62158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62211
Source: unknown	Network traffic detected: HTTP traffic on port 62209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62212
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62213
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 62186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 62192 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 62127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62197
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 62165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 62199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 62188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 62202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62182 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 62171 -> 443

Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.60.203.209:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.67:443 -> 192.168.2.4:49810 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\sets.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\LICENSE	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\_metadata\	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\_metadata\verified_contents.json	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.fingerprint	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\chrome_BITS_3652_192978047

Jump to behavior

Source: classification engine

Classification label: clean2.win@19/81@12/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2248,i,618462383061727548,14457692398767864436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2248,i,618462383061727548,14457692398767864436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_108.2.dr, chromecache_130.2.dr	Binary or memory string: ",ConnectVirtualMachine:"
Source: chromecache_108.2.dr, chromecache_130.2.dr	Binary or memory string: ",DisconnectVirtualMachine:"

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://wieistmeineip.de	0%	URL Reputation	safe
https://mercadoshops.com.co	0%	URL Reputation	safe
https://gliadomain.com	0%	URL Reputation	safe
https://poalim.xyz	0%	URL Reputation	safe
https://mercadolivre.com	0%	URL Reputation	safe
https://reshim.org	0%	URL Reputation	safe
https://nourishingpursuits.com	0%	URL Reputation	safe
https://medonet.pl	0%	URL Reputation	safe
https://unotv.com	0%	URL Reputation	safe
https://mercadoshops.com.br	0%	URL Reputation	safe
https://zdrowietvn.pl	0%	URL Reputation	safe
https://johndeere.com	0%	URL Reputation	safe
https://songstats.com	0%	URL Reputation	safe
https://baomoi.com	0%	URL Reputation	safe
https://supereva.it	0%	URL Reputation	safe
https://elfinancierocr.com	0%	URL Reputation	safe
https://bolasport.com	0%	URL Reputation	safe
https://rws1nvtvt.com	0%	URL Reputation	safe
https://desimartini.com	0%	URL Reputation	safe
https://hearty.app	0%	URL Reputation	safe
https://hearty.gift	0%	URL Reputation	safe
https://mercadoshops.com	0%	URL Reputation	safe
https://heartymail.com	0%	URL Reputation	safe
https://p106.net	0%	URL Reputation	safe
https://radio2.be	0%	URL Reputation	safe
https://finn.no	0%	URL Reputation	safe
https://hc1.com	0%	URL Reputation	safe
https://kompas.tv	0%	URL Reputation	safe
https://mystudentdashboard.com	0%	URL Reputation	safe
https://songshare.com	0%	URL Reputation	safe
https://smaker.pl	0%	URL Reputation	safe
https://mercadopago.com.mx	0%	URL Reputation	safe
https://p24.hu	0%	URL Reputation	safe
https://talkdeskqaid.com	0%	URL Reputation	safe
https://mercadopago.com.pe	0%	URL Reputation	safe
https://cardsayings.net	0%	URL Reputation	safe
https://mightytext.net	0%	URL Reputation	safe
https://pudelek.pl	0%	URL Reputation	safe
https://hazipatika.com	0%	URL Reputation	safe
https://joyreactor.com	0%	URL Reputation	safe
https://cookreactor.com	0%	URL Reputation	safe
https://wildixin.com	0%	URL Reputation	safe
https://eworkbookcloud.com	0%	URL Reputation	safe
https://cognitiveai.ru	0%	URL Reputation	safe
https://nacion.com	0%	URL Reputation	safe
https://chennien.com	0%	URL Reputation	safe
https://drimer.travel	0%	URL Reputation	safe
https://deccoria.pl	0%	URL Reputation	safe
https://mercadopago.cl	0%	URL Reputation	safe
https://talkdeskstgid.com	0%	URL Reputation	safe
https://bonvivir.com	0%	URL Reputation	safe
https://carcostadvisor.be	0%	URL Reputation	safe
https://salemovetravel.com	0%	URL Reputation	safe
https://sapo.io	0%	URL Reputation	safe
https://wpext.pl	0%	URL Reputation	safe
https://welt.de	0%	URL Reputation	safe
https://poalim.site	0%	URL Reputation	safe
https://drimer.io	0%	URL Reputation	safe
https://infoedgeindia.com	0%	URL Reputation	safe
https://blackrockadvisorelite.it	0%	URL Reputation	safe
https://cognitive-ai.ru	0%	URL Reputation	safe
https://cafemedia.com	0%	URL Reputation	safe
https://graziadaily.co.uk	0%	URL Reputation	safe
https://thirdspace.org.au	0%	URL Reputation	safe
https://mercadoshops.com.ar	0%	URL Reputation	safe
https://smpn106jkt.sch.id	0%	URL Reputation	safe
https://elpais.uy	0%	URL Reputation	safe
https://landyrev.com	0%	URL Reputation	safe
https://the42.ie	0%	URL Reputation	safe
https://commentcamarche.com	0%	URL Reputation	safe
https://tucarro.com.ve	0%	URL Reputation	safe
https://rws3nvtvt.com	0%	URL Reputation	safe
https://eleconomista.net	0%	URL Reputation	safe
https://mercadolivre.com.br	0%	URL Reputation	safe
https://clmbtech.com	0%	URL Reputation	safe
https://standardsandpraiserepurpose.com	0%	URL Reputation	safe
https://salemovefinancial.com	0%	URL Reputation	safe
https://mercadopago.com.br	0%	URL Reputation	safe
https://commentcamarche.net	0%	URL Reputation	safe
https://etfacademy.it	0%	URL Reputation	safe
https://mighty-app.appspot.com	0%	URL Reputation	safe
https://hj.rs	0%	URL Reputation	safe
https://hearty.me	0%	URL Reputation	safe
https://login.microsoftonline.com	0%	URL Reputation	safe
https://mercadolibre.com.gt	0%	URL Reputation	safe
https://timesinternet.in	0%	URL Reputation	safe
https://indiatodayne.in	0%	URL Reputation	safe
https://idbs-staging.com	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
identity.nel.measure.office.net	unknown	unknown	false	unknown
aadcdn.msftauth.net	unknown	unknown	false	unknown
login.microsoftonline.com	unknown	unknown	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://wieistmeineip.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.co	sets.json.0.dr	false	URL Reputation: safe	unknown
https://gliadomain.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.xyz	sets.json.0.dr	false	URL Reputation: safe	unknown
https://github.com/zloirock/core-js	chromecache_113.2.dr, chromecache_116.2.dr	false		unknown
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/discovery/v2.0/keys	chromecache_121.2.dr, chromecache_122.2.dr	false		unknown
https://mercadolivre.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://reshim.org	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nourishingpursuits.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://medonet.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://unotv.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.cc	sets.json.0.dr	false		unknown
https://zdrowietvn.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://johndeere.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songstats.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://baomoi.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://supereva.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elfinancierocr.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://bolasport.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws1nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://desimartini.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.app	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.gift	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://heartymail.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nlc.hu	sets.json.0.dr	false		unknown
https://p106.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://radio2.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://finn.no	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hc1.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://kompas.tv	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mystudentdashboard.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://songshare.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smaker.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.mx	sets.json.0.dr	false	URL Reputation: safe	unknown
https://p24.hu	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskqaid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://24.hu	sets.json.0.dr	false		unknown
https://mercadopago.com.pe	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cardsayings.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://text.com	sets.json.0.dr	false		unknown
https://mightytext.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://pudelek.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hazipatika.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://joyreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cookreactor.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wildixin.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eworkbookcloud.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitiveai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://nacion.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://chennien.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.travel	sets.json.0.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/token	chromecache_121.2.dr, chromecache_122.2.dr	false		unknown
https://deccoria.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.cl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://talkdeskstgid.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://naukri.com	sets.json.0.dr	false		unknown
https://interia.pl	sets.json.0.dr	false		unknown
https://bonvivir.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://carcostadvisor.be	sets.json.0.dr	false	URL Reputation: safe	unknown
https://salemovetravel.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://sapo.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://wpext.pl	sets.json.0.dr	false	URL Reputation: safe	unknown
https://welt.de	sets.json.0.dr	false	URL Reputation: safe	unknown
https://poalim.site	sets.json.0.dr	false	URL Reputation: safe	unknown
https://drimer.io	sets.json.0.dr	false	URL Reputation: safe	unknown
https://infoedgeindia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://blackrockadvisorelite.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cognitive-ai.ru	sets.json.0.dr	false	URL Reputation: safe	unknown
https://cafemedia.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://graziadaily.co.uk	sets.json.0.dr	false	URL Reputation: safe	unknown
https://thirdspace.org.au	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadoshops.com.ar	sets.json.0.dr	false	URL Reputation: safe	unknown
https://smpn106jkt.sch.id	sets.json.0.dr	false	URL Reputation: safe	unknown
https://elpais.uy	sets.json.0.dr	false	URL Reputation: safe	unknown
https://landyrev.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://the42.ie	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://tucarro.com.ve	sets.json.0.dr	false	URL Reputation: safe	unknown
https://rws3nvtvt.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://eleconomista.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://helpdesk.com	sets.json.0.dr	false		unknown
https://mercadolivre.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://clmbtech.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://standardsandpraiserepurpose.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://07c225f3.online	sets.json.0.dr	false		unknown
https://login.windows-ppe.net	chromecache_91.2.dr	false		unknown
https://salemovefinancial.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mercadopago.com.br	sets.json.0.dr	false	URL Reputation: safe	unknown
https://commentcamarche.net	sets.json.0.dr	false	URL Reputation: safe	unknown
https://etfacademy.it	sets.json.0.dr	false	URL Reputation: safe	unknown
https://mighty-app.appspot.com	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hj.rs	sets.json.0.dr	false	URL Reputation: safe	unknown
https://hearty.me	sets.json.0.dr	false	URL Reputation: safe	unknown
https://login.microsoftonline.com	chromecache_91.2.dr	false	URL Reputation: safe	unknown
https://mercadolibre.com.gt	sets.json.0.dr	false	URL Reputation: safe	unknown
https://timesinternet.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://indiatodayne.in	sets.json.0.dr	false	URL Reputation: safe	unknown
https://idbs-staging.com	sets.json.0.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
13.107.246.45	s-part-0017.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1530943
Start date and time:	2024-10-10 17:59:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@19/81@12/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.110.84, 142.250.185.206, 142.250.181.227, 34.104.35.123, 20.190.159.64, 40.126.31.67, 20.190.159.4, 40.126.31.69, 20.190.159.68, 20.190.159.71, 20.190.159.73, 20.190.159.2, 40.126.32.6, 40.126.32.131, 40.126.32.66, 40.126.32.129, 20.190.159.23, 20.190.159.0, 40.126.31.73, 20.190.159.75, 52.138.229.66, 52.149.20.212, 40.126.32.136, 20.190.160.17, 40.126.32.134, 40.126.32.74, 20.190.160.20, 20.190.160.14, 40.126.32.76, 40.126.32.72, 13.69.109.130, 199.232.210.172, 192.229.221.95, 13.85.23.206, 2.19.126.84, 2.19.126.89, 40.126.32.68, 40.126.32.138, 142.250.186.42, 172.217.23.106, 142.250.186.106, 142.250.185.106, 172.217.16.202, 142.250.185.138, 142.250.184.202, 216.58.212.138, 142.250.186.170, 172.217.18.10, 142.250.186.138, 216.58.206.74, 216.58.206.42, 142.250.185.74, 142.250.186.74, 172.217.18.106, 20.3.187.198, 142.250.185.195
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0

Input	Output
URL: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-r Model: jbxai	{ "brands":["Microsoft"], "text":"Sign in", "contains_trigger_text":true, "trigger_text":"Can't access your account?", "prominent_button_name":"Next", "text_input_field_labels":["Globi", "example@example.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize?client_id=2793995e-0a7d-40d7-bd35-6968ba142197&scope=openid%20profile%20offline_access%20email&redirect_uri=https%3A%2F%2Fmyapplications.microsoft.com%2F&client-r Model: jbxai	{ "brands":["Microsoft"], "text":"Sign in", "contains_trigger_text":true, "trigger_text":"Enter a valid email address, phone number, or Skype name.", "prominent_button_name":"Next", "text_input_field_labels":["someone@example.com"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	1558
Entropy (8bit):	5.11458514637545
Encrypted:	false
SSDEEP:	48:OBOCrYJ4rYJVwUCLHDy43HV713XEyMmZ3teTHn:LCrYJ4rYJVwUCHZ3Z13XtdUTH
MD5:	EE002CB9E51BB8DFA89640A406A1090A
SHA1:	49EE3AD535947D8821FFDEB67FFC9BC37D1EBBB2
SHA-256:	3DBD2C90050B652D63656481C3E5871C52261575292DB77D4EA63419F187A55B
SHA-512:	D1FDCC436B8CA8C68D4DC7077F84F803A535BF2CE31D9EB5D0C466B62D6567B2C59974995060403ED757E92245DB07E70C6BDDBF1C3519FED300CC5B9BF9177C
Malicious:	false
Reputation:	low
Preview:	// Copyright 2015 The Chromium Authors. All rights reserved..//.// Redistribution and use in source and binary forms, with or without.// modification, are permitted provided that the following conditions are.// met:.//.// * Redistributions of source code must retain the above copyright.// notice, this list of conditions and the following disclaimer..// * Redistributions in binary form must reproduce the above.// copyright notice, this list of conditions and the following disclaimer.// in the documentation and/or other materials provided with the.// distribution..// * Neither the name of Google Inc. nor the names of its.// contributors may be used to endorse or promote products derived from.// this software without specific prior written permission..//.// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS.// "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT.// LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR.// A PARTICULAR

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\_metadata\verified_contents.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1864
Entropy (8bit):	6.021127689065198
Encrypted:	false
SSDEEP:	48:p/hUI1atAdI567akUmYWEFw/3+ovGJ4F3jkZUbvzk98g5m7:RnYQI47avYUwvVGJ41jkZIzxgA7
MD5:	68E6B5733E04AB7BF19699A84D8ABBC2
SHA1:	1C11F06CA1AD3ED8116D356AB9164FD1D52B5CF0
SHA-256:	F095F969D6711F53F97747371C83D5D634EAEF21C54CB1A6A1CC5B816D633709
SHA-512:	9DC5D824A55C969820D5D1FBB0CA7773361F044AE0C255E7C48D994E16CE169FCEAC3DE180A3A544EBEF32337EA535683115584D592370E5FE7D85C68B86C891
Malicious:	false
Reputation:	low
Preview:	[{"description":"treehash per file","signed_content":{"payload":"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","signatures":[{"header":{"kid":"publisher"},"protected":"eyJhbGciOiJSUzI1NiJ9","signature":"dU2MmRUQSugaJAJvEN4uaQHx-KXdOkjj0yK8_aH4Afr3kN7DPOZRt6yLTS3UchBE5M-dgPPPBuKADj4KEK4B22SO6WQquL5J27AUPqQBGgr44-iFGVJdOLLlfirFlJmcYv6DUFRYiPsQFGMr1JFqInj19jgkOxzR6qqcNuTCB0wGEMeTU80r-igCjeQG6TIzPro7yKd_-UxsxO6OGAySmlIJIoU54X0p0ATNoZyAfkhb8kb0oN8unOU

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.fingerprint

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	66
Entropy (8bit):	3.9159446964030753
Encrypted:	false
SSDEEP:	3:Sq5TQRaELVHecsUDBAeHD5k:Sq5gJ+csHej5k
MD5:	CFB54589424206D0AE6437B5673F498D
SHA1:	D1EF6314F0F68EFDD0BA8F6CA9E59BFF863B1609
SHA-256:	285AC183C35350B4B77332172413902F83726CA8F53D63859B5DA082FD425A1C
SHA-512:	70FDCA4A1E6B7A5FFED3414E2DB74FECA7E0FD17482B8CB30393DFEE20AB9AD2B0B00FF0C590DD0E8D744D0EAD876CE8844519AF66618ED14666BCA56DF2DA21
Malicious:	false
Reputation:	low
Preview:	1.dbf288588465463a914bdfc5e86d465fb3592b2f1261dc0e40fcc5c1adc8e7e4

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	85
Entropy (8bit):	4.4533115571544695
Encrypted:	false
SSDEEP:	3:rR6TAulhFphifFCmMARWHJqS1tean:F6VlM8aRWpqS1ln
MD5:	C3419069A1C30140B77045ABA38F12CF
SHA1:	11920F0C1E55CADC7D2893D1EEBB268B3459762A
SHA-256:	DB9A702209807BA039871E542E8356219F342A8D9C9CA34BCD9A86727F4A3A0F
SHA-512:	C5E95A4E9F5919CB14F4127539C4353A55C5F68062BF6F95E1843B6690CEBED3C93170BADB2412B7FB9F109A620385B0AE74783227D6813F26FF8C29074758A1
Malicious:	false
Reputation:	low
Preview:	{. "manifest_version": 2,. "name": "First Party Sets",. "version": "2024.8.10.0".}

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\sets.json

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9748
Entropy (8bit):	4.629326694042306
Encrypted:	false
SSDEEP:	96:Mon4mvC4qX19s1blbw/BNKLcxbdmf56MFJtRTGXvcxN43uP+8qJq:v5C4ql7BkIVmtRTGXvcxBsq
MD5:	EEA4913A6625BEB838B3E4E79999B627
SHA1:	1B4966850F1B117041407413B70BFA925FD83703
SHA-256:	20EF4DE871ECE3C5F14867C4AE8465999C7A2CC1633525E752320E61F78A373C
SHA-512:	31B1429A5FACD6787F6BB45216A4AB1C724C79438C18EBFA8C19CED83149C17783FD492A03197110A75AAF38486A9F58828CA30B58D41E0FE89DFE8BDFC8A004
Malicious:	false
Reputation:	low
Preview:	{"primary":"https://bild.de","associatedSites":["https://welt.de","https://autobild.de","https://computerbild.de","https://wieistmeineip.de"],"serviceSites":["https://www.asadcdn.com"]}.{"primary":"https://blackrock.com","associatedSites":["https://blackrockadvisorelite.it","https://cachematrix.com","https://efront.com","https://etfacademy.it","https://ishares.com"]}.{"primary":"https://cafemedia.com","associatedSites":["https://cardsayings.net","https://nourishingpursuits.com"]}.{"primary":"https://caracoltv.com","associatedSites":["https://noticiascaracol.com","https://bluradio.com","https://shock.co","https://bumbox.com","https://hjck.com"]}.{"primary":"https://carcostadvisor.com","ccTLDs":{"https://carcostadvisor.com":["https://carcostadvisor.be","https://carcostadvisor.fr"]}}.{"primary":"https://citybibleforum.org","associatedSites":["https://thirdspace.org.au"]}.{"primary":"https://cognitiveai.ru","associatedSites":["https://cognitive-ai.ru"]}.{"primary":"https://drimer.io","asso

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.241202481433726
Encrypted:	false
SSDEEP:	3:YozDD/RNgQJzRWWlKFiFD3e4xCzY:YovtNgmzR/wYFDxkY
MD5:	9E576E34B18E986347909C29AE6A82C6
SHA1:	532C767978DC2B55854B3CA2D2DF5B4DB221C934
SHA-256:	88BDF5AF090328963973990DE427779F9C4DF3B8E1F5BADC3D972BAC3087006D
SHA-512:	5EF6DCFFD93434D45760888BF4B95FF134D53F34DA9DC904AD3C5EBEDC58409073483F531FEA4233869ED3EC75F38B022A70B2E179A5D3A13BDB10AB5C46B124
Malicious:	false
Reputation:	low
Preview:	{"Message":"The requested resource does not support http method 'GET'."}

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46480)
Category:	downloaded
Size (bytes):	46546
Entropy (8bit):	5.411409428759853
Encrypted:	false
SSDEEP:	768:aVcuxCEHLfqc8UTCgiHdrCvCLJof3/CvrCkuDb4+aa1hKHX4XbP9w6jKUmNdKGQR:AqcIHVbJJ2aa63n1Nov
MD5:	7131298AD2174508752F8E858EA68DE6
SHA1:	B8D5192FF0CBC609FFB1D2A9B9E292754A1CC99F
SHA-256:	F1A54E92391653CC7DD5D4480EF80F578B2A2C77E6E421B7C9AAFA0AC4586E75
SHA-512:	E0F898AD21D52C2B4738C4D623794D66EA6769395EB8ACEB6B14E21C1974DF2BB8459191B762C40D7F637BB8826C64F50668EB26C51E32A8AB1973B667686BDB
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/moderate-change-freq-vendors.b9b6c819.js
Preview:	"use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[332],{70920:function(e,t,r){r.d(t,{Y:function(){return _}});var n,o=r(57312),i=r(51370),a=r(36775),s=r(37040),c=r(26948),u=r(73054),l=r(2784),f=r(6082);function d(e){return d="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},d(e)}function m(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?m(Object(r),!0).forEach((function(t){g(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):m(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDe

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	280
Entropy (8bit):	4.562007634218627
Encrypted:	false
SSDEEP:	6:3v+kAh/2lkAh/bwXLjQLMzmezXXhCvNijtcdpwr2GV/cgGTO:fSKWLbhcNipcdpKV/cDTO
MD5:	0E0B4EC2E9BB0149DC3C8505D580DDCF
SHA1:	23AC5D255AB965A2020E50DC1A734F7AF21C1BFC
SHA-256:	FAB6325115456F770B3C0A2A17ADE45F98015C270EFEE1CBFC19C4EAA09F6212
SHA-512:	F5D896D8A016454D4656405D6C916F8FDC333C22A29F3CDD373703B570EEA6BE01D5888C1E4D55D45B7055ACF9FCC246EE7DEA853DF268C053C50C28D91CA180
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/manifest.json
Preview:	{. "short_name": "My Apps",. "name": "My Apps",. "icons": [. {. "src": "favicon.ico",. "sizes": "192x192",. "type": "image/png". }. ],. "start_url": "./index.html",. "display": "standalone",. "theme_color": "#000000",. "background_color": "#ffffff".}.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	dropped
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	980
Entropy (8bit):	4.623650274066085
Encrypted:	false
SSDEEP:	24:YE/O+sn2RE8Gv8+sarUM+sd+8sAIse/sv+sOd+sIM+sX+sxd+sBM+s7sarzsA6sa:YE2+scfp+sWUM+sd+8sAIse/sv+sOd+E
MD5:	65298C79F7AC20C990B82834074EF6B3
SHA1:	8EFC893D15504F2F7F63B2D3781B7211E028E4DF
SHA-256:	D464A1BC7F764A4840BB11353F0B4D858176CDE103C46BA5654204F9B1169283
SHA-512:	06469B3A3BE5C71A5AF08F2EBBC563DCE6EF102D7A5ABE549ADBF266C24453111A351766ECBCDE573425B66C8531A0578FB8D9A1FCEA1CE6B3A38BA4E42E4013
Malicious:	false
Reputation:	low
URL:	https://login.microsoftonline.com/common/discovery/instance?api-version=1.1&authorization_endpoint=https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize
Preview:	{"tenant_discovery_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0/.well-known/openid-configuration","api-version":"1.1","metadata":[{"preferred_network":"login.microsoftonline.com","preferred_cache":"login.windows.net","aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{"preferred_network":"login.partner.microsoftonline.cn","preferred_cache":"login.partner.microsoftonline.cn","aliases":["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{"preferred_network":"login.microsoftonline.de","preferred_cache":"login.microsoftonline.de","aliases":["login.microsoftonline.de"]},{"preferred_network":"login.microsoftonline.us","preferred_cache":"login.microsoftonline.us","aliases":["login.microsoftonline.us","login.usgovcloudapi.net"]},{"preferred_network":"login-us.microsoftonline.com","preferred_cache":"login-us.microsoftonline.com","aliases":["login-us.microsoftonline.com"]}]}

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	dropped
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33967)
Category:	downloaded
Size (bytes):	34090
Entropy (8bit):	5.272135204913588
Encrypted:	false
SSDEEP:	768:ijCYU+eynDk/9Cn9bCv0FC0DCLcECD+T9tG1r+FhCP0Lq1JDkBCd1C9CCXCC:vcqdtG+CPEZL
MD5:	B43B94F026B1452991CEE9B4F34B10D5
SHA1:	5E67BB18197C471B858E60EB001A02F546BB6BB6
SHA-256:	FFFEADD79D49C3FE10FEA3B2D325D9CBBFCF301CE6AEB8DCCA4FC9B19B7FF2B7
SHA-512:	BFB33459512C147CF3EAACF812B9DE0ECDEE8F7FC34EE9FD1F4DDB64D565E43A6A00F869B103A6EDC8F3779AAFC043A2849D1B45F4AA9A864B5A081CF5C75AB4
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/searchbox.ef784575.js
Preview:	/! For license information please see searchbox.ef784575.js.LICENSE.txt /."use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[366],{65704:function(e,t,r){r.r(t),r.d(t,{CreateBookmark:function(){return ye},DeleteBookmark:function(){return he},SearchBox:function(){return be},UpdateBookmark:function(){return me},classes:function(){return ve}});var n=r(6082),o=r(23324),i=r(59083),a=r(53841),l=r(23915),u=r(2784),c=r(65802),s=r(65788),f=r(31816),d=r(36045),p=r(74464),h=r(76984),m=r(22200),y=r(90108);function v(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,i,a,l=[],u=!0,c=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;u=!1}else for(;!(u=(n=i.call(r)).done)&&(l.push(n.value),l.length!==t);u=!0);}catch(e){c=!0,o=e}finally{try{if(!u&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(c)throw o}}return l}}(e,t)\|\|function(e,

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65464)
Category:	dropped
Size (bytes):	382676
Entropy (8bit):	5.241158512530426
Encrypted:	false
SSDEEP:	6144:apotiSu+09qisQFXR6uCSB1DkCXWsFqIfI6xYCFrjWO33wv:FRQaSB1DkCXWsFSaN3gv
MD5:	C2BB805FC8B25BF3FE5B5C1865BD1155
SHA1:	6FA491DDB5CD48A75D32AB474D2BF08477C34860
SHA-256:	F22C0E077993BC20AEC1A2EF52B37D64C653A663529D087D2DE78EC3B54FAA0A
SHA-512:	4C6B2C66C5D105DAC5471D9BABABB19A57671BD9FDDAE6B938C47113BAE01AAC401FC8F6BEF8EE2BDE34F595CCF93F43D40F6D04F4ABE08E20F0B6102FE62372
Malicious:	false
Reputation:	low
Preview:	/! For license information please see azure.e9a30734.js.LICENSE.txt /."use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[196],{93218:function(e,t,r){r.d(t,{L:function(){return wr}});var n,o,i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},i(e,t)},a=function(){return a=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var o in t=arguments[r])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},a.apply(this,arguments)},s=r(41601);!function(e){e.AcquireTokenByCode="acquireTokenByCode",e.AcquireTokenByRefreshToken="acquireTokenByRefreshToken",e.AcquireTokenSilent="acquireTokenSilent",e.AcquireTokenSilentAsync="acquireTokenSilentAsync",e.AcquireTokenPopup="acquireTokenPopup",e.CryptoOptsGetPublicKeyThumbprint="cryptoOptsGetPublicKeyThumbprint",e.CryptoOptsSignJwt="cryptoOptsSignJwt",e.SilentCa

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
Category:	downloaded
Size (bytes):	407026
Entropy (8bit):	5.473039878879073
Encrypted:	false
SSDEEP:	6144:Gtv45ROwcj95E2lp4+oCq45wvNrKZMnHI+87c:GaARnTA
MD5:	EA14D920AC1946E4230CD7328748E6B8
SHA1:	1A71DBDB4C4A2275F1E6AABA4DDB40F649432A45
SHA-256:	ED8C8C14550D6E60719A8661DB4192D09CF9CFDB9260D35AB61801E97468E96A
SHA-512:	2E0A0340FDA0CBB1923B51DCF83903B073099E8B8C933F923D19AE93663096D73413D2EDFFE546C3F31F344501F954B3EA58B152BACEC483DB30F0A0FD53A288
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/fluent.331533d0.js
Preview:	"use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[778],{95562:function(e,t,n){n.d(t,{t:function(){return r}});var o=n(52651);function r(e,t,n){void 0===n&&(n=!0);var r=!1;if(e&&t)if(n)if(e===t)r=!0;else for(r=!1;t;){var i=(0,o.G)(t);if(i===e){r=!0;break}t=i}else e.contains&&(r=e.contains(t));return r}},89236:function(e,t,n){n.d(t,{X:function(){return r}});var o=n(52651);function r(e,t){return e&&e!==document.body?t(e)?e:r((0,o.G)(e),t):null}},52651:function(e,t,n){function o(e,t){return void 0===t&&(t=!0),e&&(t&&function(e){var t,n;return e&&(n=e)&&n._virtual&&(t=e._virtual.parent),t}(e)\|\|e.parentNode&&e.parentNode)}n.d(t,{G:function(){return o}})},2899:function(e,t,n){n.d(t,{w:function(){return i}});var o=n(89236),r=n(73100);function i(e,t){var n=(0,o.X)(e,(function(e){return t===e\|\|e.hasAttribute(r.Y)}));return null!==n&&n.hasAttribute(r.Y)}},73100:function(e,t,n){n.d(t,{U:function(){return r},Y:function(){return o}});var o="data-portal-element";function r(e){e.se

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	downloaded
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113769
Category:	downloaded
Size (bytes):	35168
Entropy (8bit):	7.99275807202193
Encrypted:	true
SSDEEP:	768:FlTfWbX2KT+Hid0L7lumndasuVyeLtCR4sqvrdYnN6UcepZtf/r6:LgbT+Hid0TFbeLtUGvrdCNqepbHr6
MD5:	D3B6AE9986DF244AB03412CC700335D0
SHA1:	BAAA1F9899178938F3881F09B18265E47DA806E3
SHA-256:	CA50059111D30C2E212C90805792EB543548AEF0D4941E886A778E3DCE0B9066
SHA-512:	755C57FBC9BECE435A477F76C5E8198CA8942C23BE667ACAB83A00E5CD4F54075B10AA07C7FDC10C38FC3D5C0C406C9132FEB5B67BA5BCCC57EF796054A84E7C
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js
Preview:	...........kC.H.0......e....0.pX..Iv3..\f..0YY.m..e$.K..o...j..g.3.lpW.......[..Y.?k.Y.......8~.a..../_.;]{.............v...0..q.Dk.w...h-....Z<..l.fA..k3.7..dm....b..-...(,.$...4...f...e...AV..z.mA....O.9........k..h-.......<Z[.GQ.v3....Oq..y:..(..k.$_...._..h-...q..S.ck.=.T......Sq@.:.A.c.(....SDq..Ac.t..m.$Lc....Z...K...O<....f9..p...0Z..3.<...$YK.x.F......v....nm..s$...&..dQ4.......n-.-.......E.XD..-5~...f.....t...-_.....fsg...8kZ..\|.{{....p+Lg.t9I..P./ap......o9Wx.._{....k..,...............................7.\|..t...Ax.7..b..v..v.m-...~v...:....r..._........,...A........:..z.>.y..u.....N...^..S.......z~@..;...n...K........x..A]....F.8X&Em..P.s.....a.g.\|.d......._..C`.xQ...\..'...QP....?.R.{?....\|.>........E4.GRz...z.k.z.}....h..>.{[E.:.....Pu. ..e6_.o.p*.w...>...:...o.k~...~..&E._..}}.}%[. ..#......z.5M.b.....z..k.H.4...l..D.o...z..M.+../..`....?y.J4.=....u.....Z.....E.d.....{0H^...8.....9..h......d..6j......../..z..V<.`.F.xm.y..yt.J....

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (46480)
Category:	dropped
Size (bytes):	46546
Entropy (8bit):	5.411409428759853
Encrypted:	false
SSDEEP:	768:aVcuxCEHLfqc8UTCgiHdrCvCLJof3/CvrCkuDb4+aa1hKHX4XbP9w6jKUmNdKGQR:AqcIHVbJJ2aa63n1Nov
MD5:	7131298AD2174508752F8E858EA68DE6
SHA1:	B8D5192FF0CBC609FFB1D2A9B9E292754A1CC99F
SHA-256:	F1A54E92391653CC7DD5D4480EF80F578B2A2C77E6E421B7C9AAFA0AC4586E75
SHA-512:	E0F898AD21D52C2B4738C4D623794D66EA6769395EB8ACEB6B14E21C1974DF2BB8459191B762C40D7F637BB8826C64F50668EB26C51E32A8AB1973B667686BDB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[332],{70920:function(e,t,r){r.d(t,{Y:function(){return _}});var n,o=r(57312),i=r(51370),a=r(36775),s=r(37040),c=r(26948),u=r(73054),l=r(2784),f=r(6082);function d(e){return d="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},d(e)}function m(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),r.push.apply(r,n)}return r}function p(e){for(var t=1;t<arguments.length;t++){var r=null!=arguments[t]?arguments[t]:{};t%2?m(Object(r),!0).forEach((function(t){g(e,t,r[t])})):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):m(Object(r)).forEach((function(t){Object.defineProperty(e,t,Object.getOwnPropertyDe

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 57443
Category:	downloaded
Size (bytes):	16326
Entropy (8bit):	7.987374325584103
Encrypted:	false
SSDEEP:	384:GTwafLJjHlgnek9V15z6Brrwb9tYt3skOUAQC1:GTtTJjHlgneqTz658ht/eAQw
MD5:	C217AE35B8592DC9F1E680487DAD094F
SHA1:	2E642562C2BFD8968629317FF212684C7EB59193
SHA-256:	D41992E79D7BCFCC1F32597208DD99033D99C04882EAFCC8508F2FA0EE728C6B
SHA-512:	EAF3BF49BCF58A7F7C39CBF35FD75862FEE98F611536080DFC794D288274CB9D67E95D0299679F7981E110B2577A47579D3623C7F11A6AC2A0CFA56AAEA2CAB0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js
Preview:	...........}Ms#.......\.@..'F.........C)$....`.......Q.x7...}..'.}..?e#...QU]....Vo.................?........w!......=.G...P.../......8z....q._5....g..}g..31......l...],.b..;..`...Y....3..5.uGAi..NP.6<.w.(..`...y..d.N.x..^u.....^...?..N........Fq.....z..wgN./..Ep/f..c/.D4~X.W~).s/.E8...T...8,:..Q.>............4....F,&c.)n.[.pcQp...4...6...i.............CkL=....'.\..L......2.A..o.u..."p.. Xx.......'l.[w..'c/^.FP.....q.h4.R+X.x...d..M.}.Z,..RP..E.T......8 .v....Iw.X..?.r......nk....?Wj..a.\|..........JAs.j.7.....?.)..t.z.-..m.]..3y...3@.3YO.KSz]...4.b........V..+.%.[.&........l.H>G.^<..{.$"..-.i.........`qcw...`.[....as[.+.X...n..X..%,:......am."a....^o@@.`].....( (b...k..B.0.....AX.D.?...,..-<@k.;..(*..C.]...:.nn..8..s...."4.. ...J...P.n....F.3G..u..;9&.{.2.80.XB.....@.qw.:../.`.P?.+t..w6.a~..7...8k..U._......k,..o.....yQ..r.....}.E...B.r......?{...\fB....-.).Fb.;.p.N?(..P.?..p....F........)p..,`l...o@.;.x.....:..f.E....<0..#K\...K(?K/OX

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	675512
Entropy (8bit):	5.517813770179539
Encrypted:	false
SSDEEP:	6144:KGgbyWkDa1RGJaR6oALvCE4wn8PvxDPcRMzMxOdI9CQuhbrDmwPO0Iu7P4KOR2nY:/gby3j38HEu6g4KOAY
MD5:	15149A12CC042DCA2B5976D704D58AF4
SHA1:	5882D2DBF2EE0D7FA9B193F114AEE7FD2EB00939
SHA-256:	5F74C854DC6B97753AFA0C34C3715EB9A5DB6F4DF519BFC9CA82BE403DAD9510
SHA-512:	CE40888380272684FA60769C129CE7EBED75585709E39A027E36078783CC88E13981D8333922749529254F0896E7183F442C13DEB719BA343140A0BDFC7F2A94
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/low-change-freq-vendors.791ea13a.js
Preview:	/! For license information please see low-change-freq-vendors.791ea13a.js.LICENSE.txt /.(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[557],{74844:function(t,n,e){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isUnicodeLanguageSubtag=n.isUnicodeScriptSubtag=n.isUnicodeRegionSubtag=n.isStructurallyValidLanguageTag=n.parseUnicodeLanguageId=n.parseUnicodeLocaleId=n.getCanonicalLocales=void 0;var a=e(22970),r=e(77116),o=e(76214),i=e(46389);n.getCanonicalLocales=function(t){return function(t){if(void 0===t)return[];var n=[];"string"==typeof t&&(t=[t]);for(var e=0,a=t;e<a.length;e++){var s=a[e],u=(0,o.emitUnicodeLocaleId)((0,i.canonicalizeUnicodeLocaleId)((0,r.parseUnicodeLocaleId)(s)));n.indexOf(u)<0&&n.push(u)}return n}(t)};var s=e(77116);Object.defineProperty(n,"parseUnicodeLocaleId",{enumerable:!0,get:function(){return s.parseUnicodeLocaleId}}),Object.defineProperty(n,"parseUnicodeLanguageId",{enumerable:!0,get:function(){return s.parseUnicodeLanguageId}}),Ob

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	1293269
Entropy (8bit):	5.685918512314253
Encrypted:	false
SSDEEP:	12288:rFMHAF0bG2fv5mqtqAYxYaN4Jr9bQTdmo1AmQhHqd0nuSr7D4CHpXYAMBf1ofDhL:rMrX4CJIAMBf1dXA
MD5:	F21A9512C5C8AEA61E1411DC53E86EFD
SHA1:	A53C1133B74621BA13A87E4C83AB8A61516708E1
SHA-256:	530E4CAED24541B67321CEA3EA6139FD4CC4CAB610B1D204E514F40C0AF16C22
SHA-512:	66422C9E82859A5ED084F1B00035DFF089DF7912AFCAB9A9417EE981FCB0E05EFEF8A8CE72EBBB2BC128CD02CA8CC751EB717319EAFA9A2F7C0ECC07562F4F31
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.03541075.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={65788:function(e,t,n){"use strict";n.d(t,{N:function(){return m},u:function(){return y}});var r=n(2784);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}function i(){i=function(){return e};var e={},t=Object.prototype,n=t.hasOwnProperty,r=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},a="function"==typeof Symbol?Symbol:{},c=a.iterator\|\|"@@iterator",s=a.asyncIterator\|\|"@@asyncIterator",u=a.toStringTag\|\|"@@toStringTag";function l(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{l({},"")}catch(e){l=function(e,t,n){return e[t]=n}}function d(e,t,n,o){var i=t&&t.prototype instanceof g?t:g,a=Object.create(i.prototype),c=new T(o\|\|[]);return r(a,"_invoke",{value

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65464)
Category:	downloaded
Size (bytes):	382676
Entropy (8bit):	5.241158512530426
Encrypted:	false
SSDEEP:	6144:apotiSu+09qisQFXR6uCSB1DkCXWsFqIfI6xYCFrjWO33wv:FRQaSB1DkCXWsFSaN3gv
MD5:	C2BB805FC8B25BF3FE5B5C1865BD1155
SHA1:	6FA491DDB5CD48A75D32AB474D2BF08477C34860
SHA-256:	F22C0E077993BC20AEC1A2EF52B37D64C653A663529D087D2DE78EC3B54FAA0A
SHA-512:	4C6B2C66C5D105DAC5471D9BABABB19A57671BD9FDDAE6B938C47113BAE01AAC401FC8F6BEF8EE2BDE34F595CCF93F43D40F6D04F4ABE08E20F0B6102FE62372
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/azure.e9a30734.js
Preview:	/! For license information please see azure.e9a30734.js.LICENSE.txt /."use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[196],{93218:function(e,t,r){r.d(t,{L:function(){return wr}});var n,o,i=function(e,t){return i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r])},i(e,t)},a=function(){return a=Object.assign\|\|function(e){for(var t,r=1,n=arguments.length;r<n;r++)for(var o in t=arguments[r])Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o]);return e},a.apply(this,arguments)},s=r(41601);!function(e){e.AcquireTokenByCode="acquireTokenByCode",e.AcquireTokenByRefreshToken="acquireTokenByRefreshToken",e.AcquireTokenSilent="acquireTokenSilent",e.AcquireTokenSilentAsync="acquireTokenSilentAsync",e.AcquireTokenPopup="acquireTokenPopup",e.CryptoOptsGetPublicKeyThumbprint="cryptoOptsGetPublicKeyThumbprint",e.CryptoOptsSignJwt="cryptoOptsSignJwt",e.SilentCa

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	dropped
Size (bytes):	675512
Entropy (8bit):	5.517813770179539
Encrypted:	false
SSDEEP:	6144:KGgbyWkDa1RGJaR6oALvCE4wn8PvxDPcRMzMxOdI9CQuhbrDmwPO0Iu7P4KOR2nY:/gby3j38HEu6g4KOAY
MD5:	15149A12CC042DCA2B5976D704D58AF4
SHA1:	5882D2DBF2EE0D7FA9B193F114AEE7FD2EB00939
SHA-256:	5F74C854DC6B97753AFA0C34C3715EB9A5DB6F4DF519BFC9CA82BE403DAD9510
SHA-512:	CE40888380272684FA60769C129CE7EBED75585709E39A027E36078783CC88E13981D8333922749529254F0896E7183F442C13DEB719BA343140A0BDFC7F2A94
Malicious:	false
Reputation:	low
Preview:	/! For license information please see low-change-freq-vendors.791ea13a.js.LICENSE.txt /.(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[557],{74844:function(t,n,e){"use strict";Object.defineProperty(n,"__esModule",{value:!0}),n.isUnicodeLanguageSubtag=n.isUnicodeScriptSubtag=n.isUnicodeRegionSubtag=n.isStructurallyValidLanguageTag=n.parseUnicodeLanguageId=n.parseUnicodeLocaleId=n.getCanonicalLocales=void 0;var a=e(22970),r=e(77116),o=e(76214),i=e(46389);n.getCanonicalLocales=function(t){return function(t){if(void 0===t)return[];var n=[];"string"==typeof t&&(t=[t]);for(var e=0,a=t;e<a.length;e++){var s=a[e],u=(0,o.emitUnicodeLocaleId)((0,i.canonicalizeUnicodeLocaleId)((0,r.parseUnicodeLocaleId)(s)));n.indexOf(u)<0&&n.push(u)}return n}(t)};var s=e(77116);Object.defineProperty(n,"parseUnicodeLocaleId",{enumerable:!0,get:function(){return s.parseUnicodeLocaleId}}),Object.defineProperty(n,"parseUnicodeLanguageId",{enumerable:!0,get:function(){return s.parseUnicodeLanguageId}}),Ob

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	downloaded
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	266307
Entropy (8bit):	5.40439857316643
Encrypted:	false
SSDEEP:	3072:R2eH75+ueMudNxl2FGt25FhlxAxfL7BVhvxLYevyVNlXmEyTdCDOsAHrtBTrx7sC:seH9+4u7Wl4TADOsAf1sswK
MD5:	9DDEA63A6B5FE0C517541E8D54D7CE63
SHA1:	EE8D0DF1D636822FD29500A906ED06998221B769
SHA-256:	A4EACDE3DA3E7E5CFB6B34FB69BBCDC1928E84FA5A70E0484E1CC1C0D3389B92
SHA-512:	081F6146D1598338D69A6854096E4331EA766D43BD779631249C6C1154E882C24E1AF75C4EDA57CCB59ACFEB94BCE44C9146F1DC926537F8DC45D521CC2736C7
Malicious:	false
Reputation:	low
Preview:	/! For license information please see microsoft.9a8b6809.js.LICENSE.txt /."use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[888],{19428:function(n,e,t){t.d(e,{Z:function(){return gu}});var r=t(43298),i=t(42314),a="initialize",o="name",u="getNotifyMgr",c="identifier",s="push",l="isInitialized",f="config",d="instrumentationKey",v="logger",p="length",g="time",h="processNext",m="getProcessTelContext",y="addNotificationListener",b="removeNotificationListener",C="stopPollingInternalLogs",T="onComplete",I="getPlugin",S="flush",w="_extensions",E="splice",x="teardown",_="messageId",D="message",N="isAsync",k="_doTeardown",O="update",P="getNext",A="diagLog",M="setNextPlugin",R="createNew",L="cookieCfg",U="indexOf",q="substring",V="userAgent",H="split",B="setEnabled",F="substr",j="nodeType",K="apply",W="replace",z="enableDebugExceptions",Z="toLowerCase",J="call",X="type",Y="handler",G="listeners",Q="isChildEvt",$="getCtx",nn="setCtx",en="complete",tn="traceId",rn="spanId",an=

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	1293269
Entropy (8bit):	5.685918512314253
Encrypted:	false
SSDEEP:	12288:rFMHAF0bG2fv5mqtqAYxYaN4Jr9bQTdmo1AmQhHqd0nuSr7D4CHpXYAMBf1ofDhL:rMrX4CJIAMBf1dXA
MD5:	F21A9512C5C8AEA61E1411DC53E86EFD
SHA1:	A53C1133B74621BA13A87E4C83AB8A61516708E1
SHA-256:	530E4CAED24541B67321CEA3EA6139FD4CC4CAB610B1D204E514F40C0AF16C22
SHA-512:	66422C9E82859A5ED084F1B00035DFF089DF7912AFCAB9A9417EE981FCB0E05EFEF8A8CE72EBBB2BC128CD02CA8CC751EB717319EAFA9A2F7C0ECC07562F4F31
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/main.03541075.js
Preview:	/! For license information please see main.03541075.js.LICENSE.txt /.!function(){var e,t,n,r,o,i={65788:function(e,t,n){"use strict";n.d(t,{N:function(){return m},u:function(){return y}});var r=n(2784);function o(e){return o="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},o(e)}function i(){i=function(){return e};var e={},t=Object.prototype,n=t.hasOwnProperty,r=Object.defineProperty\|\|function(e,t,n){e[t]=n.value},a="function"==typeof Symbol?Symbol:{},c=a.iterator\|\|"@@iterator",s=a.asyncIterator\|\|"@@asyncIterator",u=a.toStringTag\|\|"@@toStringTag";function l(e,t,n){return Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{l({},"")}catch(e){l=function(e,t,n){return e[t]=n}}function d(e,t,n,o){var i=t&&t.prototype instanceof g?t:g,a=Object.create(i.prototype),c=new T(o\|\|[]);return r(a,"_invoke",{value

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	36
Entropy (8bit):	4.503258334775644
Encrypted:	false
SSDEEP:	3:Eq62iczBr9ks:EqdiczBys
MD5:	06B313E93DD76909460FBFC0CD98CB6B
SHA1:	C4F9B2BBD840A4328F85F54873C434336A193888
SHA-256:	B4532478707B495D0BB1C21C314AEF959DD1A5E0F66E52DAD5FC332C8B697CBA
SHA-512:	EFD7E8195D9C126883C71FED3EFEDE55916848B784F8434ED2677DF5004436F7EDE9F80277CB4675C4DEB8F243B2705A3806B412FAA8842E039E9DC467C11645
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmCAmly1gHbXRIFDdFbUVISBQ1Xevf9?alt=proto
Preview:	ChgKDQ3RW1FSGgQIVhgCIAEKBw1Xevf9GgA=

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1753
Entropy (8bit):	4.9662771331647635
Encrypted:	false
SSDEEP:	48:Ye2+scoQykaO+sc2zcijLiDT4+scWJhKdZKA2+scl32+scj2+sc9moy04jl2+scM:ppscoXXxsc2zjSscWKHLpsc1pscjpscj
MD5:	034063A54B4AE017B2EB557902844BBF
SHA1:	DA028F38C30DB4A59056E644D570B3AEA45FCBA6
SHA-256:	0E5EFE93A3AAE198929E68B021CF757044701E988D0DE5D1C868CC70D9C55639
SHA-512:	509FF262D5C395A117EAA59382830F78DAE8C8C4457DE73A58AD64A4C431B1021183CD749F0500EF77EF23BA06154FD4CB648BDF80C176A02CFF0CE589882D32
Malicious:	false
Reputation:	low
URL:	https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0/.well-known/openid-configuration
Preview:	{"token_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/token","token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","client_secret_basic"],"jwks_uri":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/discovery/v2.0/keys","response_modes_supported":["query","fragment","form_post"],"subject_types_supported":["pairwise"],"id_token_signing_alg_values_supported":["RS256"],"response_types_supported":["code","id_token","code id_token","id_token token"],"scopes_supported":["openid","profile","email","offline_access"],"issuer":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0","request_uri_parameter_supported":false,"userinfo_endpoint":"https://graph.microsoft.com/oidc/userinfo","authorization_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize","device_authorization_endpoint":"https://login.microsoftonline.com/f4a12867-922

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1753
Entropy (8bit):	4.9662771331647635
Encrypted:	false
SSDEEP:	48:Ye2+scoQykaO+sc2zcijLiDT4+scWJhKdZKA2+scl32+scj2+sc9moy04jl2+scM:ppscoXXxsc2zjSscWKHLpsc1pscjpscj
MD5:	034063A54B4AE017B2EB557902844BBF
SHA1:	DA028F38C30DB4A59056E644D570B3AEA45FCBA6
SHA-256:	0E5EFE93A3AAE198929E68B021CF757044701E988D0DE5D1C868CC70D9C55639
SHA-512:	509FF262D5C395A117EAA59382830F78DAE8C8C4457DE73A58AD64A4C431B1021183CD749F0500EF77EF23BA06154FD4CB648BDF80C176A02CFF0CE589882D32
Malicious:	false
Reputation:	low
Preview:	{"token_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/token","token_endpoint_auth_methods_supported":["client_secret_post","private_key_jwt","client_secret_basic"],"jwks_uri":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/discovery/v2.0/keys","response_modes_supported":["query","fragment","form_post"],"subject_types_supported":["pairwise"],"id_token_signing_alg_values_supported":["RS256"],"response_types_supported":["code","id_token","code id_token","id_token token"],"scopes_supported":["openid","profile","email","offline_access"],"issuer":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0","request_uri_parameter_supported":false,"userinfo_endpoint":"https://graph.microsoft.com/oidc/userinfo","authorization_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/oauth2/v2.0/authorize","device_authorization_endpoint":"https://login.microsoftonline.com/f4a12867-922

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	980
Entropy (8bit):	4.623650274066085
Encrypted:	false
SSDEEP:	24:YE/O+sn2RE8Gv8+sarUM+sd+8sAIse/sv+sOd+sIM+sX+sxd+sBM+s7sarzsA6sa:YE2+scfp+sWUM+sd+8sAIse/sv+sOd+E
MD5:	65298C79F7AC20C990B82834074EF6B3
SHA1:	8EFC893D15504F2F7F63B2D3781B7211E028E4DF
SHA-256:	D464A1BC7F764A4840BB11353F0B4D858176CDE103C46BA5654204F9B1169283
SHA-512:	06469B3A3BE5C71A5AF08F2EBBC563DCE6EF102D7A5ABE549ADBF266C24453111A351766ECBCDE573425B66C8531A0578FB8D9A1FCEA1CE6B3A38BA4E42E4013
Malicious:	false
Reputation:	low
Preview:	{"tenant_discovery_endpoint":"https://login.microsoftonline.com/f4a12867-922d-4b9d-bb85-9ee7898512a0/v2.0/.well-known/openid-configuration","api-version":"1.1","metadata":[{"preferred_network":"login.microsoftonline.com","preferred_cache":"login.windows.net","aliases":["login.microsoftonline.com","login.windows.net","login.microsoft.com","sts.windows.net"]},{"preferred_network":"login.partner.microsoftonline.cn","preferred_cache":"login.partner.microsoftonline.cn","aliases":["login.partner.microsoftonline.cn","login.chinacloudapi.cn"]},{"preferred_network":"login.microsoftonline.de","preferred_cache":"login.microsoftonline.de","aliases":["login.microsoftonline.de"]},{"preferred_network":"login.microsoftonline.us","preferred_cache":"login.microsoftonline.us","aliases":["login.microsoftonline.us","login.usgovcloudapi.net"]},{"preferred_network":"login-us.microsoftonline.com","preferred_cache":"login-us.microsoftonline.com","aliases":["login-us.microsoftonline.com"]}]}

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
Category:	dropped
Size (bytes):	621
Entropy (8bit):	7.673946009263606
Encrypted:	false
SSDEEP:	12:Xp7fmqfW/e4YC2L0E5DZLB62y/+6lbPa1Gotq8mdd2Xmy2QLBwxD+QkCfBJ:Xp6qf2SCk3LBpy/rtPa1GKq8mOX5jLcD
MD5:	4761405717E938D7E7400BB15715DB1E
SHA1:	76FED7C229D353A27DB3257F5927C1EAF0AB8DE9
SHA-256:	F7ED91A1DAB5BB2802A7A3B3890DF4777588CCBE04903260FBA83E6E64C90DDF
SHA-512:	E8DAC6F81EB4EBA2722E9F34DAF9B99548E5C40CCA93791FBEDA3DEBD8D6E401975FC1A75986C0E7262AFA1B9D1475E1008A89B92C8A7BEC84D8A917F221B4A2
Malicious:	false
Reputation:	low
Preview:	..........}UMo"1..+.....G; .8l...M..$.U.AW......UaX..`'.=......\|..z3...Ms>..Y...QB..W..y..6.......?..........L.W=m....=..w.)...nw...a.z......#.y.j...m...P...#...6....6.u.u...OF.V..07b..\...s.f..U..N..B...>.d.-z..x.2..Lr.Rr)....JF.z.;Lh.....q.2.A....[.&".S..:......]........#k.U#57V..k5.tdM.j.9.FMQ2..H:.~op..H.......hQ.#...r[.T.$.@........j.xc.x0..I.B:#{iP1.e'..S4.:...mN.4)<W.A.).g.+..PZ&.$.#.6v.+.!...x...}.._...d...#.Cb..(..^k..h!..7.dx.WHB......(.6g.7.Wwt.I<.......o.;.....Oi$}f.6.....:P..!<5.(.p.e.%et.)w8LA.l9r..n.....?.F.DrK...H....0F...{.,.......{E..".......x.@..?u......../....8...

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17864
Entropy (8bit):	4.7763382797615765
Encrypted:	false
SSDEEP:	192:+0EkloEEoWNPrYTPaCr24NtgEm2mivT8VY/3XQyuUJqjRIKTUL9c8gXDXFAJ9jbh:BploDoWNGzvlFJxKhzXWxi9wuG
MD5:	061B4DB0C50D80BCDA3C97A6FF077425
SHA1:	89DFB6A8BFAEEE0457092FED06A9AA92EE9387DC
SHA-256:	4F71775CD97686D03503CA25B5299A4B6FE950A2BD46B395082E8B04B43E3A63
SHA-512:	DCD18D393A2F7082073D45BBFBD9954A9D872DF5D426EA910EB7A70DDE2879354D17A99583F567CAC06769CAA98E2ACBF60F574D0F4B6A8FB8404786FFCDCCB5
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/locales/en/Apps.json
Preview:	{. "My Apps": "My Apps",. "_t": "Tue Oct 22 2019 17:30:17 GMT-0700 (Pacific Daylight Time)",. "__t.comment": "{Locked}",. "appTitle": "Apps dashboard",. "frenchAccessibilityLinkText": "Accessibility: partially comformant",. "Apps": "Apps",. "All Apps": "All apps",. "My Groups": "My Groups",. "Search apps": "Search apps",. "noResultsForSearchTerm": "No results for '{{searchTerm}}'",. "resultsForSearchTerm": "Showing results for '{{searchTerm}}'",. "Name": "Name",. "Permissions": "Permissions",. "App permissions": "App permissions",. "Delete": "Delete",. "Restore": "Reset",. "Cancel": "Cancel",. "Create": "Create",. "termsAndConditions": "Terms and conditions",. "returnToDashboard": "Return to Dashboard",. "manageAppUsersTitle": "App assignment",. "manageAppUsersDescription": "Manage the list of users that have access to this resource in Microsoft Entra",. "manageAppUsersLink": "Manage users",. "Revoked permssions for app '{{appName}}'": "Revoked permissions for a

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	downloaded
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	downloaded
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	266307
Entropy (8bit):	5.40439857316643
Encrypted:	false
SSDEEP:	3072:R2eH75+ueMudNxl2FGt25FhlxAxfL7BVhvxLYevyVNlXmEyTdCDOsAHrtBTrx7sC:seH9+4u7Wl4TADOsAf1sswK
MD5:	9DDEA63A6B5FE0C517541E8D54D7CE63
SHA1:	EE8D0DF1D636822FD29500A906ED06998221B769
SHA-256:	A4EACDE3DA3E7E5CFB6B34FB69BBCDC1928E84FA5A70E0484E1CC1C0D3389B92
SHA-512:	081F6146D1598338D69A6854096E4331EA766D43BD779631249C6C1154E882C24E1AF75C4EDA57CCB59ACFEB94BCE44C9146F1DC926537F8DC45D521CC2736C7
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/bundle/microsoft.9a8b6809.js
Preview:	/! For license information please see microsoft.9a8b6809.js.LICENSE.txt /."use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[888],{19428:function(n,e,t){t.d(e,{Z:function(){return gu}});var r=t(43298),i=t(42314),a="initialize",o="name",u="getNotifyMgr",c="identifier",s="push",l="isInitialized",f="config",d="instrumentationKey",v="logger",p="length",g="time",h="processNext",m="getProcessTelContext",y="addNotificationListener",b="removeNotificationListener",C="stopPollingInternalLogs",T="onComplete",I="getPlugin",S="flush",w="_extensions",E="splice",x="teardown",_="messageId",D="message",N="isAsync",k="_doTeardown",O="update",P="getNext",A="diagLog",M="setNextPlugin",R="createNew",L="cookieCfg",U="indexOf",q="substring",V="userAgent",H="split",B="setEnabled",F="substr",j="nodeType",K="apply",W="replace",z="enableDebugExceptions",Z="toLowerCase",J="call",X="type",Y="handler",G="listeners",Q="isChildEvt",$="getCtx",nn="setCtx",en="complete",tn="traceId",rn="spanId",an=

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (61934), with no line terminators
Category:	dropped
Size (bytes):	407026
Entropy (8bit):	5.473039878879073
Encrypted:	false
SSDEEP:	6144:Gtv45ROwcj95E2lp4+oCq45wvNrKZMnHI+87c:GaARnTA
MD5:	EA14D920AC1946E4230CD7328748E6B8
SHA1:	1A71DBDB4C4A2275F1E6AABA4DDB40F649432A45
SHA-256:	ED8C8C14550D6E60719A8661DB4192D09CF9CFDB9260D35AB61801E97468E96A
SHA-512:	2E0A0340FDA0CBB1923B51DCF83903B073099E8B8C933F923D19AE93663096D73413D2EDFFE546C3F31F344501F954B3EA58B152BACEC483DB30F0A0FD53A288
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkapps=self.webpackChunkapps\|\|[]).push([[778],{95562:function(e,t,n){n.d(t,{t:function(){return r}});var o=n(52651);function r(e,t,n){void 0===n&&(n=!0);var r=!1;if(e&&t)if(n)if(e===t)r=!0;else for(r=!1;t;){var i=(0,o.G)(t);if(i===e){r=!0;break}t=i}else e.contains&&(r=e.contains(t));return r}},89236:function(e,t,n){n.d(t,{X:function(){return r}});var o=n(52651);function r(e,t){return e&&e!==document.body?t(e)?e:r((0,o.G)(e),t):null}},52651:function(e,t,n){function o(e,t){return void 0===t&&(t=!0),e&&(t&&function(e){var t,n;return e&&(n=e)&&n._virtual&&(t=e._virtual.parent),t}(e)\|\|e.parentNode&&e.parentNode)}n.d(t,{G:function(){return o}})},2899:function(e,t,n){n.d(t,{w:function(){return i}});var o=n(89236),r=n(73100);function i(e,t){var n=(0,o.X)(e,(function(e){return t===e\|\|e.hasAttribute(r.Y)}));return null!==n&&n.hasAttribute(r.Y)}},73100:function(e,t,n){n.d(t,{U:function(){return r},Y:function(){return o}});var o="data-portal-element";function r(e){e.se

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (956), with no line terminators
Category:	downloaded
Size (bytes):	956
Entropy (8bit):	4.981784418436743
Encrypted:	false
SSDEEP:	24:0E01AZZcW56tyy4qVWyEiVWyqpVWynEVWyoktAVWyNnVX55B2a:0EG+WTy3hlqUfWe5Hf
MD5:	16DC23E82F02BD02AB1AFE10F72CD0BD
SHA1:	51314E6C89CC1292E4F13163570B8C7196ADA02E
SHA-256:	56CBCB933DDA342124753ED9E4ECAE88FE05E739337DB2D26132599C7212B7F2
SHA-512:	8956B9E94CA38D27B31BB791086FD430D555BECB3828592F3E632982EC86B40B4D9C3590AD2E3CF985BF5B55A6699A5244428C709FFCF55D2C95EC6338B5839A
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/?tenantid=f4a12867-922d-4b9d-bb85-9ee7898512a0
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><meta http-equiv="X-UA-Compatible" content="IE=edge"/><link rel="manifest" href="/manifest.json"><title>My Apps</title><base href="/"><meta name="description" content="My Apps"><link rel="icon" href="/favicon.ico"><script defer="defer" src="/bundle/low-change-freq-vendors.791ea13a.js"></script><script defer="defer" src="/bundle/fluent.331533d0.js"></script><script defer="defer" src="/bundle/microsoft.9a8b6809.js"></script><script defer="defer" src="/bundle/azure.e9a30734.js"></script><script defer="defer" src="/bundle/moderate-change-freq-vendors.b9b6c819.js"></script><script defer="defer" src="/bundle/main.03541075.js"></script></head><body style="margin: 0;"><noscript>You need to enable JavaScript to run this app</noscript><div id="root"></div></body></html>

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/favicon.ico
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	17864
Entropy (8bit):	4.7763382797615765
Encrypted:	false
SSDEEP:	192:+0EkloEEoWNPrYTPaCr24NtgEm2mivT8VY/3XQyuUJqjRIKTUL9c8gXDXFAJ9jbh:BploDoWNGzvlFJxKhzXWxi9wuG
MD5:	061B4DB0C50D80BCDA3C97A6FF077425
SHA1:	89DFB6A8BFAEEE0457092FED06A9AA92EE9387DC
SHA-256:	4F71775CD97686D03503CA25B5299A4B6FE950A2BD46B395082E8B04B43E3A63
SHA-512:	DCD18D393A2F7082073D45BBFBD9954A9D872DF5D426EA910EB7A70DDE2879354D17A99583F567CAC06769CAA98E2ACBF60F574D0F4B6A8FB8404786FFCDCCB5
Malicious:	false
Reputation:	low
URL:	https://myapplications.microsoft.com/locales/en-US/Apps.json
Preview:	{. "My Apps": "My Apps",. "_t": "Tue Oct 22 2019 17:30:17 GMT-0700 (Pacific Daylight Time)",. "__t.comment": "{Locked}",. "appTitle": "Apps dashboard",. "frenchAccessibilityLinkText": "Accessibility: partially comformant",. "Apps": "Apps",. "All Apps": "All apps",. "My Groups": "My Groups",. "Search apps": "Search apps",. "noResultsForSearchTerm": "No results for '{{searchTerm}}'",. "resultsForSearchTerm": "Showing results for '{{searchTerm}}'",. "Name": "Name",. "Permissions": "Permissions",. "App permissions": "App permissions",. "Delete": "Delete",. "Restore": "Reset",. "Cancel": "Cancel",. "Create": "Create",. "termsAndConditions": "Terms and conditions",. "returnToDashboard": "Return to Dashboard",. "manageAppUsersTitle": "App assignment",. "manageAppUsersDescription": "Manage the list of users that have access to this resource in Microsoft Entra",. "manageAppUsersLink": "Manage users",. "Revoked permssions for app '{{appName}}'": "Revoked permissions for a

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1864
Category:	dropped
Size (bytes):	673
Entropy (8bit):	7.6596900876595075
Encrypted:	false
SSDEEP:	12:Xl0t8TUViiYi5m6FhSBXWPsigK99WCqKMvBBFThSqfLd81CK6bC+k7LqZLsFlD:XFUVpkNK0Rwid81p6btk7LqZ6D
MD5:	0E176276362B94279A4492511BFCBD98
SHA1:	389FE6B51F62254BB98939896B8C89EBEFFE2A02
SHA-256:	9A2C174AE45CAC057822844211156A5ED293E65C5F69E1D211A7206472C5C80C
SHA-512:	8D61C9E464C8F3C77BF1729E32F92BBB1B426A19907E418862EFE117DBD1F0A26FCC3A6FE1D1B22B836853D43C964F6B6D25E414649767FBEA7FE10D2048D7A1
Malicious:	false
Reputation:	low
Preview:	...........U.n.0....}i..P..C..7l/..d........n...G....yl. .E.......Tu.F.........?$.i.s..s...C..wi$.....r....CT.U.FuS..r.e.~...G.q.....~M..mu}.0.=..&.~.e.WLX.....X..%p..i......7+.........?......WN..%>...$..c..}N....Y4?..x.1......#v...Gal9.!.9.A.u..b..>..".#A2"+...<qc.v....)3...x.p&..K.&..T.r.'....J.T....Q..=..H).X...<.r...KkX........)5i4.+.h.....5.<..5.^O.eC%V^....Nx.E..;..52..h....C"I./.`..O...f..r..n.h.r]}.G^..D.7..i.].}.G.].....{....oW............h.4...}~=6u..k...=.X..+z}.4.].....YS5..J......)......m....w.......~}.C.b_..[.u..9_7.u.u.....y.ss....:_yQ<{..K.V_Z....c.G.N.a...?/..%. .-..K.td....4...5.(.e.`G7..]t?.3..\..... ....G.H...

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	downloaded
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	dropped
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141866
Category:	dropped
Size (bytes):	49804
Entropy (8bit):	7.994672288751266
Encrypted:	true
SSDEEP:	1536:SMuttwJ0uUmAcZjNL6nnQlL+mwKLiQC7Mn3dxPErr:SwJ0vmAcKnnQF+8LJOMn3DPE/
MD5:	6DE768A4DF1E0D0061CDB52EF06346C4
SHA1:	3829A667B97668008023DDA98F4C0772174C8EF6
SHA-256:	58732EEE2ED9091F4F5776DC8A8A14116CBE5A2BA1CCDA0256896BAB08A52128
SHA-512:	CC6966D2C2B43E762750102E734DA6B88D7BFB92DDB5D482EE25029337D95E997466E83001586F2B63DAEE890B5F3188E8EC0F1B084D5EB67CFEA55EDDFAD47D
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0........OL....;w..nf.0.ff.X.'V......4.r~........=........,..JU.......T~.l..?..E.....X..\|t~P9...TN..G..?^.~.............Xx.0..Q..Fa4.#7.q...F.;......4...Q.W&~.@....O.T.y.37J.+Ggf...P....Pz.N...>..a.D..<.m./A,...Q.....WN.Q...8.Db$.G.H<...'....J,..8..{nG.2@HYkL../......=.pL....A?.&Ng.i,......2lo...$.<.3...?~pW..=...L..&x.QR.u3..#6q2....U.Y1..".M. .<W."7@......w..."H,@......0..P....p:...[...E].A..%..V.K\.......F.ir.}.Lc{s..O.g..(\|.........9o..A.t.K....Wv.l6..T.......t.........+..........-w {l..g...V..\=W.j.oaT}t.J`E..$W......;.k.\.t.w~}".....jf..W..."..a..0y........@.T.1.G0........Y_....../..........@.....]+....q\.cR.....t.3S-5g....'U.j.d......y.n,:).\|.?.FW...d...\|.......*.`.3....kMKf...#..,DM.TY+..g.........e+.>...{y..N/..g-#FV.V.p.......Xs.(..{..}..-.O..H=."...........8M.g..!H..0.~.Tdf.;...$D%N .)..!..V...'r\.... ...&....J\|."Nd%D:uw:.<W.+...H&.Z...L=..U.v....J.t.0%+...U..3M....y...L..G...p='.....pB"-..\|.....j .a".i=O.R Q2..."...

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3450), with CRLF line terminators
Category:	downloaded
Size (bytes):	3452
Entropy (8bit):	5.117912766689607
Encrypted:	false
SSDEEP:	96:3qO9I9Sz9KHULI5m4UidBGLosqAsosushswsosry:a2IYz95qTdBac
MD5:	CB06E9A552B197D5C0EA600B431A3407
SHA1:	04E167433F2F1038C78F387F8A166BB6542C2008
SHA-256:	1F4EDBD2416E15BD82E61BA1A8E5558D44C4E914536B1B07712181BF57934021
SHA-512:	1B4A3919E442EE4D2F30AE29B1C70DF7274E5428BCB6B3EDD84DCB92D60A0D6BDD9FA6D9DDE8EAB341FF4C12DE00A50858BF1FC5B6135B71E9E177F5A9ED34B9
Malicious:	false
Reputation:	low
URL:	https://login.live.com/Me.htm?v=3
Preview:	<script type="text/javascript">!function(t,e){for(var s in e)t[s]=e[s]}(this,function(t){function e(n){if(s[n])return s[n].exports;var i=s[n]={exports:{},id:n,loaded:!1};return t[n].call(i.exports,i,i.exports,e),i.loaded=!0,i.exports}var s={};return e.m=t,e.c=s,e.p="",e(0)}([function(t,e){function s(t){for(var e=f[S],s=0,n=e.length;s<n;++s)if(e[s]===t)return!0;return!1}function n(t){if(!t)return null;for(var e=t+"=",s=document.cookie.split(";"),n=0,i=s.length;n<i;n++){var a=s[n].replace(/^\s(\w+)\s=\s*/,"$1=").replace(/(\s+$)/,"");if(0===a.indexOf(e))return a.substring(e.length)}return null}function i(t,e,s){if(t)for(var n=t.split(":"),i=null,a=0,r=n.length;a<r;++a){var c=null,S=n[a].split("$");if(0===a&&(i=parseInt(S.shift()),!i))return;var l=S.length;if(l>=1){var p=o(i,S[0]);if(!p\|\|s[p])continue;c={signInName:p,idp:"msa",isSignedIn:!0}}if(l>=3&&(c.firstName=o(i,S[1]),c.lastName=o(i,S[2])),l>=4){var f=S[3],d=f.split("\|");c.otherHashedAliases=d}if(l>=5){var h=parseInt(S[4],16);h&&(c.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 190152
Category:	dropped
Size (bytes):	61052
Entropy (8bit):	7.996159932827634
Encrypted:	true
SSDEEP:	1536:HQaq1Q7XOos5ZBIp+1Zr52IGmCJijm1qAxTe9wzf:fq1HoUBIpU5TG7JSmwuTe+b
MD5:	C1E82BF71ADD622AD0F3BF8572F634FC
SHA1:	6CA863D4CAB96669202548D301693B3F5F80B0D5
SHA-256:	BA48AF15D297DB450DC4870242482145ADDB2D18375A4871C490429E2DC5464A
SHA-512:	820A7F8A0C8EA33A8FE1E90CDC35F45DC1E143E836B0D8EA047E1E312F8CAEC72CDEE4E7DB54760A4D749CD0ACFE103A27E39A9A56EB2D704E448A67B0D0C079
Malicious:	false
Reputation:	low
Preview:	...........iw.F.0.....'W...4)/qH#..D.L.EK...................().}.{..@.z........Qz.,..Ox.....i4..S.&.p......9..W....);a.].a....Y......Y<,.n..."`Is....5....P..\|.-..x1.F...@...yRlG.O..5.Q.\|.gy.c.^....r.EC.....xd.oL..$./..\|3.......r^.j.}...M... )x.D.....%.....B..t....vZ....2L......px.G.1..lZYh...$.....,.../.a..;Q...._..#.....e.T.:trA_.0.:.f...........(I.x?.S...<7...o..0.`r.x.+.2..o+...4/..vzY7.C'.....!.r..4n....]P.+a..........._.8,..G>...{.4B....o.9.....r......X3..U.....'.0.@...lrX....r.W\e...].}....(.l......=........3....S..........^=D..[.zw6..e...<WQ.w.(.X..S....>.^.....^B..O-.(..U.R;h..v.......4.Dc .?..z....r.._.Y......M.a.?,...?..U.....OF.w\h$.Q..5....Q.Oj ....5U..8..Y......gYZM....y..OrY.z]B..y..;o.....oT.r...H..{K...Y&Q.........W....N4.......].0m..m........E.bc..~..e.. .nzS.i3^......).,Y}.=1H...... V...g.)....X..G...C....@o,.i.~...as...ehEH....u9l.2...y\J.?.(.I.q%..F#..D../>pr$...,...m.6..:,<s..~S.fl;k.'<..}z.Y.

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 449703
Category:	dropped
Size (bytes):	122193
Entropy (8bit):	7.997505273485286
Encrypted:	true
SSDEEP:	3072:H4ojbjOwCNA0H+Zenw+OA6m3SmjcnlDHG21TIoN:dHyi0Ity3wnY2lIA
MD5:	AF2A7A4929E13F15A045C8C8D80A4543
SHA1:	6A1EC81A5085D0846C77DD616AE686FF732C32D6
SHA-256:	EB47C5509CEF44C582EF8ABB8C58766EA6118AD40B0FFC22A7652ED1DC6FEE8B
SHA-512:	D3B1FC08CB7DDE27E9A16B749B0024A9F11D5067B0D023F8EB2E468533297DFC5BD7739C9B696F8D11D269350FA5F2D329FE6ABC4AB679888FDC97B2450DB336
Malicious:	false
Reputation:	low
Preview:	...........{W.H.8....F3...a,..E.Yc..i......,...Y.J2.1......R.LU....s.QX..................Oix..).NK7...KW...........`....G/..=......[..R......Y....KS.7.l.4..i)yd.Y...$..^.@....R......%o...J..gP.7..(.7.....0..V...j..#.Yi..,.<z.c..s.0..I)b...x...&....R..8..G.ji......-......\.pL...a.^.]..a.X&......2.o...$,..s..l<^0)..1...Yu..w.$..0c.=c.}...xT"d....{..@.&.. .es0q.$bl.D..1:z+y..t.F..X.....qn.../fUI...q....r.f.wk..Q.Y.I2.....<.GU'...\|..1t.y...{....w..y.s.+.t5.A.J.............$...}...k.......tu........;Vf...]...\|.Q......Z.].^...q..VMw........`.<..;;.....{}0.US..O..m..v<x..%3..Tu`...U...;.~{....c.?....?...v ..-E..2......{+..*T.....p....S...qR..+K1@k..mkQo...A........]p_.X2........B.....I..3..7..]d....@.bX....z.g...\|..V-K[..^(..y...^N.^..oJF.kQ.P.R..F..om.B.pL.<F....R...(..i..,......I.F< ..T...`1.W3....L....+.S.M.c....110..........H....E,O..v..l..=...H$.J..J....4.C..dzPI..S.B@RJ.V>..GJ."/.eEwC..Q}d.k......KN\|.i...=.....!.V....<%J.D......b

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	downloaded
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17864
Entropy (8bit):	4.7763382797615765
Encrypted:	false
SSDEEP:	192:+0EkloEEoWNPrYTPaCr24NtgEm2mivT8VY/3XQyuUJqjRIKTUL9c8gXDXFAJ9jbh:BploDoWNGzvlFJxKhzXWxi9wuG
MD5:	061B4DB0C50D80BCDA3C97A6FF077425
SHA1:	89DFB6A8BFAEEE0457092FED06A9AA92EE9387DC
SHA-256:	4F71775CD97686D03503CA25B5299A4B6FE950A2BD46B395082E8B04B43E3A63
SHA-512:	DCD18D393A2F7082073D45BBFBD9954A9D872DF5D426EA910EB7A70DDE2879354D17A99583F567CAC06769CAA98E2ACBF60F574D0F4B6A8FB8404786FFCDCCB5
Malicious:	false
Reputation:	low
Preview:	{. "My Apps": "My Apps",. "_t": "Tue Oct 22 2019 17:30:17 GMT-0700 (Pacific Daylight Time)",. "__t.comment": "{Locked}",. "appTitle": "Apps dashboard",. "frenchAccessibilityLinkText": "Accessibility: partially comformant",. "Apps": "Apps",. "All Apps": "All apps",. "My Groups": "My Groups",. "Search apps": "Search apps",. "noResultsForSearchTerm": "No results for '{{searchTerm}}'",. "resultsForSearchTerm": "Showing results for '{{searchTerm}}'",. "Name": "Name",. "Permissions": "Permissions",. "App permissions": "App permissions",. "Delete": "Delete",. "Restore": "Reset",. "Cancel": "Cancel",. "Create": "Create",. "termsAndConditions": "Terms and conditions",. "returnToDashboard": "Return to Dashboard",. "manageAppUsersTitle": "App assignment",. "manageAppUsersDescription": "Manage the list of users that have access to this resource in Microsoft Entra",. "manageAppUsersLink": "Manage users",. "Revoked permssions for app '{{appName}}'": "Revoked permissions for a

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	17864
Entropy (8bit):	4.7763382797615765
Encrypted:	false
SSDEEP:	192:+0EkloEEoWNPrYTPaCr24NtgEm2mivT8VY/3XQyuUJqjRIKTUL9c8gXDXFAJ9jbh:BploDoWNGzvlFJxKhzXWxi9wuG
MD5:	061B4DB0C50D80BCDA3C97A6FF077425
SHA1:	89DFB6A8BFAEEE0457092FED06A9AA92EE9387DC
SHA-256:	4F71775CD97686D03503CA25B5299A4B6FE950A2BD46B395082E8B04B43E3A63
SHA-512:	DCD18D393A2F7082073D45BBFBD9954A9D872DF5D426EA910EB7A70DDE2879354D17A99583F567CAC06769CAA98E2ACBF60F574D0F4B6A8FB8404786FFCDCCB5
Malicious:	false
Reputation:	low
Preview:	{. "My Apps": "My Apps",. "_t": "Tue Oct 22 2019 17:30:17 GMT-0700 (Pacific Daylight Time)",. "__t.comment": "{Locked}",. "appTitle": "Apps dashboard",. "frenchAccessibilityLinkText": "Accessibility: partially comformant",. "Apps": "Apps",. "All Apps": "All apps",. "My Groups": "My Groups",. "Search apps": "Search apps",. "noResultsForSearchTerm": "No results for '{{searchTerm}}'",. "resultsForSearchTerm": "Showing results for '{{searchTerm}}'",. "Name": "Name",. "Permissions": "Permissions",. "App permissions": "App permissions",. "Delete": "Delete",. "Restore": "Reset",. "Cancel": "Cancel",. "Create": "Create",. "termsAndConditions": "Terms and conditions",. "returnToDashboard": "Return to Dashboard",. "manageAppUsersTitle": "App assignment",. "manageAppUsersDescription": "Manage the list of users that have access to this resource in Microsoft Entra",. "manageAppUsersLink": "Manage users",. "Revoked permssions for app '{{appName}}'": "Revoked permissions for a

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
Category:	dropped
Size (bytes):	1435
Entropy (8bit):	7.8613342322590265
Encrypted:	false
SSDEEP:	24:XjtSZi0kq+yVCGYXVrO4vDxik/N/z5VaLPbholJvf6dblke68eRZJyBDz3BnZcNX:XgDkpyVCGca4b//9z5oPXdbl9688qRzY
MD5:	9F368BC4580FED907775F31C6B26D6CF
SHA1:	E393A40B3E337F43057EEE3DE189F197AB056451
SHA-256:	7ECBBA946C099539C3D9C03F4B6804958900E5B90D48336EEA7E5A2ED050FA36
SHA-512:	0023B04D1EEC26719363AED57C95C1A91244C5AFF0BB53091938798FB16E230680E1F972D166B633C1D2B314B34FE0B9D7C18442410DB7DD6024E279AAFD61B0
Malicious:	false
Reputation:	low
Preview:	...........WMo.7..+..uV.HJ...{..........&..v...(Q.F.....aW.Q.\|..~.\|{~...b{8...zv.....8\|...b.gxb.y{.x<\lS...p...p..l7...o.}.v.....t.........r..r.\|9?.......HP...r.4.aGA.j....7.!....K.n.B.Z.C.]....kj..A..p...xI...b..I!K..><.B..O....#...$.]h.bU.;.Y...).r.u....g.-w.2..vPh....q....4_..N\..@y).t{.2pj.f..4h.....NC.....x.R..P..9.....".4.`%N..&...a.@.......fS)A4.F..8e9KHE....8d.CR.K..g..Q.......a....f.....dgN.N.k..#w..........,.".%..I.q.Y.R]..7.!.:.Ux...T.qI..{..,b..2..B...Bh...[o..[4....dZ.z.!.l....E.9$..Y.'...M.,p..$..8Ns3.B.....{.....H..Se3....%.Ly...VP{.Bh.D.+....p..(..`....t....U.e....2......j...%..0.f<...q...B.k..N....03...8....l.....bS...vh..8..Q..LWXW..C.......3..Pr.V.l...^=VX\,d9f.Y;1!w.d,.qvs....f;.....Zhrr.,.U....6.Y....+Zd.R...but....".....4.L...z........L.Q......)....,.].Y.&....*ZsIVG.^...#...e..r....Z..F..c..... .QDCmV..1.~...J9..b_Oov\..X.R..._.TqH.q.5G.0{ZphQ..k...s..\.../.Dp..d`#......8.#Y...Mb.j.Q......=n4.c....p.[.SI.....0.N.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113401
Category:	downloaded
Size (bytes):	20414
Entropy (8bit):	7.979508934961097
Encrypted:	false
SSDEEP:	384:ekqQ8rNFEhCgMyL2iww6oIR8mWG+Pu9Z5IMU7ULgCsHqZo9v8:9CGEiL/w7R8DW9Z5BU7UMZHqok
MD5:	48981D3CF57E7C58CA7E3E851EF9354E
SHA1:	73593DE7633B10F9FFD0EF0E46280FA40FF433FF
SHA-256:	8A5E756923CC5C3F013862427B7622F58A52501C5A6017FFF2FDB2AFD94A10C2
SHA-512:	4E2B6EA222CE77E6EC12E059362DDDEA13758CDC77259FF5CF449BED5A1677E112CF49CD7ED7B1378F96FFD7C5E21BE66D2CA7EB2A9CD8026732F867FB5AE8B1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css
Preview:	...........}ks.6.....\.R;.J.H=-WR;..&>g^53.G.R[.DY<C..$e.WG..... )...{+'g...l............bw_f7.:x..<x.-.V5)/wE..Y...gy.0.(.-o.e.\|..._..I.....?<{.!x...W..._..^..p..E..'..Y...<.....]..6(. ..D.....Y.......:.ve.?..!..\|t...].+.......a.......\|.P...u.H.d.d.r.c[..~.L..n.-.}e.H3...r..^..iP.u..z.....)..Z.jx..C'......u..{.C...N.o.m~..F(b..f.....h..O.....6....kr.......n2m M$.R..R..i{.~.....n.dKY..#.Kn.4..G...O..l.#.a=..iU..].S.2.wY..O.\|...Z.A....].uU.._%U.<...pp..u=.....C.R..S.....0...A<......&...W..'o.T.."..jO..^+.....DiW.b..7i..7..........lKe.0.~B0.....zQu#...YB.,.{.&.6..G.6..._...J.i.?.LS$( .^.{..u.-.0....K....M&j..s.yB..+....^.)...7e.....]..eFI_.kRX.B......D[.4......+.u=>....R.`QEK...R..d...*S.. ,c5RKBK(......][..eF{T.....6...".....Uk:..S.0Ro.}B.dwJZ}U..S.F.....&.&.~\|......{..Ep.>x..._....}p..=.}...v...7?}...g..1&.......}...^...o.x.>x...../.^....._.........w.v./.........BA...{J..w..$?.}w....?zO.r..5...7.gl..z...g.?.{....R.......yGj

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 406986
Category:	downloaded
Size (bytes):	116365
Entropy (8bit):	7.997737813291819
Encrypted:	true
SSDEEP:	1536:9IyZY3F6VvgB9lnrhw1h+WbhcNtrpUzwXkqGeKTgcao2AYvXMpclkcKAXWG8NYh:9BZ5hu91Nwz+trpGmkReMgcaQYXlkcjR
MD5:	2D3FBED6DDD719FCC1BFB500B612FCEC
SHA1:	CD91B795DDE806AC8A38E51CCB6E8BAD8E57DA1B
SHA-256:	B2566B646F02DF4CE30B05D8223B78130A719D4EC9E4794A0106C371ADE33CC7
SHA-512:	A870E514B325D6FDC4D154438A8DD333C7AB46E545C1B27AC4869D9F1D8594CA1CDC530F5E96C835220DDAD4E1CEF841673696978031B5237E783972AEE701D1
Malicious:	false
Reputation:	low
URL:	https://aadcdn.msauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js
Preview:	...........k[.H.(.}..[..-..c.0DFxHBz.I......O.a...#yt......k...J..&...........^.~...._..j...W;.8<.....]....m...~.}<.8~s.~=.(....qm.Oy.~....jaP......h.F^......\|oZ.G.M-...,...a..~..GW\|...L....N.(y...Z-..Cm......p.......?.5/.QmS..b^K...jw..8.}..Q.....!.o..8...&X.x-.Im.F.D..U;.....-.T.:...1........8Ka..M.L.ZZ'....>........x....v.S;.<...0J.I.0.G.....B.F..c.k.~....C.:...r..,.w.q~....q......#42V.q..f\|.kK...1o.mP.}.......N..n.w6.%^M.d.;...~2I.Z..fs...S/......F..=?...5....s..N.+.A.mx...j.T......?..W._p6.\|.}\|.{O.....2..`..._......g....j..xb^^...a.y.....s......4....q.Y..^T....X,.....m..~v,.....WP.U...:O".YoRX...7..S...zI.v.......mq.....E.,z.%....L\|.>.M.'i..ki3.u+.~...x.=...?6.%?.[.G.`Z=.$.w..4.."...R.1.k.\|..N.`......3...7.].'.E..).az......<a....4q..6.(..=~..........frk..?M#^Q.z..A..M.f.......S....s..d.e91._,zO.[X.......4.G..!.9Vg.......j.-?~.z.w..f.M............,...Z....w5..#.^..M.P.'.X.n/..mW.\|......0...w../...>\...l.......h...q>.w...FC[....7.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 18:00:34.720777035 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:34.720803022 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:34.720873117 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:34.721065998 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:34.721072912 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.420506001 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.423156977 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:35.423177004 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.424736977 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.424865961 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:35.426105976 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:35.426193953 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.479510069 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:35.479521036 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:35.526138067 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:36.157857895 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.157905102 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:36.157963037 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.161967039 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.161984921 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:36.869159937 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:36.869229078 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.874130011 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.874140978 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:36.874464989 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:36.916404963 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.916657925 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:36.959408998 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.159789085 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.159938097 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.160044909 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.160082102 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.160101891 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.160113096 CEST	49742	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.160119057 CEST	443	49742	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.202832937 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.202933073 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.203027010 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.203438997 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.203464985 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.846153021 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.846302986 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.848239899 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.848253012 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.848654985 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:37.855444908 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:37.903398991 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:38.105943918 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:38.106026888 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:38.106935978 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:38.106935978 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:38.106935978 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:38.417114019 CEST	49743	443	192.168.2.4	23.60.203.209
Oct 10, 2024 18:00:38.417165995 CEST	443	49743	23.60.203.209	192.168.2.4
Oct 10, 2024 18:00:45.303855896 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:45.303930998 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:45.304053068 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:45.381978989 CEST	49739	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:00:45.381994963 CEST	443	49739	142.250.184.196	192.168.2.4
Oct 10, 2024 18:00:46.766635895 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:46.766673088 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:46.766791105 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:46.766948938 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:46.766961098 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.440416098 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.450993061 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.451031923 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.451976061 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.452055931 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.676352978 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.676604986 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.677833080 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.677845955 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.727236986 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.785130024 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785178900 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785200119 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785228968 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.785238028 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785254955 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.785268068 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785291910 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.785312891 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.785368919 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.785376072 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.839685917 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.874869108 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874883890 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874906063 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874922991 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874938965 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874950886 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.874959946 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.874974012 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.874984026 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.875042915 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.877134085 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.877156019 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.877192020 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.877232075 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.877240896 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.877269030 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.877276897 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.878807068 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.883428097 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.883445024 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.945158958 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.945169926 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.945389032 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.954467058 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.954494953 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.966193914 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.966223955 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:47.966345072 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.966698885 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:47.966712952 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.435796022 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.435847044 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.435920000 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.437244892 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.437263012 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.452007055 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.452028036 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.452284098 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.452522993 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.452562094 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.452631950 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.453013897 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.453031063 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.453147888 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.453157902 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.637010098 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.637406111 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.637429953 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.638314962 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.638370991 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.638818026 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.638878107 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.638982058 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.638991117 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.642596006 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.642777920 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.642802000 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.644304037 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.644364119 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.644664049 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.644746065 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.682832956 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.698560953 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.698585033 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.720853090 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 10, 2024 18:00:48.728198051 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 10, 2024 18:00:48.728275061 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 10, 2024 18:00:48.742624044 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742675066 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742695093 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742723942 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.742734909 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742769957 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.742774963 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742780924 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.742789030 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.742815018 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.746006966 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.832890034 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.832928896 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.832961082 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.832983971 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.833013058 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.833028078 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.836230993 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836277962 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836303949 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.836316109 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836344004 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.836374044 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.836380005 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836410999 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836563110 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.836575031 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:48.836642981 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.837022066 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:48.837038040 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.090876102 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.091902971 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.092061043 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.092082024 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.092245102 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.092269897 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.092641115 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.093138933 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.093276978 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.093450069 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.093738079 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.093803883 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.093827963 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.093978882 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.094142914 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.094150066 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.135118008 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.135574102 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.135600090 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.136693001 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.137156010 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.137335062 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.137522936 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.139409065 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.149044037 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.183406115 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239689112 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239717007 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239751101 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239773989 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239803076 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239818096 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239828110 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239844084 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239891052 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239912033 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239933968 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239948034 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239975929 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.239991903 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239991903 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.239996910 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.240031004 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.240078926 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.240078926 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.240091085 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.267972946 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268035889 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268146992 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268162012 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.268184900 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268205881 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.268238068 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.268250942 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268398046 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.268824100 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.269306898 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.269326925 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.269339085 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.269375086 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.273107052 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.273148060 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.273391962 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.273467064 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.273475885 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.291415930 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.320054054 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.320168018 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.320193052 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.320240974 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.320291042 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321033001 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321067095 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321114063 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321134090 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321152925 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321152925 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321191072 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321191072 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321197987 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321604967 CEST	49787	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.321618080 CEST	443	49787	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.321686029 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.322999001 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.323052883 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.323111057 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.323120117 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.323218107 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.407720089 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.407794952 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.407865047 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.407865047 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.407893896 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.407984018 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.408620119 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.408675909 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.408719063 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.408729076 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.409094095 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.410445929 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.410495043 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.410536051 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.410545111 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.410593987 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.410593987 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.411281109 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.411334991 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.411429882 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.411429882 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.411439896 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.411885023 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.493475914 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.493643045 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.493669033 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.493834019 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.494771004 CEST	49788	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.494793892 CEST	443	49788	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.506437063 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.518646002 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.518683910 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.518856049 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.519078016 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.519098043 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.547406912 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612693071 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612755060 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612777948 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612797976 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612814903 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.612839937 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612859964 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612881899 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.612886906 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.612895012 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.612938881 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.612938881 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.705425024 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.705493927 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.705513000 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.705540895 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.705563068 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.705585957 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.707133055 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.707195044 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.707278967 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.707278967 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.707297087 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.707335949 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.808485985 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.808572054 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.808588028 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.808631897 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.808651924 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.808674097 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.808679104 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.808778048 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.808829069 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.810688972 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:49.810710907 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.953429937 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:49.998754025 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.025798082 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.025825024 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.026988029 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.030575037 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.030757904 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.031985998 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.035799980 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.035845995 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.035912991 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.036506891 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.036540031 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.036593914 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.036760092 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.036786079 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.036982059 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.037002087 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.079406023 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132735014 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132802010 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132822037 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132860899 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132898092 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132939100 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.132966042 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.132982969 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.133018017 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.133027077 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.133073092 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.133117914 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.133167028 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.187047005 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.229029894 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.229059935 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.230216980 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.230499983 CEST	49791	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.230528116 CEST	443	49791	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.231430054 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.231615067 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.233171940 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.239264965 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.239304066 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.239382982 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.239599943 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.239608049 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.275403976 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.341916084 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.341939926 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.342011929 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.342036963 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.342050076 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.342077017 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.342078924 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.342104912 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.342129946 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.424798965 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.424865007 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.424891949 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.424916983 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.424937010 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.424954891 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.430250883 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.430306911 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.430326939 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.430340052 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.430366039 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.430382967 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.511679888 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.511724949 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.511784077 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.511805058 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.511831999 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.511851072 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.512486935 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.512532949 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.512559891 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.512571096 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.512595892 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.512614012 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.513520956 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.513564110 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.513597965 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.513607979 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.513633013 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.513648033 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.518049002 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.518090010 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.518106937 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.518117905 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.518146038 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.518162966 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.599170923 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.599255085 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.599277020 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.599401951 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.599447966 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.599761009 CEST	49793	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.599776983 CEST	443	49793	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.694559097 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.694885015 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.694900990 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.695308924 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.695847988 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.695847988 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.695866108 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.695934057 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.720304966 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.720608950 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.720633984 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.721101999 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.721492052 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.721571922 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.721668959 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.741066933 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.763413906 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.774251938 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.798259020 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798276901 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798290014 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798337936 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.798355103 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798363924 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798412085 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.798413992 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.798472881 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.799724102 CEST	49795	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.799740076 CEST	443	49795	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.804781914 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.804826021 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.805028915 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.805298090 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.805320024 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858158112 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858191967 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858201981 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858228922 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858247042 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858259916 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858270884 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.858298063 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.858350039 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.858350039 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.928359032 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.928791046 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.928808928 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.929153919 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.929475069 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.929532051 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.929613113 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.939064026 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.939095020 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.939155102 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.939182997 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.939198971 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.939225912 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.951595068 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.951623917 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.951689959 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.951715946 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.951752901 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.951781988 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:50.971410036 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:50.977372885 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.030961990 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.030997992 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.031064034 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.031100035 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.031138897 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.031261921 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.032109022 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.032131910 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.032176971 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.032190084 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.032221079 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.032464027 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.033443928 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.033467054 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.033571959 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.033586025 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.033644915 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.039627075 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039658070 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039666891 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039704084 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039710045 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.039732933 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039746046 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.039755106 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.039778948 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.039804935 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.044342041 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044364929 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044428110 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.044441938 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044507027 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.044565916 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044627905 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.044641972 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044667959 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.044873953 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.045608997 CEST	49794	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.045640945 CEST	443	49794	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.049770117 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.049804926 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.049896002 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.050641060 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.050652981 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.104934931 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.104979038 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.105042934 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.105289936 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.105303049 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.105767965 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.105859041 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.105926991 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.106112957 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.106134892 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.121150017 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.121201992 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.121290922 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.121551037 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.121566057 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.129698038 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.129722118 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.129765987 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.129774094 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.129822016 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.132040977 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.132070065 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.132113934 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.132122040 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.132158041 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.132179976 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.224895000 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.224952936 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.224982977 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.224993944 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.225008011 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.225033998 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.225056887 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.231868029 CEST	49796	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.231893063 CEST	443	49796	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.422209978 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.422297001 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.422374010 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.422764063 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.422800064 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.442837954 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.443177938 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.443212032 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.443564892 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.443882942 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.443958044 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.443995953 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.491404057 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.492925882 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.545448065 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545469046 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545479059 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545509100 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545541048 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545542955 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.545582056 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.545600891 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.545600891 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.545629978 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.546113968 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.546158075 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.546166897 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.546181917 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.546231031 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.549380064 CEST	49797	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.549396038 CEST	443	49797	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.703896046 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.704161882 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.704180956 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.704863071 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.705286026 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.705372095 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.705473900 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.747406960 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.761580944 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.761825085 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.761850119 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.762157917 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.762665987 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.762665987 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.762681007 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.762731075 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.765965939 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.766197920 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.766246080 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.766822100 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.767108917 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.767189026 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.767200947 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.767220020 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.792639017 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.792960882 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.792977095 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.794825077 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.794886112 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.795198917 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.795280933 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.795296907 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.803200006 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.811676025 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.811707020 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.811728001 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.811769009 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.811794043 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.811813116 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.811846972 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.818407059 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.839395046 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.848771095 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.848778009 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.862396955 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.863653898 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.863718987 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.864147902 CEST	49799	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.864161968 CEST	443	49799	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.867664099 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.867717981 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.867796898 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.867804050 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.867997885 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.868019104 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.868473053 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.868540049 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.868541002 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.868781090 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.872108936 CEST	49800	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.872148991 CEST	443	49800	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.898375034 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.898415089 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.898463011 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.898489952 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.898508072 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.898782969 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.900362968 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.900387049 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.900448084 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.900454998 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.900511980 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.900944948 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.908102036 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.908147097 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.908279896 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.908518076 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.908533096 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915118933 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915146112 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915155888 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915174007 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915193081 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.915194988 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915205002 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915231943 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.915241957 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.915261984 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.915280104 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.996864080 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.996893883 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.996951103 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.996975899 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.996994019 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.997013092 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.998078108 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.998100042 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.998219013 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.998226881 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.998295069 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.999819994 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.999842882 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.999881983 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.999886990 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:51.999913931 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:51.999928951 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.001648903 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001671076 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001710892 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.001717091 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001744986 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.001755953 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.001782894 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001840115 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.001848936 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001879930 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.001950979 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.002235889 CEST	49798	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.002255917 CEST	443	49798	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005357027 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005367994 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005392075 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005431890 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.005444050 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005466938 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005471945 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.005489111 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.005508900 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.005518913 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005558968 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.005624056 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.006046057 CEST	49801	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.006062031 CEST	443	49801	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.038695097 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.038763046 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.038948059 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.039412022 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.039436102 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.523694038 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.544893026 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.544914961 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.545260906 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.546457052 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.546513081 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.546602011 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.585688114 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.587402105 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.588346004 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.588373899 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.588850975 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.601306915 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.632545948 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.645483017 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.645564079 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.645642996 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.652050018 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.652216911 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.667157888 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.707410097 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.708039045 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.724792004 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.724812031 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.728617907 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.728698015 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.735244989 CEST	49804	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.735289097 CEST	443	49804	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.744919062 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.745135069 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.752043009 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.752068043 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.763232946 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.763283014 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.763351917 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.763427973 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.770530939 CEST	49805	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.770551920 CEST	443	49805	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.806277037 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.855865002 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.855932951 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.855953932 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.855977058 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.855990887 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.856014967 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.856031895 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.856035948 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.856059074 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.856096029 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.856103897 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.856120110 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.897895098 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946213961 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946247101 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946285963 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946295023 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946316957 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946336031 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946355104 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946356058 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946400881 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946799994 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946856022 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946866989 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.946907043 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.946999073 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:52.947046995 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.947490931 CEST	49806	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:52.947509050 CEST	443	49806	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.621740103 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.622184038 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.622220993 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.623270035 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.623332024 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.623977900 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.624046087 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.624209881 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.624219894 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.664180040 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.726563931 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.726659060 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.726731062 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.733416080 CEST	49803	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.733460903 CEST	443	49803	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.752204895 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.752234936 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:53.752293110 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.752733946 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:53.752748966 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.412923098 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.413362980 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:54.413389921 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.413861036 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.414199114 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:54.414277077 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.414355040 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:54.455404043 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.514373064 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.514439106 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:00:54.514589071 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:54.515382051 CEST	49808	443	192.168.2.4	13.107.246.45
Oct 10, 2024 18:00:54.515400887 CEST	443	49808	13.107.246.45	192.168.2.4
Oct 10, 2024 18:01:24.536039114 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:24.536138058 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:24.536436081 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:24.536542892 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:24.536570072 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.298736095 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.298810005 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.300574064 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.300586939 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.300909042 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.312175989 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.355442047 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.420855999 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.420891047 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.420907974 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.420974970 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.421025038 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.421057940 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.421082973 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.509303093 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.509373903 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.509391069 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.509419918 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.509448051 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.509465933 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.511990070 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.512020111 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.512059927 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.512089968 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.512109995 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.512131929 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.600794077 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.600828886 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.600892067 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.600930929 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.600948095 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.600975990 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.602185011 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.602200031 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.602267981 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.602286100 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.602344036 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.604007006 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.604027987 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.604093075 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.604109049 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.604162931 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.607240915 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.607259035 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.607300997 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.607315063 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.607342958 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.607362986 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.694935083 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.694963932 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.695074081 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.695111990 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.695161104 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.696284056 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.696304083 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.696355104 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.696386099 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.696399927 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.696433067 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.697828054 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.697849035 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.697897911 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.697920084 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.697957993 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.700057030 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.700076103 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.700138092 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.700159073 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.700201988 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.706595898 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.706661940 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.706733942 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.709525108 CEST	49810	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.709558010 CEST	443	49810	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.841584921 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.841639996 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.842063904 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.842592001 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.842628002 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.842695951 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.925959110 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.925977945 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.925986052 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.926002026 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.934777021 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.934873104 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.937047005 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937056065 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937076092 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.937077045 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.937114954 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937170982 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937180042 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937393904 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937402964 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.937407017 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.937433958 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:25.940777063 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:25.940788984 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.578347921 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.580055952 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.581686974 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.581748962 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.582093000 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.585418940 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.585434914 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.585686922 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.585710049 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.585973978 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.586644888 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.592762947 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.592775106 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.592869043 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.592894077 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.596282959 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.596296072 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.597402096 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.597414017 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.600389957 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.600399971 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.600403070 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.600431919 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:26.604516983 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:26.604526997 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.022402048 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.022474051 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.022573948 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.022612095 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.022644043 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.022664070 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.022697926 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.024053097 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.024084091 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.024141073 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.024153948 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.024173975 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.024244070 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.024288893 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.024987936 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025013924 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025064945 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.025074005 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025084972 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025125027 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.025571108 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025624990 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.025830030 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025887012 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.025923967 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.049647093 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.049647093 CEST	49815	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.049734116 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.049746990 CEST	443	49815	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.051749945 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.051749945 CEST	49814	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.051800013 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.051826000 CEST	443	49814	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.052087069 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.052107096 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.052131891 CEST	49812	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.052148104 CEST	443	49812	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.053808928 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.053845882 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.053859949 CEST	49811	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.053868055 CEST	443	49811	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.058408976 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.058423996 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.058454037 CEST	49813	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.058468103 CEST	443	49813	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.065835953 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.065892935 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.065958023 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069122076 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069158077 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.069253922 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069612026 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069653034 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.069742918 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069751978 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.069813013 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069967985 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.069992065 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.070651054 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.070676088 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.070739985 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.070765018 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.070854902 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.070928097 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.071022987 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.071034908 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.071115971 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.071141005 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.071361065 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.071417093 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.732038021 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.733078957 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.735641003 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.752176046 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.752228022 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.753506899 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.753523111 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.754220009 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.754257917 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.755176067 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.755193949 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.755778074 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.755805969 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.756660938 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.756665945 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.757816076 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.758574963 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.758582115 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.759408951 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.759413004 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.780013084 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.780756950 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.780797958 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.781584024 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.781605959 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.852588892 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.852682114 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.852757931 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.856865883 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.856919050 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.856951952 CEST	49820	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.856969118 CEST	443	49820	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.857304096 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.857366085 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.857434988 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.857639074 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.857712984 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.857753992 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.858782053 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.858814955 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.858834028 CEST	49816	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.858844042 CEST	443	49816	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.865700960 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.865762949 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.865823030 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.880204916 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.880232096 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.880249977 CEST	49817	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.880255938 CEST	443	49817	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.889046907 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.889117956 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.889194012 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.889497995 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.889524937 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.889544010 CEST	49819	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.889550924 CEST	443	49819	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.907181025 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.907205105 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.907233000 CEST	49818	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.907248020 CEST	443	49818	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.922854900 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.922903061 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.922960997 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.925079107 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.925096035 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.925184965 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935256958 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935367107 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.935384035 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935410023 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.935448885 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935473919 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935487986 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.935606956 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.935627937 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.955780983 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.955813885 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.955954075 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.956948042 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.956988096 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.957159996 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.957509995 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.957528114 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:27.958746910 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:27.958774090 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.617008924 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.618060112 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.618103027 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.619263887 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.619283915 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.627161026 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.628170967 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.628192902 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.629395962 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.629404068 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.630795956 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.631551027 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.631616116 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.632620096 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.632636070 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.645812035 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.646397114 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.646415949 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:28.647208929 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:28.647222996 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.258693933 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.258775949 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.258832932 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.259068966 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259135008 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259181976 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.259186029 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259349108 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259401083 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.259432077 CEST	49821	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.259452105 CEST	443	49821	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259633064 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259787083 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.259841919 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.260257006 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.262650013 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.262665987 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.263823986 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.263828993 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.264179945 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.264231920 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.264264107 CEST	49824	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.264281988 CEST	443	49824	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.267024040 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.267036915 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.267074108 CEST	49823	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.267083883 CEST	443	49823	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.269414902 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.269423962 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.269468069 CEST	49822	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.269474983 CEST	443	49822	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.278733015 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.278754950 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.278803110 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.279119968 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.279133081 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.280775070 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.280826092 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.280886889 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.282821894 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.282852888 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.284516096 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.284550905 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.284605980 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.285026073 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.285058975 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.286932945 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.286964893 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.287012100 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.287211895 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.287224054 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.384517908 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.384596109 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.384641886 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.385593891 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.385617971 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.385629892 CEST	49825	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.385639906 CEST	443	49825	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.395200014 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.395234108 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.395287037 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.396806955 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.396821976 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.935539007 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.936131954 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.936191082 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.936445951 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.936460018 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.948718071 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.949069023 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.949095964 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.949409962 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.949415922 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.962730885 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.963105917 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.963162899 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:29.963546038 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:29.963555098 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.046566963 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.046998024 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.047024012 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.047529936 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.047533989 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056291103 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056363106 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056523085 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056552887 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056576967 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056586981 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056592941 CEST	49826	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056598902 CEST	443	49826	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056658983 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056715965 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056853056 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056900024 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.056926966 CEST	49827	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.056941032 CEST	443	49827	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.059235096 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059293032 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.059315920 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059360027 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059360981 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.059407949 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059478998 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059489012 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.059607029 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.059622049 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.068176985 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.068244934 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.068365097 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.068411112 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.068411112 CEST	49828	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.068433046 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.068445921 CEST	443	49828	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.070790052 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.070827961 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.070946932 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.071149111 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.071163893 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.180099010 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.180174112 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.180299044 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.180682898 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.180682898 CEST	49830	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.180701971 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.180711031 CEST	443	49830	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.184604883 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.184642076 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.184784889 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.184956074 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.184969902 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.729382038 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.730432987 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.730457067 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.731028080 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.731038094 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.733411074 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.733791113 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.733871937 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.734211922 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.734227896 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.745256901 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.745807886 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.745835066 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.746233940 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.746239901 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.844655037 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.844741106 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.844949961 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.845127106 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.845144987 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.845155001 CEST	49832	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.845160961 CEST	443	49832	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.848140955 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.848186016 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.848320007 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.848588943 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.848608971 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.852135897 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.852206945 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.852370977 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.852487087 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.852487087 CEST	49833	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.852533102 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.852566004 CEST	443	49833	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.854501009 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.854543924 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.854671001 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.854940891 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.854959011 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.896065950 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.896132946 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.896294117 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.896368980 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.896389961 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.896403074 CEST	49831	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.896409035 CEST	443	49831	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.899132013 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.899172068 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:30.899245977 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.899471045 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:30.899482012 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.492922068 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.493530035 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.493563890 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.494035959 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.494051933 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.534148932 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.534876108 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.534907103 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.535505056 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.535510063 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.557420015 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.557893038 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.557923079 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.558312893 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.558319092 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.596251011 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.596324921 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.596369982 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.596522093 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.596546888 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.596560001 CEST	49836	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.596569061 CEST	443	49836	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.599462032 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.599509001 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.599575996 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.599693060 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.599701881 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.639568090 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.639724970 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.639779091 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.639888048 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.639910936 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.639925957 CEST	49837	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.639931917 CEST	443	49837	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.642509937 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.642554998 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.642616987 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.642801046 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.642821074 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.656629086 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.656785965 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.656845093 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.656932116 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.656955957 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.656969070 CEST	49838	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.656975031 CEST	443	49838	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.659554958 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.659590960 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.659657955 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.659840107 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.659852982 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.707670927 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.708224058 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.708246946 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.708631039 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.708645105 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.815002918 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.815067053 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.815205097 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.815474033 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.815474033 CEST	49829	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.815504074 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.815519094 CEST	443	49829	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.818310022 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.818353891 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.818459988 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.818671942 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.818682909 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.955033064 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.956047058 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.956047058 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:31.956067085 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:31.956083059 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.057190895 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.057348013 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.057511091 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.057511091 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.057615042 CEST	49835	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.057630062 CEST	443	49835	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.060578108 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.060633898 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.060851097 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.060851097 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.060893059 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.141984940 CEST	62113	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:01:32.146868944 CEST	53	62113	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:32.147315025 CEST	62113	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:01:32.147315025 CEST	62113	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:01:32.152308941 CEST	53	62113	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:32.286899090 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.287889957 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.287889957 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.287923098 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.287934065 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.293365002 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.293714046 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.293747902 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.294322968 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.294337034 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.318527937 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.319217920 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.319217920 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.319253922 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.319268942 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.395136118 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.395242929 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.395472050 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.395472050 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.395509005 CEST	49840	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.395531893 CEST	443	49840	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.398734093 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.398777962 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.399035931 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.399035931 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.399084091 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.404808998 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.404948950 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.405033112 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.405033112 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.405093908 CEST	49839	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.405105114 CEST	443	49839	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.407053947 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.407102108 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.407311916 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.407311916 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.407346964 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.420389891 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.420543909 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.420630932 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.420630932 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.420948029 CEST	49841	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.420957088 CEST	443	49841	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.422662020 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.422755957 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.422918081 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.422988892 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.423010111 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.479832888 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.480386019 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.480412960 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.480901003 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.480906010 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.580535889 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.580599070 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.580966949 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.580966949 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.580966949 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.586842060 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.586885929 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.591419935 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.592802048 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.592829943 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.755306005 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.755867958 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.755897999 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.756305933 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.756321907 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.859776020 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.859853029 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.860126972 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.860156059 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.860156059 CEST	49843	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.860173941 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.860183954 CEST	443	49843	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.862827063 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.862859011 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.863007069 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.863106966 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.863116980 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.882859945 CEST	49842	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:32.882900000 CEST	443	49842	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:32.923451900 CEST	53	62113	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:32.924462080 CEST	62113	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:01:32.934432983 CEST	53	62113	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:32.934480906 CEST	62113	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:01:33.062119007 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.062635899 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.062663078 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.063184977 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.063191891 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.070086956 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.070702076 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.070766926 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.071172953 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.071187973 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.073729992 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.074043989 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.074057102 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.074630976 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.074636936 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.172911882 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.172972918 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173147917 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173243046 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173293114 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173293114 CEST	62116	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173310995 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173341036 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173362970 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173372030 CEST	443	62116	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173757076 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173784971 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.173800945 CEST	62115	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.173808098 CEST	443	62115	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.176750898 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.176793098 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.176852942 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.176973104 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.177009106 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.177021027 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.177036047 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.177057981 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.177155018 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.177165031 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.178729057 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.178797007 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.178838015 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.178993940 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.179008961 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.179022074 CEST	62114	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.179028034 CEST	443	62114	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.181720972 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.181729078 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.181783915 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.182107925 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.182120085 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.280066013 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.280783892 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.280805111 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.281465054 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.281471968 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.381407976 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.381463051 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.381519079 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.382383108 CEST	62117	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.382402897 CEST	443	62117	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.391716957 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.391761065 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.391819000 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.392452002 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.392463923 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.853449106 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.854104042 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.854171038 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.854990005 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.855004072 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.860373974 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.861413002 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.861413002 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.861454010 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.861469030 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.871237040 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.871617079 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.871624947 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:33.872361898 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:33.872374058 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227176905 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227191925 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227222919 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227236986 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227250099 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227288008 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.227319002 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.227402925 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.227629900 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.228882074 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.230243921 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.230243921 CEST	62120	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.230262995 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.230273008 CEST	443	62120	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.232424974 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.232424974 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.232434034 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.232446909 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.233285904 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.233314991 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.233346939 CEST	62121	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.233354092 CEST	443	62121	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.234392881 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.234392881 CEST	62122	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.234399080 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.234406948 CEST	443	62122	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.239619970 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.239654064 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.240242004 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.240287066 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.240299940 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.240299940 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.240326881 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.240356922 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.241233110 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.241242886 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.241630077 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.241653919 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.241687059 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.242263079 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.242279053 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.332276106 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.332427979 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.332814932 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.332814932 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.334842920 CEST	62123	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.334858894 CEST	443	62123	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.336050987 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.336097956 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.336364031 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.336364985 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.336402893 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.724045038 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.724930048 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.724931002 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.724948883 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.724965096 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.823606014 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.823739052 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.823930979 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.823930979 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.824024916 CEST	62118	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.824043989 CEST	443	62118	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.826764107 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.826788902 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.826870918 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.827084064 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:34.827092886 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:34.846870899 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:34.846968889 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:34.850956917 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:34.854880095 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:34.854916096 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:35.101344109 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.106580019 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.121098995 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.121160030 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.121948957 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.121962070 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.135449886 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.135464907 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.146584988 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.146641016 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.192245007 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.216495991 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.216530085 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.217102051 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.217109919 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.218403101 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.218497992 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.218569040 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.218842030 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.218888044 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.218916893 CEST	62125	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.218933105 CEST	443	62125	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.223407984 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.223515034 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.223623037 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.223920107 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.223957062 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.280078888 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.280251026 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.280309916 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.303796053 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.303845882 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.303878069 CEST	62126	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.303894043 CEST	443	62126	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.312084913 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.312139988 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.312202930 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.312647104 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.312664032 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.326298952 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.326452017 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.326508045 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.326972961 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.326972961 CEST	62127	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.327003956 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.327018023 CEST	443	62127	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.333053112 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.333085060 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.333139896 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.333539963 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.333553076 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.838869095 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:35.839745998 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:35.839811087 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:35.840259075 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:35.841550112 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:35.841628075 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:35.842883110 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.844053030 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.844068050 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.845065117 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.845069885 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.882575989 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:35.955787897 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.955952883 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.956063986 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.956377029 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.956377029 CEST	62128	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.956393003 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.956397057 CEST	443	62128	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.962852001 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.962894917 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:35.967327118 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.986869097 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:35.986887932 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.076946020 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.077402115 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.077467918 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.077945948 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.077960014 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.078758001 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.079073906 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.079099894 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.079448938 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.079461098 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.142046928 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.142854929 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.142868996 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.143136024 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.143140078 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.182609081 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.182683945 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.182940960 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.182940960 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.183553934 CEST	62130	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.183623075 CEST	443	62130	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.185467005 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.185511112 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.185703993 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.185760975 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.185760975 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.185787916 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.185856104 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.185992956 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.185992956 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.186145067 CEST	62132	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.186161995 CEST	443	62132	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.187774897 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.187804937 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.187973022 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.187973022 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.187995911 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.279803991 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.279892921 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.280132055 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.280132055 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.281436920 CEST	62131	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.281454086 CEST	443	62131	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.282500029 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.282604933 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.282762051 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.282862902 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.282881975 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.667788029 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.672610044 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.672646046 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.674854994 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.674861908 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.698868990 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 18:01:36.704801083 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 10, 2024 18:01:36.705094099 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 10, 2024 18:01:36.786613941 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.787930012 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.787930012 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.787950039 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.787965059 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.798858881 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.798964024 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.799149036 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.799315929 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.799315929 CEST	62133	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.799336910 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.799348116 CEST	443	62133	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.802759886 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.802791119 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.802942038 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.803154945 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.803169012 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.823968887 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.824654102 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.824681997 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.825377941 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.825386047 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.901567936 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.901633978 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.902937889 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.902937889 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.902937889 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.906198978 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.906234980 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.906399012 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.906585932 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.906593084 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.926855087 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.926928043 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.926983118 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.927629948 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.927649975 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.927665949 CEST	62134	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.927671909 CEST	443	62134	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.935192108 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.935231924 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.935394049 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.935710907 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.935725927 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.938179970 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.939151049 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.939161062 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:36.940332890 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:36.940339088 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.046278954 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.046354055 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.046421051 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.046844006 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.046895981 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.046926975 CEST	62136	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.046943903 CEST	443	62136	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.053838015 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.053934097 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.054007053 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.054439068 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.054476976 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.115084887 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.115933895 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.115950108 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.116420031 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.116425991 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.211189985 CEST	62124	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.211218119 CEST	443	62124	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.221115112 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.221242905 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.221292019 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.222062111 CEST	62135	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.222076893 CEST	443	62135	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.229518890 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.229557037 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.229614973 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.230103970 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.230119944 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.472517014 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.472995043 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.473035097 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.473524094 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.473531008 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.534063101 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.534513950 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.534535885 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.535056114 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.535060883 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.573532104 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.573709011 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.573759079 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.573885918 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.573908091 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.573918104 CEST	62137	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.573924065 CEST	443	62137	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.576533079 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.576569080 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.576617956 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.576776981 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.576783895 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.613604069 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.614137888 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.614202023 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.614613056 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.614629984 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.642160892 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.642323017 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.642379045 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.642416000 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.642430067 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.642442942 CEST	62138	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.642447948 CEST	443	62138	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.645488024 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.645541906 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.645606995 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.645730019 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.645741940 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.707751036 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.708273888 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.708383083 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.708740950 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.708765984 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.719044924 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.719204903 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.719274998 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.719485044 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.719536066 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.719566107 CEST	62139	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.719583988 CEST	443	62139	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.722793102 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.722840071 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.722985983 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.723232985 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.723264933 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.813386917 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.813467979 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.813549042 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.813822985 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.813844919 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.813855886 CEST	62140	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.813860893 CEST	443	62140	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.816462040 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.816505909 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.816576004 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.816796064 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.816809893 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.892967939 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.893436909 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.893456936 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:37.894009113 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:37.894021034 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.008452892 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.008615971 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.008771896 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.008771896 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.008905888 CEST	62141	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.008923054 CEST	443	62141	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.011380911 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.011424065 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.011564970 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.011667013 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.011672020 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.239082098 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.243463039 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.243463039 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.243484974 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.243494034 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.308919907 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.309513092 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.309566975 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.310018063 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.310030937 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.370070934 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.370234966 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.370430946 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.370430946 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.370851994 CEST	62142	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.370868921 CEST	443	62142	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.372935057 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.373044968 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.373296022 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.373296022 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.373389959 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.417810917 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.417875051 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.419189930 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.419398069 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.419398069 CEST	62143	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.419446945 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.419473886 CEST	443	62143	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.422034979 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.422085047 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.422240019 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.422350883 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.422383070 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.428709984 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.429207087 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.429299116 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.429496050 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.429511070 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.472105980 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.473009109 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.473009109 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.473032951 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.473047972 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.549016953 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.549083948 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.549340010 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.549340010 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.550863028 CEST	62144	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.550882101 CEST	443	62144	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.551919937 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.551954031 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.552148104 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.552148104 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.552175045 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.572681904 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.572746992 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.572938919 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.572966099 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.572966099 CEST	62145	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.572981119 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.572988987 CEST	443	62145	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.575411081 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.575447083 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.575629950 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.575629950 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.575661898 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.654709101 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.655425072 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.655447960 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.655582905 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.655587912 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.756001949 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.756165028 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.756319046 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.756319046 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.756428957 CEST	62146	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.756445885 CEST	443	62146	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.758951902 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.759051085 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:38.759138107 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.759345055 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:38.759377956 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.416791916 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.417263031 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.417294025 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.417895079 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.417901993 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.423934937 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.424266100 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.424274921 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.424777031 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.424782038 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.429841995 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.430195093 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.430274963 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.430573940 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.430588961 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.432472944 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.432802916 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.432835102 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.433183908 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.433255911 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.433260918 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.433480978 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.433494091 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.433962107 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.433965921 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.517122030 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.517189026 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.517251968 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.517395020 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.517445087 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.517474890 CEST	62148	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.517492056 CEST	443	62148	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.520160913 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.520204067 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.520277977 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.520399094 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.520412922 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.523917913 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.526249886 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.526314020 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.526393890 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.526407003 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.526437044 CEST	62151	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.526448011 CEST	443	62151	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.528422117 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.528517008 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.528609991 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.528688908 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.528709888 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.536632061 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.536792040 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.536858082 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.536911011 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.536926985 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.536936998 CEST	62149	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.536942005 CEST	443	62149	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.537959099 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.538136005 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.538203001 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.538304090 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.538304090 CEST	62147	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.538348913 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.538377047 CEST	443	62147	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.539589882 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.539614916 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.539685011 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.539817095 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.539844990 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.540920973 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.540935993 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.540992975 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.541100979 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.541112900 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.547759056 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.547816038 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.547862053 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.547995090 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.548006058 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.548027992 CEST	62150	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.548033953 CEST	443	62150	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.550049067 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.550076008 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:39.550132990 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.550270081 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:39.550287008 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.179539919 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.180506945 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.180506945 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.180541992 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.180567980 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.193162918 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.193777084 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.193777084 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.193804026 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.193821907 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.200584888 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.200735092 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.200954914 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.200957060 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.200973034 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.200982094 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.201277018 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.201288939 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.201469898 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.201482058 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.265713930 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.266686916 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.266686916 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.266702890 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.266711950 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343341112 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343558073 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343739986 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.343739986 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.343836069 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343853951 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343883038 CEST	62153	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.343904018 CEST	443	62153	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343911886 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.343983889 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.344046116 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344062090 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.344140053 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344140053 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344176054 CEST	62155	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344192982 CEST	443	62155	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.344214916 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344214916 CEST	62154	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.344221115 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.344228029 CEST	443	62154	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.344234943 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.345962048 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346488953 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346510887 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346515894 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.346543074 CEST	62152	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346549034 CEST	443	62152	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.346595049 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.346633911 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346654892 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.346744061 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346744061 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346832991 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.346853971 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.347029924 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.347052097 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.347460985 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.347497940 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.348500013 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.348526001 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.348568916 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.348761082 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.348762035 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.348762035 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.348778009 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.348786116 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.438500881 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.438731909 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.438915968 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.438915968 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.439238071 CEST	62156	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.439256907 CEST	443	62156	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.441414118 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.441505909 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:40.441711903 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.441711903 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:40.441788912 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.074850082 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.074975014 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.077610970 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.079947948 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.117342949 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.117347956 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.117382050 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.132986069 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.186753988 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.186770916 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.188244104 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.188249111 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.188999891 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.189019918 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.190350056 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.190354109 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.191422939 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.191483974 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.193017960 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.193032980 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.193418980 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.193430901 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.194667101 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.194679022 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305629015 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305649042 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305666924 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305708885 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305762053 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.305777073 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305799961 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305835009 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305851936 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305852890 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.305855989 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.305895090 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.305916071 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.306030035 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.306071997 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.306238890 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.306265116 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.306293011 CEST	62157	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.306299925 CEST	443	62157	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.309057951 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.309078932 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.309089899 CEST	62159	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.309096098 CEST	443	62159	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.311455011 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.311470985 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.311496019 CEST	62160	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.311501980 CEST	443	62160	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.313726902 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.313726902 CEST	62158	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.313750029 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.313771963 CEST	443	62158	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.320940018 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.321029902 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.321103096 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.322977066 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.323000908 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.323052883 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.325515985 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.325563908 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.325633049 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.326430082 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.326447010 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.326591969 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.326607943 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.327203035 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.327227116 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.329051971 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.329138041 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:41.329212904 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.329581022 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:41.329616070 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.013459921 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.014436960 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.014436960 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.014470100 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.014482021 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.547126055 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.547281027 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.547559023 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.547559023 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.547668934 CEST	62162	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.547692060 CEST	443	62162	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.551697969 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.551707983 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.551970005 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.552051067 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.553293943 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.553293943 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.553325891 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.553333044 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.553349018 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.553369999 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.553643942 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.553673983 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.554471970 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.554480076 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.554480076 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.554497957 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.555428982 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.555433989 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.555433989 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.555469036 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.944940090 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.944973946 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.945019960 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.945035934 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.945055962 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.945117950 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.945859909 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.945874929 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.945897102 CEST	62163	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.945903063 CEST	443	62163	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.946903944 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.946927071 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.946981907 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.947002888 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.947016954 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.947065115 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.948012114 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.948082924 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.948133945 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.948925018 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.948925018 CEST	62161	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.948973894 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.949002981 CEST	443	62161	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.951579094 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.951591969 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.951601982 CEST	62164	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.951606035 CEST	443	62164	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.960180044 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.960202932 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.960258961 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.964087009 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.964175940 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.964247942 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.964253902 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.964261055 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.965226889 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.965255022 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.965302944 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.965802908 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.965818882 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:42.966202021 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:42.966238976 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.317523956 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.318733931 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.318763018 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.320015907 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.320024014 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699222088 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699290991 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699371099 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.699400902 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699448109 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.699469090 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699510098 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.699600935 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.699615955 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.699625969 CEST	62165	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.699630022 CEST	443	62165	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.702327967 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.702363968 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.702428102 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.702558041 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.702568054 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.707135916 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.707495928 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.707513094 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.707904100 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.707906961 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.708300114 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.708611012 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.708633900 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.708966970 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.708971024 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.710916996 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.711561918 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.711582899 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.711955070 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.711958885 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.808828115 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.808947086 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.809005976 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.809421062 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.809438944 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.809453964 CEST	62166	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.809459925 CEST	443	62166	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.810796022 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.810966015 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.811059952 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.813394070 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.813852072 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.813905954 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.814085960 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.814085960 CEST	62169	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.814106941 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.814117908 CEST	443	62169	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.818983078 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.819005013 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.819027901 CEST	62167	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.819036007 CEST	443	62167	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.830409050 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.830425024 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.830454111 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.830456972 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.830522060 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.830524921 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.831939936 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.831985950 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.832041025 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.832287073 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.832310915 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.832458019 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.832480907 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.832617998 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.832631111 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.903073072 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.908550024 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.908576012 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:43.909581900 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:43.909595966 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.012098074 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.012171984 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.014966965 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.014966965 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.015028000 CEST	62168	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.015048981 CEST	443	62168	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.022613049 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.022670984 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.025805950 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.030889034 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.030915022 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.399575949 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.400563955 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.400592089 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.402990103 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.403002024 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.495882988 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.496490002 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.496521950 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.498162031 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.498168945 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.500060081 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.500572920 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.500946999 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.501008034 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.501049995 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.501131058 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.501451015 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.502003908 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.502012014 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.502132893 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.502165079 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.502609015 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.502615929 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.502720118 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.502743006 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.503410101 CEST	62170	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.503417969 CEST	443	62170	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.507080078 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.507112026 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.507319927 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.507319927 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.507361889 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.595470905 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.595623970 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.598927975 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.601094007 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.601161957 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.601311922 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.604634047 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.604698896 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.605242968 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.615890980 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.615911007 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.616039991 CEST	62171	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.616045952 CEST	443	62171	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.618562937 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.618562937 CEST	62173	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.618613958 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.618643045 CEST	443	62173	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.619996071 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.619996071 CEST	62172	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.620047092 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.620076895 CEST	443	62172	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.625061035 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.625111103 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.625565052 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.625591040 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.625622988 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.626070023 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.626202106 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.626230001 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.626261950 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.626275063 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.627152920 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.627161026 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.627228975 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.627432108 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.627444983 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.701592922 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.704442978 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.704451084 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.705265999 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.705270052 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.806066990 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.806135893 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.806540966 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.806629896 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.806629896 CEST	62174	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.806649923 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.806659937 CEST	443	62174	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.812243938 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.812338114 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:44.812628031 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.812913895 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:44.812961102 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.179565907 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.180248976 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.180284023 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.180875063 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.180881977 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.305192947 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.305346966 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.305536032 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.307791948 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.308144093 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.311903000 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.318274975 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.318296909 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.319632053 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.319644928 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.320409060 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.320409060 CEST	62175	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.320458889 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.320487976 CEST	443	62175	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.330986023 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.330996990 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.331676006 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.331684113 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.332060099 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.332083941 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.333143950 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.333157063 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.337111950 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.337162018 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.337223053 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.337364912 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.337374926 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.417758942 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.417938948 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.418013096 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.418090105 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.418113947 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.418128967 CEST	62178	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.418137074 CEST	443	62178	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.421451092 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.421483994 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.421554089 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.421674967 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.421681881 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.422759056 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:45.422840118 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:45.422900915 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:45.428327084 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.428577900 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.428630114 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.428628922 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.428673983 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.428697109 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.428714037 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.428729057 CEST	62177	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.428735018 CEST	443	62177	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.432981014 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.433007002 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.433058023 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.433185101 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.433207035 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.434111118 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.434180021 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.434253931 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.434376955 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.434401989 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.434417009 CEST	62176	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.434425116 CEST	443	62176	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.437587023 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.437669039 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.437740088 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.438036919 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.438072920 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.497132063 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.497683048 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.497735023 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.498435974 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.498444080 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.542126894 CEST	62129	443	192.168.2.4	142.250.184.196
Oct 10, 2024 18:01:45.542202950 CEST	443	62129	142.250.184.196	192.168.2.4
Oct 10, 2024 18:01:45.629182100 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.629236937 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.629283905 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.629287958 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.629332066 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.629601955 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.629625082 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.629641056 CEST	62179	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.629646063 CEST	443	62179	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.632850885 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.632899046 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.632962942 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.633137941 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.633151054 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.997373104 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.998347998 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.998347998 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:45.998378992 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:45.998389959 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.076139927 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.076982975 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.076982975 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.076997042 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.077008963 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.077630043 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.077972889 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.078002930 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.078543901 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.078550100 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.085403919 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.086150885 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.086152077 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.086169004 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.086189032 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.096688986 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.096836090 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.097105980 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.097105980 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.097284079 CEST	62180	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.097302914 CEST	443	62180	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.099687099 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.099720955 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.099898100 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.099967957 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.099972963 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.178344965 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.178968906 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.179084063 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.179084063 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.179111004 CEST	62182	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.179131031 CEST	443	62182	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.181612968 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.181674957 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.181785107 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.181906939 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.181925058 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.182455063 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.182653904 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.182692051 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.182854891 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.182854891 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.183137894 CEST	62183	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.183178902 CEST	443	62183	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.184855938 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.184895039 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.184978962 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.185091019 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.185108900 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.186453104 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.186697960 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.186784029 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.186784029 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.187036991 CEST	62181	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.187050104 CEST	443	62181	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.188994884 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.189029932 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.189244032 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.189244032 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.189273119 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.660146952 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.660684109 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.660706997 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.661218882 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.661226034 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.771934032 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.772511005 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.772629023 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.772670984 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.772670984 CEST	62184	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.772691011 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.772701025 CEST	443	62184	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.775522947 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.775578022 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.775798082 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.775866985 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.775875092 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.860616922 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.861148119 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.861181974 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.861759901 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.861768007 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.862195015 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.862586021 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.862606049 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.862802029 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.863006115 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.863012075 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.863292933 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.863306046 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.863734007 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.863740921 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.922410965 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.923336983 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.923336983 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.923356056 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.923369884 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.961633921 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.961690903 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.961849928 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.961918116 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.961966991 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.961992025 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962006092 CEST	62185	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.962013006 CEST	443	62185	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962021112 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962707996 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962762117 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.962781906 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.962786913 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962826967 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962829113 CEST	62186	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.962833881 CEST	443	62186	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.962872982 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.963185072 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.963202953 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.963212013 CEST	62188	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.963217020 CEST	443	62188	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.966118097 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966146946 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.966207027 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966208935 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966233015 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.966278076 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966500044 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966512918 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.966662884 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.966681957 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.967264891 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.967298031 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:46.967354059 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.967457056 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:46.967472076 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.025593996 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.025626898 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.025671959 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.025676966 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.025717974 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.025892019 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.025907993 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.025918007 CEST	62187	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.025923014 CEST	443	62187	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.028280973 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.028322935 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.028388023 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.028537989 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.028548002 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.977916956 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.978864908 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.978864908 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.978880882 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.978895903 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.979590893 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.979736090 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.979738951 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980012894 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980032921 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980042934 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980107069 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980515957 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980521917 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980565071 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980581999 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980623007 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980648041 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:47.980957985 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:47.980962992 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.077510118 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.077733994 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.077853918 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.077853918 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.077918053 CEST	62192	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.077934027 CEST	443	62192	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.080621958 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.080651999 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.080970049 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.080970049 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.081001997 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.083714008 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.084223032 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.084353924 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.084353924 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.084353924 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.085064888 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085227966 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085546970 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085576057 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085668087 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.085666895 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.085668087 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.085668087 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.085704088 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085747004 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.085872889 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.086056948 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.086056948 CEST	62193	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.086091995 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.086113930 CEST	443	62193	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.086868048 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.086903095 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.087944031 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088040113 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.088078022 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088078976 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088109016 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.088145018 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088749886 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088749886 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.088793039 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.088818073 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.089072943 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.089072943 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.089126110 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.382585049 CEST	62191	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.382611990 CEST	443	62191	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.398233891 CEST	62190	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.398318052 CEST	443	62190	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.791790962 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.792213917 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.792263031 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.792952061 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.792980909 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.798059940 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.798383951 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.798681021 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.798708916 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.799088001 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.799094915 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.799439907 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.799448967 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.799876928 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.799889088 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.803246021 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.803731918 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.803762913 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.804147959 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.804157019 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.892817974 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.893186092 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.893218040 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.893343925 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.893343925 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.893393040 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.893393040 CEST	62198	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.893416882 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.893433094 CEST	443	62198	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.895812988 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.895839930 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.895983934 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.896148920 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.896167040 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.902426958 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.902771950 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.902841091 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.902889967 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.902889967 CEST	62196	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.902898073 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.902904034 CEST	443	62196	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.903819084 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.904223919 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.904294968 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.904294968 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.904326916 CEST	62195	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.904349089 CEST	443	62195	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.906023026 CEST	62201	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906038046 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906049967 CEST	443	62201	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.906133890 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.906169891 CEST	62201	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906384945 CEST	62201	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906392097 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906398058 CEST	443	62201	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.906496048 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.906533003 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.908658028 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.908878088 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.909502983 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.909552097 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.909558058 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.909585953 CEST	62197	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.909593105 CEST	443	62197	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.911577940 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.911602974 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:48.911737919 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.911878109 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:48.911892891 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.550158978 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.550836086 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.550899982 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.551454067 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.551469088 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.553661108 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.554229975 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.554246902 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.554889917 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.554897070 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.587794065 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.588174105 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.588212967 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.588612080 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.588617086 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.650441885 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.650840044 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.650897026 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.650968075 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.650995016 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.651010036 CEST	62200	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.651016951 CEST	443	62200	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.654783964 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.655375957 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.655430079 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.661540031 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.661540031 CEST	62199	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.661560059 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.661569118 CEST	443	62199	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.673125029 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.673158884 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.673213005 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.674266100 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.674278975 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.679306984 CEST	62204	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.679424047 CEST	443	62204	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.679483891 CEST	62204	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.679677010 CEST	62204	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.679712057 CEST	443	62204	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.689220905 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.690474987 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.690529108 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.690531015 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.690565109 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.695651054 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.695676088 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.695689917 CEST	62202	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.695697069 CEST	443	62202	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.698581934 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.698622942 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:49.698703051 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.698913097 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:49.698932886 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.314069986 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.314889908 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.314927101 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.317004919 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.317015886 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.339499950 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.343313932 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.343339920 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.346879005 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.346889973 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.412875891 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.413330078 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.413438082 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.413439035 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.414870977 CEST	62203	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.414896011 CEST	443	62203	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.416049957 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.416096926 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.416279078 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.416279078 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.416315079 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.442223072 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.442523956 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.442610979 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.442610979 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.442636967 CEST	62205	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.442647934 CEST	443	62205	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.445075989 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.445133924 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.445384979 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.445384979 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.445430040 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.555378914 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.556138992 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.556211948 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.556638956 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.556653023 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.664593935 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.664819002 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.664931059 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.664998055 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.665074110 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.665074110 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.665117979 CEST	62189	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.665150881 CEST	443	62189	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.667742014 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.667777061 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:50.667959929 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.667959929 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:50.667998075 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.069612980 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.070323944 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.070341110 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.070806026 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.070810080 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.115186930 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.115645885 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.115681887 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.116090059 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.116099119 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170274019 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170377970 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170430899 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.170460939 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170495987 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170542955 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.170655966 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.170670986 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.170680046 CEST	62206	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.170686007 CEST	443	62206	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.173381090 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.173450947 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.173522949 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.173707008 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.173727036 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.218502998 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.218584061 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.218776941 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.218863010 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.218863010 CEST	62207	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.218903065 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.218924999 CEST	443	62207	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.222057104 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.222095966 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.222172976 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.222332001 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.222345114 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.319578886 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.320365906 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.320396900 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.320839882 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.320844889 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.419265032 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.419456959 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.419513941 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.419533014 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.419596910 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.419676065 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.419692993 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.419703960 CEST	62208	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.419708967 CEST	443	62208	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.422616959 CEST	62211	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.422637939 CEST	443	62211	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.422765970 CEST	62211	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.422925949 CEST	62211	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.422939062 CEST	443	62211	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.856566906 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.857052088 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.857096910 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.857527971 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.857542992 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.873899937 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.874285936 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.874306917 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.874757051 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.874768019 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.959228992 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.959652901 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.959714890 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.959769964 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.959769964 CEST	62209	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.959805012 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.959829092 CEST	443	62209	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.962308884 CEST	62212	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.962361097 CEST	443	62212	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.962430954 CEST	62212	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.962559938 CEST	62212	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.962582111 CEST	443	62212	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.974231005 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.974265099 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.974308968 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.974369049 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.974463940 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.974493027 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.974519968 CEST	62210	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.974534988 CEST	443	62210	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.977184057 CEST	62213	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.977267027 CEST	443	62213	13.107.246.67	192.168.2.4
Oct 10, 2024 18:01:51.977385998 CEST	62213	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.977454901 CEST	62213	443	192.168.2.4	13.107.246.67
Oct 10, 2024 18:01:51.977474928 CEST	443	62213	13.107.246.67	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 10, 2024 18:00:30.957268953 CEST	53	56919	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:31.945815086 CEST	53	58900	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:32.641552925 CEST	54312	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:32.641679049 CEST	49425	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:34.712270975 CEST	63856	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:34.712440014 CEST	60745	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:34.719207048 CEST	53	63856	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:34.719892025 CEST	53	60745	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:43.436023951 CEST	49767	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:43.436265945 CEST	57560	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:45.382952929 CEST	49552	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:45.383111954 CEST	56547	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:48.299434900 CEST	138	138	192.168.2.4	192.168.2.255
Oct 10, 2024 18:00:48.429546118 CEST	51018	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:48.429907084 CEST	54239	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:48.434747934 CEST	51670	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:48.434917927 CEST	53325	53	192.168.2.4	1.1.1.1
Oct 10, 2024 18:00:48.442289114 CEST	53	51670	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:48.444025040 CEST	53	53325	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:49.018876076 CEST	53	61389	1.1.1.1	192.168.2.4
Oct 10, 2024 18:00:51.190857887 CEST	53	58036	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:07.797101974 CEST	53	52971	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:30.093070030 CEST	53	55946	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:30.819869041 CEST	53	56114	1.1.1.1	192.168.2.4
Oct 10, 2024 18:01:32.141417027 CEST	53	59113	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 10, 2024 18:00:34.863971949 CEST	192.168.2.4	1.1.1.1	c298	(Port unreachable)	Destination Unreachable
Oct 10, 2024 18:00:38.282819033 CEST	192.168.2.4	1.1.1.1	c29b	(Port unreachable)	Destination Unreachable
Oct 10, 2024 18:00:41.022074938 CEST	192.168.2.4	1.1.1.1	c29e	(Port unreachable)	Destination Unreachable
Oct 10, 2024 18:00:47.973823071 CEST	192.168.2.4	1.1.1.1	c2dc	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 10, 2024 18:00:32.641552925 CEST	192.168.2.4	1.1.1.1	0x5ae4	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:32.641679049 CEST	192.168.2.4	1.1.1.1	0x24c1	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 10, 2024 18:00:34.712270975 CEST	192.168.2.4	1.1.1.1	0x5244	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:34.712440014 CEST	192.168.2.4	1.1.1.1	0x27cd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 10, 2024 18:00:43.436023951 CEST	192.168.2.4	1.1.1.1	0x440d	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:43.436265945 CEST	192.168.2.4	1.1.1.1	0x101c	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 10, 2024 18:00:45.382952929 CEST	192.168.2.4	1.1.1.1	0xd11a	Standard query (0)	login.microsoftonline.com	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:45.383111954 CEST	192.168.2.4	1.1.1.1	0xc00	Standard query (0)	login.microsoftonline.com	65	IN (0x0001)	false
Oct 10, 2024 18:00:48.429546118 CEST	192.168.2.4	1.1.1.1	0xb9d6	Standard query (0)	identity.nel.measure.office.net	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:48.429907084 CEST	192.168.2.4	1.1.1.1	0xb719	Standard query (0)	identity.nel.measure.office.net	65	IN (0x0001)	false
Oct 10, 2024 18:00:48.434747934 CEST	192.168.2.4	1.1.1.1	0x15aa	Standard query (0)	aadcdn.msftauth.net	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:48.434917927 CEST	192.168.2.4	1.1.1.1	0x8e66	Standard query (0)	aadcdn.msftauth.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 10, 2024 18:00:32.649169922 CEST	1.1.1.1	192.168.2.4	0x5ae4	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:32.650437117 CEST	1.1.1.1	192.168.2.4	0x24c1	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:34.719207048 CEST	1.1.1.1	192.168.2.4	0x5244	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:34.719892025 CEST	1.1.1.1	192.168.2.4	0x27cd	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 10, 2024 18:00:43.443886042 CEST	1.1.1.1	192.168.2.4	0x440d	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:43.445863008 CEST	1.1.1.1	192.168.2.4	0x101c	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:45.390558958 CEST	1.1.1.1	192.168.2.4	0xc00	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:45.391520977 CEST	1.1.1.1	192.168.2.4	0xd11a	No error (0)	login.microsoftonline.com	login.mso.msidentity.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:46.141956091 CEST	1.1.1.1	192.168.2.4	0xe321	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:46.141956091 CEST	1.1.1.1	192.168.2.4	0xe321	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:46.764955997 CEST	1.1.1.1	192.168.2.4	0xd4fa	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:46.764955997 CEST	1.1.1.1	192.168.2.4	0xd4fa	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:47.705456018 CEST	1.1.1.1	192.168.2.4	0xebc3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:47.705456018 CEST	1.1.1.1	192.168.2.4	0xebc3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:47.946104050 CEST	1.1.1.1	192.168.2.4	0x23c6	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:47.946104050 CEST	1.1.1.1	192.168.2.4	0x23c6	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:48.437529087 CEST	1.1.1.1	192.168.2.4	0xb9d6	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:48.438661098 CEST	1.1.1.1	192.168.2.4	0xb719	No error (0)	identity.nel.measure.office.net	nel.measure.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:48.442289114 CEST	1.1.1.1	192.168.2.4	0x15aa	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:48.442289114 CEST	1.1.1.1	192.168.2.4	0x15aa	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:48.442289114 CEST	1.1.1.1	192.168.2.4	0x15aa	No error (0)	sni1gl.wpc.omegacdn.net		152.199.21.175	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:00:48.444025040 CEST	1.1.1.1	192.168.2.4	0x8e66	No error (0)	aadcdn.msftauth.net	scdn38e6f.wpc.9be8f.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:00:48.444025040 CEST	1.1.1.1	192.168.2.4	0x8e66	No error (0)	scdn38e6f.wpc.9be8f.omegacdn.net	sni1gl.wpc.omegacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:01:00.299041033 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:01:00.299041033 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:01:22.875888109 CEST	1.1.1.1	192.168.2.4	0x3232	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:01:22.875888109 CEST	1.1.1.1	192.168.2.4	0x3232	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:01:24.535319090 CEST	1.1.1.1	192.168.2.4	0x2ada	No error (0)	shed.dual-low.s-part-0039.t-0009.t-msedge.net	s-part-0039.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:01:24.535319090 CEST	1.1.1.1	192.168.2.4	0x2ada	No error (0)	s-part-0039.t-0009.t-msedge.net		13.107.246.67	A (IP address)	IN (0x0001)	false
Oct 10, 2024 18:01:45.906858921 CEST	1.1.1.1	192.168.2.4	0x7b36	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 10, 2024 18:01:45.906858921 CEST	1.1.1.1	192.168.2.4	0x7b36	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

https:

aadcdn.msauth.net

otelrules.azureedge.net

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49742	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 16:00:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=175531 Date: Thu, 10 Oct 2024 16:00:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	23.60.203.209	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-10 16:00:38 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=175505 Date: Thu, 10 Oct 2024 16:00:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-10 16:00:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49779	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:47 UTC	633	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:47 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:47 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e20fe720-101e-0032-05e2-1ab49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160047Z-17db6f7c8cfbtxhfpq53x2ehdn00000000f000000000a9tu x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:00:47 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-10 16:00:47 UTC	16384	IN	Data Raw: 39 ce 05 9e bd 43 1a 07 3e e0 59 bf e7 e2 51 a8 73 30 56 ec 10 a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 Data Ascii: 9C>YQs0Vu';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3
2024-10-10 16:00:47 UTC	16384	IN	Data Raw: 6a cd f9 76 21 34 7e 0a 9b e9 a1 b3 3a b4 f9 ab b6 41 4a 73 39 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd Data Ascii: jv!4~:AJs9IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n
2024-10-10 16:00:47 UTC	1470	IN	Data Raw: 8a 48 6d df 91 4c 54 19 a7 6a 04 24 62 96 25 0b 24 d4 c0 a5 a6 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 Data Ascii: HmLTj$b%$E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49784	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:48 UTC	408	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_JQnUxWSvwsd9FrpspQmznw2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:48 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:48 GMT Content-Type: application/x-javascript Content-Length: 49804 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Mon, 05 Aug 2024 15:32:28 GMT ETag: 0x8DCB563D09FF90F x-ms-request-id: e20fe720-101e-0032-05e2-1ab49e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160048Z-17db6f7c8cfnqpbkckdefmqa4400000000r00000000040kz x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:48 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 6d 5b e3 38 d2 30 fa fd fe 15 c1 bb 0f 1d 4f 4c c8 0b d0 e0 b4 3b 77 1a e8 6e 66 80 30 04 66 66 17 58 2e 27 56 c0 dd c1 ce da 0e 34 13 72 7e fb a9 17 c9 96 1d 87 ee d9 3d d7 f9 f2 cc 0b b1 a5 92 2c 95 aa 4a 55 a5 92 b4 f9 d3 da ff 54 7e aa 6c fc f8 3f 95 c1 45 ef fc a2 d2 ff 58 b9 f8 7c 74 7e 50 39 83 b7 7f 54 4e fb 17 47 fb 87 3f 5e 0f 7e 14 ff bf b8 f7 e3 ca d8 9f 88 0a fc 0e dd 58 78 95 30 a8 84 51 c5 0f 46 61 34 0d 23 37 11 71 e5 01 fe 46 be 3b a9 8c a3 f0 a1 92 dc 8b ca 34 0a bf 88 51 12 57 26 7e 9c 40 a1 a1 98 84 4f 95 2a 54 17 79 95 33 37 4a 9e 2b 47 67 66 1d ea 17 50 9b 7f e7 07 50 7a 14 4e 9f e1 f9 3e a9 04 61 e2 8f 44 c5 0d 3c aa 6d 02 2f 41 2c 2a b3 c0 13 51 e5 e9 de 1f dd 57 4e fc 51 14 c6 e1 38 a9 44 62 24 Data Ascii: m[80OL;wnf0ffX.'V4r~=,JUT~l?EX\|t~P9TNG?^~Xx0QFa4#7qF;4QW&~@OTy37J+GgfPPzN>aD<m/A,QWNQ8Db$
2024-10-10 16:00:48 UTC	16384	IN	Data Raw: a1 fe a6 75 c8 0d 27 1c c8 cc 3b 47 70 68 d3 97 de 38 51 da 2b 6d ae c3 c3 92 66 30 2c c7 e2 0e a7 d6 2d 0d 94 23 88 9f 19 2d 1f 22 de b2 95 e2 e1 43 fe ba 22 db f8 db c7 de c7 bd 8f bb 46 5e a9 e2 79 8b bb 39 80 f2 13 69 1c da 46 ac bd 01 17 40 95 be ca 7a c8 5e 78 9e 4e f0 34 2a 49 07 20 d2 55 18 4e aa f9 a9 79 19 46 01 fd be 74 21 2c 48 25 ed 0b d8 5c e1 21 97 5b fb 1f fa e7 08 c5 f1 db 24 52 d4 24 94 ea 86 a0 ac 71 9b a5 70 df 6e 64 32 7d bb 49 7e 1c 3a 35 86 3a 0b bc 11 b9 bc 63 53 13 db b6 21 b2 17 b6 8c 6c 3a de c8 b0 48 30 1a 78 e1 93 b1 f2 84 d9 a0 da 32 3b 49 9d 0e a3 ba 0c c0 20 f1 60 44 0e bf e1 b1 1f 00 db 07 eb f8 0b 93 7a ee 80 51 71 65 d0 f1 46 c6 4d b5 e4 80 4a d1 c1 db 33 01 93 60 94 84 63 3e bb 8d 4e f6 d7 4e 72 4b bf 55 91 07 da 56 22 Data Ascii: u';Gph8Q+mf0,-#-"C"F^y9iF@z^xN4*I UNyFt!,H%\![$R$qpnd2}I~:5:cS!l:H0x2;I `DzQqeFMJ3`c>NNrKUV"
2024-10-10 16:00:48 UTC	16384	IN	Data Raw: 49 49 78 a3 6d 90 4f f2 d1 5f e3 49 57 25 53 20 30 da 2c 5f 9e fb be 25 d9 53 ac e2 06 6d fc 67 4d 28 10 b5 f0 53 88 c0 7e 3e c3 5e b0 96 88 a4 6a 56 81 ac 3c e2 4c 74 3e 79 ed bb 38 fd f9 09 7e 74 9f 32 42 c7 41 04 97 ac e7 a6 59 52 fe 59 8b 9a b4 f3 4a 8b b4 d6 10 bd d9 0f af 84 78 1b c9 34 c0 e1 99 a8 cd 23 a0 ce 8d b4 0e 00 99 43 46 38 aa 5e e1 a4 f2 b1 1e 2b 7f d5 16 32 3e 8d f2 99 ec b5 f7 ea 3d de 6a 55 6b ab 45 a6 da 10 6c 86 da dd 41 0a 35 3a 57 9c 6d af f8 17 dd 86 fe 9a 8f 67 27 ed 3a 5b 96 b7 fe 68 25 95 d8 2b b0 d4 b5 c8 c6 c9 ae 2d 62 2a 76 b4 6a a4 5b 48 7c 83 75 29 d5 f1 80 c1 6d 15 f3 46 e2 9d 67 bd 75 10 d5 0f fa 52 85 d6 65 ac 67 bd 66 c1 72 a4 33 6d ea 5c 99 93 86 6e a9 fd 34 e0 24 b4 0d 56 b1 61 56 94 05 d2 f1 9b 06 fa d6 bf 56 69 91 Data Ascii: IIxmO_IW%S 0,_%SmgM(S~>^jV<Lt>y8~t2BAYRYJx4#CF8^+2>=jUkElA5:Wmg':[h%+-b*vj[H\|u)mFguRegfr3m\n4$VaVVi
2024-10-10 16:00:48 UTC	1449	IN	Data Raw: 45 2f 63 f8 e4 e0 0e d0 f4 68 6c d8 37 44 70 d3 c6 9c 6a 8d 33 2e 82 62 3b 12 9c f1 56 32 89 89 b7 1c f8 4d 92 80 1d 13 a3 81 6b 0f 74 b0 f6 84 70 e9 e9 2c 49 af 92 78 a0 74 57 ec ad 25 df 18 38 c3 d4 53 29 e6 ae 8e 8b 93 b1 d2 56 e2 b7 bf 85 b6 94 6e 6e da cf 4a 54 d6 75 6d ac a3 fc 6d 23 e6 09 04 32 6d 06 4d 28 cf 16 35 28 24 8a d7 e3 11 0c 87 53 1f 83 11 24 c4 fc c3 89 41 42 39 c4 98 16 56 9e 4f 6d b3 c6 ef 84 26 af d9 dd a3 84 63 8c fa 7b eb 2a bd af dc 00 b7 88 03 05 8e ec fa fd 82 bd 9f 8c 0b 40 5f cc ab 16 c9 2c 13 c1 24 45 9b f2 c5 95 32 0f ac 16 0c f7 e9 05 a9 ed 10 12 2b 87 10 71 c9 25 6e 4c d0 b4 d8 26 e3 b3 13 af d7 74 bb 7d 5f d3 95 83 db 5b 37 ea 39 ca bb f7 00 bc c7 7d 71 70 80 36 07 87 17 11 46 47 79 ad 8b 01 fd 00 09 4b 55 8e 3a 38 8f 1e Data Ascii: E/chl7Dpj3.b;V2Mktp,IxtW%8S)VnnJTumm#2mM(5($S$AB9VOm&c{*@_,$E2+q%nL&t}_[79}qp6FGyKU:8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49787	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:49 UTC	658	OUT	GET /ests/2.1/content/cdnbundles/converged.v2.login.min_qzvqnltrxpy99ajspyxbgq2.css HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:49 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:49 GMT Content-Type: text/css Content-Length: 20414 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 03 Jul 2024 21:48:08 GMT ETag: 0x8DC9BA9D4131BFD x-ms-request-id: 42a8c038-f01e-003a-3b3e-1aae91000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160049Z-185b7d577bdwmw4ckbc4ywwmwg000000027000000000mxse x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:49 UTC	15603	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ed 7d 6b 73 e3 36 b2 e8 f7 f9 15 5c a7 52 3b ce 4a 8c 48 3d 2d 57 52 3b 99 cc 26 3e 67 5e 35 33 d9 47 a5 52 5b b4 44 59 3c 43 89 ba 24 65 8f 57 47 ff fd e2 8d 06 d0 20 29 8f b3 d9 7b 2b 27 67 13 0b dd 6c 00 dd 8d 06 1a e8 06 be fe ea 0f c1 f3 62 77 5f 66 37 eb 3a 78 fa fc 3c 78 95 2d ca a2 2a 56 35 29 2f 77 45 99 d4 59 b1 0d 83 67 79 1e 30 a4 2a 28 d3 2a 2d 6f d3 65 18 7c f5 f5 d7 5f fd e1 49 bf fb ff 05 ef 3f 3c 7b f7 21 78 f3 97 e0 c3 8f 57 ef be 0f de 92 5f ff 08 5e bf f9 70 f5 fc 45 d0 99 ca 93 27 1f d6 59 15 ac b2 3c 0d c8 7f af 93 2a 5d 06 c5 36 28 ca 20 db 2e 44 ab d3 2a d8 90 7f 97 59 92 07 ab b2 d8 04 f5 3a 0d 76 65 f1 3f e9 82 f4 21 cf aa 9a 7c 74 9d e6 c5 5d f0 94 90 2b 97 c1 db a4 ac ef 83 ab b7 e7 61 f0 81 e0 16 Data Ascii: }ks6\R;JH=-WR;&>g^53GR[DY<C$eWG ){+'glbw_f7:x<x-V5)/wEYgy0(-oe\|_I?<{!xW_^pE'Y<]6( .D*Y:ve?!\|t]+a
2024-10-10 16:00:49 UTC	4811	IN	Data Raw: e7 bc b1 e2 92 61 7d df b0 68 ac ab 2c aa b1 88 da cb c6 22 89 f4 a2 b1 42 53 1e da 58 e7 55 1e b5 fb a5 96 31 c6 85 9c 5c 95 58 0f 77 34 04 a7 bc ef e9 bc 62 55 e4 cb 9d 46 11 60 f2 34 8a 20 ba 0a e1 1d 2d b3 ba 41 d4 6a 33 50 25 58 6c a8 15 02 68 eb 56 83 ba b5 a0 21 5d f4 aa e1 60 30 5e 26 13 b7 4f 5a e3 0c 32 50 fb 10 40 6b 9f fc 5a d9 82 86 f5 c9 a7 ad bc 4f 0f 53 c6 3e 8f 75 ef 81 fb bb e5 60 13 bf d0 d1 86 c0 d4 70 43 60 72 bc 81 ca 0c ee 7b ca cd 06 61 90 56 01 34 34 b4 0d 0f 13 81 b8 e1 dc 70 52 d0 d3 64 f3 b6 df 8a 2c 1c d2 a7 e1 c5 ec 1c b9 2b 18 00 b1 42 22 26 de 7d 9d 59 8d 1f 8e 83 89 00 6e 65 8f 64 aa a2 fc c3 d8 65 70 5f b6 f7 9c 65 7e ea 83 9d 2c f7 31 10 e4 08 df ce 47 c4 df 33 f4 3c 40 c9 2e 2b 17 af 8a ce 37 c9 36 db ed 73 c6 5e f7 a6 Data Ascii: a}h,"BSXU1\Xw4bUF`4 -Aj3P%XlhV!]`0^&OZ2P@kZOS>u`pC`r{aV44pRd,+B"&}Ynedep_e~,1G3<@.+76s^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49788	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:49 UTC	635	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:49 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:49 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: b57a5b89-101e-0074-33db-1ac80b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160049Z-17db6f7c8cfqxt4wrzg7st2fm800000000p000000000zych x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:49 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 5a 40 01 48 3f 65 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 Data Ascii: Z@H?e~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!E
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 77 01 ab 86 93 13 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e Data Ascii: w+'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 30 09 f5 14 35 60 ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b Data Ascii: 05`I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}A
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 92 03 92 9f b2 90 ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 18 b5 fc df b9 b3 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 12 cf 7f 7a f2 a0 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce Data Ascii: zi ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I
2024-10-10 16:00:49 UTC	8303	IN	Data Raw: 60 d5 08 91 5e b1 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e Data Ascii: `^D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49785	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:49 UTC	654	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:49 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:49 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: 9cfba38e-601e-0017-6ee8-191de2000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160049Z-185b7d577bdd97twt8zr6y8zrg00000002q0000000018bhw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:49 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-10 16:00:49 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49783	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:49 UTC	577	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:49 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:49 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: c247bf67-301e-005c-27f0-1aa9a3000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160049Z-17db6f7c8cfqxt4wrzg7st2fm800000000r000000000p2w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:49 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 62 f4 5e b0 ec 3b b3 a4 63 b8 24 72 e0 05 15 1f 7d e2 3d 3f 37 19 0f e3 4b d8 f3 Data Ascii: E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJEb^;c$r}=?7K
2024-10-10 16:00:49 UTC	16384	IN	Data Raw: 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 9c d8 a2 fa f9 8d 92 11 d2 4d a4 6e 0a 47 ef 48 fc 1c f5 39 69 8b 0e 7f d4 a7 84 Data Ascii: moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.DMnGH9i
2024-10-10 16:00:49 UTC	12691	IN	Data Raw: 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 a4 8e 6f 80 45 9c a5 63 47 7c 28 33 2f 2a 99 bd c0 49 d2 0d 4e f3 57 e8 09 fe a7 Data Ascii: se_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ oEcG\|(3/*INW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49791	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:50 UTC	429	OUT	GET /ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_1yb3e7oii5t28dgo4xrtow2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:50 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:50 GMT Content-Type: application/x-javascript Content-Length: 16326 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Tue, 27 Aug 2024 20:17:04 GMT ETag: 0x8DCC6D537C7BF24 x-ms-request-id: ec4ceea1-301e-001a-54a0-1ad536000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160050Z-17db6f7c8cfkzc2r8tan3gsa7n00000000sg00000000bz1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:50 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 dd 7d 4d 73 23 c7 92 d8 dd bf 02 0f cf f1 86 5c f5 40 f8 e0 27 46 d0 18 04 c0 19 ec 90 00 04 80 43 29 24 19 d1 04 8a 60 bf 01 ba b1 dd 8d e1 f0 51 e3 78 37 1f f6 e0 ab 7d f3 c1 27 1f 7d f1 dd 3f 65 23 d6 bf c3 f9 51 55 5d d5 dd 00 c8 91 56 6f d7 0a c5 10 dd f5 95 95 95 95 95 99 95 99 fd 87 db b5 3f 8d bd c0 df 13 fb 8f ea 77 21 d8 f3 f7 1f bd db 3d ef 47 ff e7 fd 50 c4 eb d0 2f e0 ef 92 f8 b4 0a c2 38 7a f5 d1 0d 0b 71 03 5f 35 1e e5 bb fa e3 67 c7 9b d5 7d 67 11 b8 33 31 ab ff a1 f2 f9 95 6c 2a b0 e9 d4 5d 2c f6 62 d5 83 13 3b c9 ef 60 1f 1e b8 59 e3 0f e5 a4 e0 33 0e e3 35 1e 75 47 41 69 d9 10 4e 50 9a 36 3c f8 77 d5 28 16 9d 60 af bc ff 79 ef c7 64 1a 4e e0 78 00 fc 5e 75 9f a0 f4 1b de 5e 05 fa 87 3f 87 fb 4e 08 7f 8e f6 Data Ascii: }Ms#\@'FC)$`Qx7}'}?e#QU]Vo?w!=GP/8zq_5g}g31l*],b;`Y35uGAiNP6<w(`ydNx^u^?N
2024-10-10 16:00:50 UTC	733	IN	Data Raw: c0 f5 c3 79 67 55 de 72 6e 30 47 45 07 e2 e0 a1 a2 03 90 e8 a9 c6 72 0b fd 96 e1 b7 f4 fb 30 27 7d 00 6e 0b 06 59 a2 2f a7 1c 41 90 d7 5b 39 85 15 c9 af 0c df e0 d5 1a c3 7b 00 1d 0f 96 cc 31 14 f8 fd 00 92 38 f0 07 26 68 1f 8a 8f 02 83 09 f8 cc cc 8d 10 e1 e4 34 aa 0f 19 70 c2 8e cc 1c 39 82 4b ab 1f 9a f8 7d 5e 19 dd 82 51 6d 02 c8 68 0d cb 82 19 3d e0 68 3d 30 aa b2 07 f1 03 a3 85 32 be c1 a2 68 3c 24 e9 d6 00 eb 78 77 f8 c7 f3 e6 f9 e9 f9 49 d1 16 aa f8 dc e2 69 8e a0 fd 42 2a 87 f5 62 64 3c c1 2e c0 ac c9 aa 68 99 3c f0 39 1d 83 58 1d 4b 3a 00 96 ae dc 70 b4 e4 a7 ce 65 58 05 b4 fb 8e bc bf 10 3f 36 46 40 70 c5 0c 77 b9 d3 3a eb 0f b1 16 fb 6f 13 4b 51 87 90 96 0d 41 58 63 98 25 73 3f 2c 27 3c fd b0 42 76 1c 0c 01 29 d3 64 e9 c3 21 1c b1 69 b0 ed 3a Data Ascii: ygUrn0GEr0'}nY/A[9{18&h4p9K}^Qmh=h=02h<$xwIiB*bd<.h<9XK:peX?6F@pw:oKQAXc%s?,'<Bv)d!i:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49793	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:50 UTC	410	OUT	GET /shared/1.0/content/js/ConvergedLogin_PCore_ELtAAt2Ya8ISGuc0PJcBKA2.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:50 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:50 GMT Content-Type: application/x-javascript Content-Length: 122193 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 04 Sep 2024 01:33:09 GMT ETag: 0x8DCCC8188A08D46 x-ms-request-id: f9768fd1-d01e-0036-06f8-19718b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160050Z-185b7d577bdd97twt8zr6y8zrg00000002u000000000kcws x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:50 UTC	15592	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 e4 bd 7b 57 e3 48 92 38 fa ff fd 14 46 33 97 b6 1b 61 2c bf b0 45 ab 59 63 a0 8a 69 c0 0c 86 ea 9e a5 18 8e 2c a5 8d 1a 59 f2 4a 32 8f 31 de cf fe 8b 88 cc 94 52 b6 4c 55 cd ee b9 f7 dc 73 e7 51 58 99 91 af c8 c8 c8 88 c8 c8 c8 bd 9f b7 fe af d2 cf a5 dd ef ff 4f 69 78 d3 bb be 29 0d 4e 4b 37 9f cf ae 8f 4b 57 f0 f5 8f d2 e5 e0 e6 ac 7f f2 fd f5 60 a3 f8 ff 9b 47 2f 2e 8d 3d 9f 95 e0 ef c8 8e 99 5b 0a 83 52 18 95 bc c0 09 a3 59 18 d9 09 8b 4b 53 f8 37 f2 6c bf 34 8e c2 69 29 79 64 a5 59 14 fe c9 9c 24 2e f9 5e 9c 40 a1 11 f3 c3 97 52 19 aa 8b dc d2 95 1d 25 6f a5 b3 ab 4a 15 ea 67 50 9b 37 f1 02 28 ed 84 b3 37 f8 fd 98 94 82 30 f1 1c 56 b2 03 97 6a f3 e1 23 88 59 69 1e b8 2c 2a bd 3c 7a ce 63 e9 c2 73 a2 30 0e c7 49 29 62 0e Data Ascii: {WH8F3a,EYci,YJ21RLUsQXOix)NK7KW`G/.=[RYKS7l4i)ydY$.^@R%oJgP7(70Vj#Yi,*<zcs0I)b
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: 7e fe 9d 70 17 86 b2 5a 68 c6 d8 53 99 2b af 38 61 68 21 9b ce f0 76 06 77 2f b1 8a f6 1c e0 29 00 38 c8 06 c3 b2 0a 2b df 30 39 1d 64 f6 0d 4f 7a e2 7e 34 6d 3a 9a 00 0c 34 01 08 95 1f a4 6f 71 e1 37 9b b1 78 a5 1c ea ef e8 81 02 0a d3 b1 1d 3d 65 57 f3 d1 f7 33 e7 1d 77 84 3e 5b e4 6f 88 37 0e 56 73 7f 47 df 2d 25 77 ad 3e cb 46 b1 09 fd 59 e9 9a c6 25 5e 69 86 3d a4 ea 02 54 96 92 e8 0a dd c2 1a 8f 36 b8 e8 31 2b aa 16 b9 42 96 2b 1f f5 5b f8 9d e1 36 fa d1 00 84 23 1a 82 2d d1 a8 e4 55 1d 39 d3 31 2c 3a 0c 18 07 db b4 66 53 10 09 0c e7 b8 eb e1 00 b8 8f 67 e8 6b fa e2 d9 63 2f 68 1b f4 cd 05 5f 49 5f d2 84 a2 d5 ed ad f3 4c d4 f3 44 d8 0b 44 4c 5c 78 f3 82 ab 26 01 e4 a3 c7 f5 32 bb 60 81 8c 06 67 3a 21 1f 45 b4 1c 02 ad c9 fa cc a4 dc 68 35 2a 3a ba Data Ascii: ~pZhS+8ah!vw/)8+09dOz~4m:4oq7x=eW3w>[o7VsG-%w>FY%^i=T61+B+[6#-U91,:fSgkc/h_I_LDDL\x&2`g:!Eh5*:
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: 0d e2 04 ad c1 bb 90 2b c3 9b df 13 1b 27 31 62 9a df 88 b4 22 90 79 9f bc 0f 9c 27 11 fb 1f b8 72 a6 d3 af de 87 e3 dd 83 c3 37 64 0e c5 fd 5c 9d 61 05 a8 a8 c7 32 2f 55 dd 9b 53 55 9e d8 44 8b 91 7e 0a 94 60 d1 1a 25 3d 4c a7 67 62 6e 14 d4 3d c4 dd 94 09 78 03 83 b1 98 8c 98 fa 44 64 c2 09 39 8c 7b 11 12 01 b7 84 d2 68 0b 3f 42 3a 43 9e 37 ea 66 1f 11 96 d2 99 0b de 60 31 6c 06 7e 1f 60 2f e5 2b 1b 5c 43 6a dd 95 0d ee cc 69 5c a5 09 1f 25 9d b5 6c f7 bc 62 11 b4 c2 84 82 a9 45 99 57 f5 2c 9d e8 c5 38 e0 86 3e a7 79 15 8b 8b 56 aa 40 4d 64 ec bc 31 ab ab 6d 1e 6e 1b c3 dc 45 ef e1 4c 03 88 3c c8 3e b0 fe 39 35 52 5e c9 79 43 d9 d1 ca d5 54 a3 b6 ee c4 5d a8 6b 63 07 30 7d a6 73 b4 dd 65 ba 72 a1 7a df 6c a7 fe fe d6 5e 4e e4 90 95 6e 23 32 12 c4 1a 55 Data Ascii: +'1b"y'r7d\a2/USUD~`%=Lgbn=xDd9{h?B:C7f`1l~`/+\Cji\%lbEW,8>yV@Md1mnEL<>95R^yCT]kc0}serzl^Nn#2U
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: ce f2 fe e8 1a b9 e3 49 f2 26 1c 0f 1f 45 ee 29 dd dd b3 30 20 25 b2 3c 1f 46 65 59 b4 27 33 de a0 d8 84 6d 8d 13 e9 7b 19 fd 2c 29 1a f9 07 fb 09 37 13 1e 81 af e3 38 d7 1a 8a bf c1 36 cf d0 b6 42 7c 9d 14 e0 d0 ef c9 18 43 4d c5 77 71 59 77 8e 86 e0 a6 ee b8 6d 25 93 bb 6e 34 d6 c5 bd 30 36 1f 71 7d 0a 29 8b 9e fd d3 20 11 52 2b a4 a9 df a3 6b 09 78 22 6a b0 e5 b4 03 2f 7f 92 e6 f1 e0 f1 f3 4d 94 b0 19 60 76 9a a7 23 28 93 76 42 3f c6 88 36 5d bb 46 a9 01 63 8f b8 42 99 64 e6 92 d1 19 60 eb 35 2a 5c 4d f2 80 57 d1 4d fa 51 56 f9 b1 c1 12 09 54 6e 43 94 2a ec a1 e3 f3 ac 01 44 68 83 84 57 8d 1f d1 6f d0 8f 2e e0 09 bd 70 82 4f 6d de 88 b3 06 4a 70 95 cf 7f 44 bc d8 56 9c 5a 0d 87 8d 74 00 d3 43 f9 aa 30 27 f7 48 f1 e7 7d 97 ec 41 df 0b ab 6f 63 6a 6a 99 Data Ascii: I&E)0 %<FeY'3m{,)786B\|CMwqYwm%n406q}) R+kx"j/M`v#(vB?6]FcBd`5\MWMQVTnCDhWo.pOmJpDVZtC0'H}Aocjj
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: ac b0 72 18 98 1e 26 58 4c 56 0d f0 06 7e 5a ea ad 15 59 17 96 6f 16 b5 36 49 01 f9 99 3e cf 46 45 9c df 70 be 0d 1e 85 fe 33 ed 87 06 bf 78 64 42 a2 03 be a2 0f 92 e1 4a 73 fa 08 1a 35 fe 39 bf 8e 9c 9a 34 94 48 08 3d 8d b1 ad 19 96 66 3b 2a ab ae 60 84 ac bf 74 3a b2 04 69 0e a4 71 ea 6c 6a f6 bc a2 fa 6a e1 19 28 41 f3 40 09 7f 2b b7 21 10 05 39 0d 1d 7c e6 ed f6 2e 69 dc 7f 12 45 d1 08 f8 1d b0 cb 41 22 66 e0 e6 cc 3b 69 60 1c 9a 87 30 93 c0 11 da 2c 85 94 58 61 06 19 8a 3d 84 c3 a8 44 19 66 35 9d e2 26 23 96 13 55 97 30 19 53 44 9b 78 fa 7c 5f ca ac 66 f2 68 83 f3 b8 08 91 50 70 67 01 e8 36 d0 56 81 59 a7 1e f1 da 42 be c7 d0 f5 cb a1 83 f4 1b 8c 78 5c 7d a4 db 2b 40 c2 64 41 45 d3 8e 38 d9 b4 4d 48 3b 4f 45 41 18 a2 c3 86 1a c5 b9 2f 25 1d b1 44 20 Data Ascii: r&XLV~ZYo6I>FEp3xdBJs594H=f;*`t:iqljj(A@+!9\|.iEA"f;i`0,Xa=Df5&#U0SDx\|_fhPpg6VYBx\}+@dAE8MH;OEA/%D
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: 94 45 81 eb 67 71 e4 c5 d2 96 22 49 58 94 cb 4c b0 28 ce 61 62 f1 fc 6e 96 f3 6a 37 35 07 4d 19 90 0e 36 3a f0 0d 9c 2a 81 1d 2d 19 4f 04 de 40 c0 62 26 f7 83 e6 5e 0a 2c 13 20 cd dc e3 81 4c 30 87 8e 93 db 32 0b 5c 91 c7 5e 1e 7a fb c1 bd 9a e3 a7 7e 22 5d df 49 b8 cb 58 2c 3d c7 97 b6 cd 93 2c 70 02 11 db 98 d7 fd 90 93 9f 3a 09 d8 4d e0 fb 22 4f a2 38 08 12 4c 58 96 44 61 92 24 79 c0 c1 25 f6 d2 4d 2d a1 52 1b 24 94 3b ae 00 c5 e6 5e 62 fb 89 1b 78 18 4e 90 88 3c b0 59 76 37 ef d3 5a 67 69 ec 70 16 b9 3c 70 d5 bf be c7 38 88 2a 89 73 df 06 52 38 ee dd 1c 76 ab dd 84 86 47 64 11 b8 76 9e 81 ab 4a 3b b4 c1 29 64 ec 05 22 64 36 13 3e 8f f7 43 bc 61 9a f0 50 d8 e0 a2 b6 90 49 06 8e 0a 36 94 83 b5 63 f1 42 3f 12 c1 7e ba 89 0c ee b9 81 88 3c 96 b9 b1 0b 29 Data Ascii: Egq"IXL(abnj75M6:-O@b&^, L02\^z~"]IX,=,p:M"O8LXDa$y%M-R$;^bxN<Yv7Zgip<p8sR8vGdvJ;)d"d6>CaPI6cB?~<)
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: 8f d8 ea d9 9b bf ec dc 0e b2 86 d1 dd cf 1b 69 ae d2 87 20 3b f3 54 bf dc e8 39 98 92 df 9b e9 ad fa 56 bd f6 87 4d fd d5 09 2b 7f 60 b4 19 bd 5c 57 63 fe 76 e1 f8 44 e1 4d eb 56 ce cf ca 85 e1 99 6b 46 fe fa e7 2f c7 e3 f0 f9 bc 2a 5f a6 2f 43 db cb df 2e 09 6d 93 6d fc ed 27 a8 4e 67 a6 55 fb 42 bd 32 7c f9 79 ff 5e 15 95 06 f7 79 b3 cf de f6 6c d6 2f ff de 4c d0 b2 e0 66 95 e4 1b c6 df 68 75 5a 49 b2 b6 4b 7e 29 f3 3b 45 7e 35 f5 e6 d3 86 c8 49 f5 b7 f9 e3 52 c8 e7 05 26 bd de 5c da c9 00 69 9a fb 8d 94 9f 7f 52 40 81 90 87 74 8b d8 97 a5 ff fc 53 cd cc 93 55 2e bc 7c 7d 07 9a df 99 8e ee 84 bf bf be 46 ad 7d da 44 8b bf 2a 5a 69 99 a1 14 ea 2f 0c 99 ee a4 4c cf 2a 96 cb f4 2e 3a 75 5d f5 ee aa f5 ae aa eb dd 94 bb a2 7a c9 2e 49 ce cd 95 5e fa 53 55 Data Ascii: i ;T9VM+`\WcvDMVkF/_/C.mm'NgUB2\|y^yl/LfhuZIK~);E~5IR&\iR@tSU.\|}F}DZi/L*.:u]z.I^SU
2024-10-10 16:00:50 UTC	8297	IN	Data Raw: 44 5d 0b 2d 94 1e 42 c1 d7 11 0b b1 0e 2a 15 3c 8f e9 63 3a 55 74 59 09 2e b5 00 1f e3 aa bd 03 35 07 6f 63 52 84 e7 2f 6d 92 c1 e9 10 89 6f ae 45 64 ba b3 43 a5 af 97 81 17 65 a6 74 2d 26 19 e0 80 9e a0 b0 1d df 68 09 61 20 c0 85 83 29 61 48 2a cd e5 cf 7e 0c d2 57 4b 07 9f 78 e2 49 14 5d ce 09 3e 99 f3 27 2f 6d 97 38 30 1e 7c b6 e4 cf 4e 38 0a 33 4c d5 40 bd e9 d0 e1 50 24 7f 1e c3 bf b1 06 0f 4e 81 10 48 7c 90 24 91 1b 20 ed 03 48 60 11 18 c0 df 52 33 97 8f 0d 06 a7 3c 12 12 8f 96 45 c9 f6 12 df 00 07 55 bc 63 54 71 cd 81 80 87 c9 0c c9 f0 fc 90 cd e8 24 9c df 9c 84 58 fe 14 b4 11 18 8c a3 2c 8c d0 3b 09 05 72 21 3d 3f 79 c2 e0 8a 58 f5 91 88 53 0a 1e 03 57 fb 24 b5 72 e2 fb 78 24 c9 09 e7 35 b1 e3 10 7d 02 b4 2b ba f2 ef 43 7b 99 5e 89 cc e2 2f b4 19 Data Ascii: D]-B<c:UtY.5ocR/moEdCet-&ha )aH~WKxI]>'/m80\|N83L@P$NH\|$ H`R3<EUcTq$X,;r!=?yXSW$rx$5}+C{^/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49795	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:50 UTC	649	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:50 UTC	738	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:50 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 61d58b74-e01e-0036-7fd8-193999000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160050Z-185b7d577bdfx2dd0gsb231cq000000002g0000000013cmx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:50 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-10 16:00:50 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49794	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:50 UTC	618	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:50 UTC	813	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:50 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: 804ced1b-401e-004d-6c0e-1b7b05000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160050Z-17db6f7c8cfdpvbpevek8sv5g400000000gg000000007b3e x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:50 UTC	15571	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: c6 f1 60 48 76 39 a2 ca 7d 0a c4 6c 46 7b 28 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 Data Ascii: `Hv9}lF{(rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUF
2024-10-10 16:00:50 UTC	16384	IN	Data Raw: d6 d6 bf a7 c9 82 82 ed 58 a9 a7 1e 3e d1 2c 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 Data Ascii: X>,)i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: a4 ca a6 93 a3 67 05 69 b4 c6 7e c4 d9 e3 39 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 Data Ascii: gi~9Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 41 1f ce 63 f8 7c 38 cb 6e 62 8c 3e 56 eb 18 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 Data Ascii: Ac\|8nb>VP9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 6f 8f 8c 3d a0 b1 ba b9 56 ed db 8d 94 af 1a 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 Data Ascii: o=Vtr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$s
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 28 6a 74 56 53 66 c5 fe cf 72 5c d8 9f 15 29 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc Data Ascii: (jtVSfr\)cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3
2024-10-10 16:00:51 UTC	2490	IN	Data Raw: 76 68 98 bc a0 3f 40 4a 03 1c b3 42 1d 27 14 de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f Data Ascii: vh?@JB',0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49796	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:50 UTC	392	OUT	GET /shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	818	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:50 GMT Content-Type: application/x-javascript Content-Length: 61052 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 25 May 2023 17:22:47 GMT ETag: 0x8DB5D44A8CEE4F4 x-ms-request-id: 34d538a1-c01e-003a-292d-1be683000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160050Z-185b7d577bd8m52vbwet1cqbbw00000002qg00000001366n x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	15566	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 cc bd 69 77 db 46 b2 30 fc fd fe 0a 0a 27 57 03 8c da 34 29 2f 71 48 23 bc b2 44 db 4c b4 45 4b 9c 8c ac d1 81 c8 96 04 9b 04 18 00 94 ac 91 f8 df 9f aa ea 1d 04 28 29 c9 7d ef 7b 12 8b 40 a3 7a af ae ae ae ae c5 bf 89 93 51 7a d3 2c f8 98 4f 78 91 dd 9e dd f0 f3 69 34 fc fa 53 9e 26 d3 70 e9 d7 fb fb 93 d3 a0 39 9d e5 57 fe c9 c9 fa 29 3b 61 8c 5d cc 92 61 11 a7 89 cf 59 c1 92 e0 ce 9b e5 bc 91 17 59 3c 2c bc 6e d2 cc fc 22 60 49 73 e4 17 cc fb 35 1a cf f8 cf 50 81 c7 7c 9d 2d b8 cb 78 31 cb 92 46 d6 e4 f3 40 c3 f6 af 79 52 6c 47 05 4f 86 b7 35 e0 51 19 7c 9f 67 79 9c 63 16 5e 93 e5 dc ca 72 94 45 43 be cd af f9 b8 06 78 64 01 6f 4c a7 83 24 8f 2f af 8a 7c 33 cd aa 8b 8f 9d 16 bd 8b 72 5e 0b 6a 17 7d d6 ff 06 4d 1e f1 d1 20 Data Ascii: iwF0'W4)/qH#DLEK()}{@zQz,Oxi4S&p9W);a]aYY<,n"`Is5P\|-x1F@yRlGO5Q\|gyc^rECxdoL$/\|3r^j}M
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 50 d9 d3 c8 92 f2 c0 bf 2d 5f 47 89 51 d4 c5 e2 ee 4a 5e 8f 74 11 ba 78 22 35 03 45 5f ae b8 15 0a 6b 9f 0b 6f 06 46 14 14 a0 01 d4 75 81 77 09 f9 14 b6 80 d5 55 f7 1d da c5 86 b6 4e 3c e4 1f ba 37 9b b7 b5 c3 23 d4 c8 84 ec 45 b0 c9 37 15 f4 52 19 68 52 db 84 ba 3a 93 b3 c0 d0 32 cd 34 96 c5 e1 77 a8 86 82 5b a0 e4 0c 44 e8 9f fe b7 62 f3 e2 12 ef cd f4 45 86 1d 76 a9 ca dd 36 79 da 4e 84 b4 06 0b 02 f6 93 7c 32 6b 9e 1f 01 48 1d b9 b0 1d 0e 45 73 ff 0a 48 49 e1 df 50 90 3f 40 e9 4f 5c e1 0c 8a 9e 20 e1 3d f7 f7 d8 4d ad e8 59 f6 8d fc 90 12 fc 6f ee 36 ee 97 d9 84 b2 55 80 c3 3d dc ed cb 9b 20 58 b6 fb e2 12 a8 93 cc bb ce 09 d9 17 b7 1b 9e c3 3b 01 49 81 06 e2 8a cd c8 00 2b 23 63 ac 8c 91 a8 99 6f 92 81 56 7b 8e f7 8d b2 42 9c 4a 97 0c 0b bf 45 f5 d2 Data Ascii: P-_GQJ^tx"5E_koFuwUN<7#E7RhR:24w[DbEv6yN\|2kHEsHIP?@O\ =MYo6U= X;I+#coV{BJE
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 1d 33 33 40 42 0c db 7c 4f c0 28 e6 7a 08 96 01 95 5d ed bb d4 15 db ec c7 f1 16 6d 6f 68 90 c6 f2 9e eb 33 2a c7 18 89 31 56 eb 59 ec bb 71 89 7f aa 93 e3 73 84 51 29 6d 4a 14 bb 22 63 6f 55 2c 47 e7 05 5d 5b 13 bf a6 ac 26 93 2d 98 72 a5 b7 e5 5a dc 5a c8 41 d4 fd e4 3e 1d 71 da 8f 3c 15 aa a8 02 27 5f eb 0a 69 e7 9e 8a 73 ab 65 64 09 18 b0 07 f0 47 1a e5 af 1f a1 b3 aa 6f 4a be 45 d8 0b 7b 11 7c 72 79 14 0f bd 57 cd 6e 76 d1 ec b5 e1 b3 8d 9d 95 66 c2 ca 10 cd 0f a3 7c 90 c5 ac c9 5a ae fa 7f c2 e6 88 97 22 c9 e1 52 b2 22 5d 8a f0 0f 96 12 40 d3 a5 e8 7c be 94 98 1b 2d 25 d5 4c 26 46 3d 61 3a 5c 4a 00 f5 97 a2 e2 77 4b d1 f9 c9 52 72 ef 6a 29 b9 77 6c 21 fc db 40 f8 5d c6 fc 1b 37 be c9 6d fc 7a 4e 9b e8 e0 a1 68 5f 34 7d d6 b3 76 7a fe 9b e8 2e 1e 44 Data Ascii: 33@B\|O(z]moh3*1VYqsQ)mJ"coU,G][&-rZZA>q<'_isedGoJE{\|ryWnvf\|Z"R"]@\|-%L&F=a:\JwKRrj)wl!@]7mzNh_4}vz.D
2024-10-10 16:00:51 UTC	12718	IN	Data Raw: 6b 6b 9b ec 2f dd e2 10 e0 f3 4d ea f3 dd c5 16 fd bd 12 9b ed 3a 78 d7 71 cb 0f 05 12 73 65 5f 43 ee b5 a6 0a 6e 83 08 03 ba f6 3a d7 c1 f5 6c 76 ab 4e 60 47 68 19 58 60 f5 1f 5e bb c3 54 de 2e 80 82 4f c9 76 ef a4 d4 b5 72 0a ee 68 55 55 91 83 40 67 5f dc f5 4a 1c f6 94 3e 3d 7d 79 a0 3e 39 55 07 e7 28 38 b8 38 65 d6 f5 5b 91 70 12 1c 69 47 2b 47 a6 a3 95 0e 6d 81 13 58 fc 26 42 bf 8e 1d ad 38 fe 3e ed 53 99 91 95 ee 68 64 66 52 9b 89 03 08 8d 1b 82 51 74 a5 1c f1 3a ed 15 45 74 3b 29 5e 35 bb d6 fb fa 7a db 7a 27 1a 93 ee 23 3d 44 bf 15 6d ad 43 c0 d2 64 91 ac 81 29 f3 92 ec 05 5f 59 d7 da da 65 be a6 3f da b7 38 0a be 24 da e8 8d 01 b8 41 ae b4 0b ff d2 ba a5 24 85 d5 3e 9e 97 b0 f2 d1 73 cf a0 45 b4 57 a1 27 69 f7 9e 79 d0 2d 71 2f 29 4f 51 86 ce 20 Data Ascii: kk/M:xqse_Cn:lvN`GhX`^T.OvrhUU@g_J>=}y>9U(88e[piG+GmX&B8>ShdfRQt:Et;)^5zz'#=DmCd)_Ye?8$A$>sEW'iy-q/)OQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49797	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:51 UTC	404	OUT	GET /shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	738	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:51 GMT Content-Type: image/x-icon Content-Length: 17174 Connection: close Cache-Control: public, max-age=31536000 Last-Modified: Sun, 18 Oct 2020 03:02:03 GMT ETag: 0x8D8731230C851A6 x-ms-request-id: 61d58b74-e01e-0036-7fd8-193999000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160051Z-185b7d577bd8m52vbwet1cqbbw00000002t000000000ruwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	15646	IN	Data Raw: 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 33 33 33 33 33 33 Data Ascii: h(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333333333
2024-10-10 16:00:51 UTC	1528	IN	Data Raw: 28 00 00 00 20 00 00 00 40 00 00 00 01 00 04 00 00 00 00 00 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 bc 7b 00 1f 4c f9 00 22 50 f2 00 f7 a6 00 00 00 ba 7f 00 f3 a6 00 00 1e 4e f6 00 23 4e f4 00 f3 a4 00 00 00 bc 7d 00 00 ba 7d 00 00 00 00 00 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 Data Ascii: ( @{L"PN#N}}"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""3333333"""""""

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49798	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:51 UTC	433	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_117b650bccea354984d8.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	798	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:51 GMT Content-Type: application/x-javascript Content-Length: 116365 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:54 GMT ETag: 0x8DCBD5317046A2F x-ms-request-id: a785e3bf-301e-000a-0d32-1a105e000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160051Z-185b7d577bdvdf6b7wzrpm3w2w00000002eg000000002q2v x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	15586	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 ec bd 6b 5b db 48 b6 28 fc 7d ff 0a 5b bb c7 2d b5 0b 63 19 30 44 46 78 48 42 7a 98 49 02 07 c8 f4 f4 10 4f 1e 61 97 b1 12 23 79 74 e1 d2 d8 fb b7 bf 6b ad aa 92 4a b2 0c 26 dd fb 9c 0f ef f4 d3 c1 ba 94 ea 5e eb 7e d9 fc a9 fe 5f b5 9f 6a 1b eb ff 57 3b bf 38 3c bb a8 9d bc ab 5d fc e5 f8 ec 6d ed 14 ee 7e ad 7d 3c b9 38 7e 73 b4 7e 3d d8 28 fe bb 98 f8 71 6d ec 4f 79 0d 7e af bc 98 8f 6a 61 50 0b a3 9a 1f 0c c3 68 16 46 5e c2 e3 da 0d fc 8d 7c 6f 5a 1b 47 e1 4d 2d 99 f0 da 2c 0a bf f2 61 12 d7 a6 7e 9c c0 47 57 7c 1a de d5 4c a8 2e 1a d5 4e bd 28 79 a8 1d 9f 5a 2d a8 9f 43 6d fe b5 1f c0 d7 c3 70 f6 00 d7 93 a4 16 84 89 3f e4 35 2f 18 51 6d 53 b8 09 62 5e 4b 83 11 8f 6a 77 13 7f 38 a9 7d f0 87 51 18 87 e3 a4 16 f1 21 f7 6f Data Ascii: k[H(}[-c0DFxHBzIOa#ytkJ&^~_jW;8<]m~}<8~s~=(qmOy~jaPhF^\|oZGM-,a~GW\|L.N(yZ-Cmp?5/QmSb^Kjw8}Q!o
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 72 48 0c 1b 29 1f 49 83 69 74 84 3e 47 59 80 42 9b b2 59 ca d8 88 5e 36 a7 24 f7 af 17 38 0d 53 1c 3e 97 dc 17 24 8a 0d 4a a7 01 95 4d e2 5c ba e4 61 91 1d cc fc 76 23 bb 17 d9 47 55 e3 fb 1d 24 72 d5 75 be 53 62 b7 c3 d2 4d f8 e3 e1 9f 08 fe 94 d8 cb 4c b2 60 93 73 a2 08 7c dd c2 cc 73 9f 8e 83 c4 ee be 3e 32 f9 4f b1 b5 a0 9d 4a e3 1e bb 1b c2 d1 c8 77 a3 9e bf 9f 52 28 74 4a 36 90 30 df 82 5a d0 d6 7a 03 ab 1b c3 71 f0 37 c6 a2 a7 e2 09 4c c4 d8 f5 2d 06 8f 9b b6 66 12 5d 1b ff 14 d3 96 df 40 63 44 2c e6 6f b8 f8 2d c3 e6 72 5b e7 a8 e9 1d a4 c2 f9 71 c3 23 61 49 cf 47 27 27 7f 63 23 57 e2 4e 51 f5 3a 81 a7 93 7d af 37 d1 7a d7 44 92 9b fa 37 81 4e 4d 11 fd 88 ec b6 68 ac 96 e7 17 55 b3 97 4f d5 55 ce e4 46 ae d0 47 c2 99 47 5b 6a a1 db c9 ce 2d d0 71 Data Ascii: rH)Iit>GYBY^6$8S>$JM\av#GU$ruSbML`s\|s>2OJwR(tJ60Zzq7L-f]@cD,o-r[q#aIG''c#WNQ:}7zD7NMhUOUFGG[j-q
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 29 8c 92 ca 92 96 69 33 da 9c 35 38 fc d6 d6 60 90 eb 41 a0 12 7b 42 d2 a3 7c 11 42 9b 34 a2 89 fa ac 50 54 6d 90 84 ac 5a 8e c0 f6 f8 15 ad ba d6 15 90 17 54 c3 6f b0 8f f9 f7 1b 9e 4f e9 71 33 74 f5 c0 fd e6 30 a7 21 7d a1 5d 47 f8 42 c3 4d be f3 4f 41 ba 44 02 66 76 07 a0 26 a7 28 74 99 e0 3b c9 b0 c7 62 54 65 49 f7 30 01 73 38 73 93 6f be 83 38 82 66 ee ce ce 1e 6e 0d f8 b1 f5 0c 45 5a dc 2d bb 1e b9 c6 a8 1c a5 3d e7 d3 a7 01 cc 63 fd e7 fc 53 3e 06 6a 35 fc f4 09 4b f4 c5 6e dd 03 86 b1 25 2e c8 49 20 ba c1 d7 11 55 f4 05 62 8b c7 b5 5e f7 e2 9e ef 6c 35 b7 f6 9a 6d 87 5d 61 90 56 d2 75 a6 25 9c a5 be 73 39 49 2f c2 89 c3 06 e9 f4 2e 8b 2f c7 85 ef 7c bc 0d 9f ad 6c b6 da db eb 9b ad cd ed 95 17 51 82 39 5e a0 b7 cf f0 f1 eb 15 f7 97 49 1a 67 29 5a Data Ascii: )i358`A{B\|B4PTmZToOq3t0!}]GBMOADfv&(t;bTeI0s8so8fnEZ-=cS>j5Kn%.I Ub^l5m]aVu%s9I/./\|lQ9^Ig)Z
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 43 68 1e b4 61 d1 c2 e6 08 96 6a d0 1c 75 d2 c3 bc a3 a2 68 ef 40 82 32 1c 1c 7b 39 fa ab 83 34 35 ee 0e dd d2 bd c6 a3 e3 da f3 7c fa 79 15 5c ca 3e 2f 40 6c be 3a bc e8 78 20 98 f4 2e e0 1d e4 fd 56 63 77 ca ae d9 1d 3a bf 64 68 0d bf 86 7f 8c a4 17 fe f8 eb 7d 5b d4 06 df ab e2 2b 59 bc 90 fa 71 8c 6d 52 7e a4 58 f9 fa 23 e9 ab 86 4c d4 b9 ba f0 c4 a4 6a a5 37 fb c1 26 5b c5 f2 30 9b 42 1c ab 21 ec 3a 8a cc 58 07 52 57 12 27 53 82 ac c7 c9 ad f0 1a cb f1 c6 54 45 5c 89 e4 5c bd 7e 67 7a 48 3c 46 dc 1b 4a 50 ba e3 2e 79 86 a5 3e ca 8a 99 87 ca 6b 17 98 cf 6e 0f 3e 00 68 d3 f7 f1 5f 4f 3b 19 98 1a 87 7b c1 08 f8 63 17 4f 7f ce 0c e0 45 fb 8b 27 9e ee 44 80 27 ce ab 3e 29 12 46 c4 b8 b4 78 ad c9 f6 06 5c b6 37 22 bf 58 45 07 fb 68 b5 36 b5 cb 52 b6 2d b7 Data Ascii: Chajuh@2{945\|y\>/@l:x .Vcw:dh}[+YqmR~X#Lj7&[0B!:XRW'STE\\~gzH<FJP.y>kn>h_O;{cOE'D'>)Fx\7"XEh6R-
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 50 d0 d5 39 aa fa b8 ea f0 0c 5e b3 3c ed 39 82 c4 c7 f0 e9 f8 a9 11 fd ee 03 1a 02 ec ec bc 1e bd 0c cf 82 8f 18 b1 2f f9 88 f8 f5 23 27 ed f9 c8 49 92 e1 1d 56 8c 6e 6f f1 cf 94 ff 2c 77 76 ec 2f 77 7a 98 3c 16 d9 f0 ed 93 db db 13 5b d5 13 9e a8 98 80 40 5f 4f 91 e3 3d 11 94 39 fa 19 ba 7f ca ac ef 0d d6 09 1c 92 46 38 e2 5f c7 49 80 9e 8b 38 eb 6c 85 09 b4 62 9d 5b 1d 47 92 f1 80 12 5a 18 ff 2c 54 bd 88 98 d9 ee e6 6f 4b a0 df 82 eb 90 1a 8e 00 5a 51 5c b0 c2 e5 84 de 2e 50 30 f1 df 6e 0c 8b a6 ae c5 6b 1f 27 c6 89 07 4e c3 78 68 cd f9 b4 db 43 45 68 31 f4 4e bb b0 17 d0 fc 82 4d ac e3 d0 7d d5 09 af 3d bd d4 fe 19 1c c3 e9 22 e3 50 a5 b2 47 17 b0 3f bc 0a d5 2e 75 7a b8 4f b2 1e 67 34 d9 4e 63 97 9f 7b d6 02 d4 b7 02 3a c1 61 cd 3d bd 16 ca 31 da 5e Data Ascii: P9^<9/#'IVno,wv/wz<[@_O=9F8_I8lb[GZ,ToKZQ\.P0nk'NxhCEh1NM}="PG?.uzOg4Nc{:a=1^
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 74 72 fb 31 53 f0 93 bc 81 d3 83 bc d1 d3 83 6f 9c 02 6a e3 fb cf 03 ef f3 c6 93 51 af 57 f8 d0 5e 5b 41 b8 f6 c6 e1 d5 bf ff 20 b0 d5 6f 1c 43 7a 51 d7 1b c8 5f b4 24 71 d3 9b 0f a9 c9 b3 dd 0b f2 21 90 e4 43 24 09 25 4b 50 0d cf 8c 6f 62 e5 88 72 b3 63 51 46 52 e9 a5 cc 3b 9c 98 a6 0a 38 4d 85 3e df 95 f8 88 93 19 59 81 f6 42 13 0b 3c a8 2b 2c 2d 59 af b6 22 6e 07 b3 d5 11 28 e7 e0 30 d6 1d 1f c9 39 a8 6e 32 07 6f ac 59 1e 59 61 06 62 7c 2e 46 48 49 7c f6 91 70 d4 91 9b 81 f1 18 46 32 48 1c 20 d2 22 15 56 dd 08 24 98 bd d5 e8 1b 4f 8d 4c 62 15 e0 46 85 7d 25 72 e1 38 5e 7e 87 07 db e6 9f 6c e6 7d 32 ab ec c2 0d 57 35 d2 59 01 79 ee 6f 72 13 0d 85 da 8b c2 83 6c d0 0b 34 66 a5 dd 0c f0 9d ab f8 24 00 73 8c 07 b4 02 92 4b d5 b1 75 17 96 0e b3 72 50 0e 90 Data Ascii: tr1SojQW^[A oCzQ_$q!C$%KPobrcQFR;8M>YB<+,-Y"n(09n2oYYab\|.FHI\|pF2H "V$OLbF}%r8^~l}2W5Yyorl4f$sKurP
2024-10-10 16:00:51 UTC	16384	IN	Data Raw: 63 4d 91 32 d6 52 36 60 5b ac 09 30 f3 65 fb ce f6 e7 38 a2 0d 16 84 de c9 87 1f 4f 4a f8 36 33 60 db bc f3 8d 03 e9 66 d1 90 42 cf a6 8c fd 73 20 33 13 e0 aa f5 a5 40 6e 98 1e 23 65 91 c8 1f 22 65 95 88 25 a6 ed 09 b2 32 48 8d e5 00 61 76 8c 6d 19 c2 5e e8 e8 5e 3a 68 05 64 8e e3 55 ad b0 7d a3 83 90 da 2a 86 89 ff 9d c7 b5 4c 3e b3 9f 90 23 3f b5 f8 ac 9f a3 69 ac a8 c9 d7 f0 d0 a1 31 ea b0 ea 38 1e fd 81 54 43 6a 1c c9 64 bf 17 8b 88 be 28 f5 24 4f 23 ba 05 68 c1 47 42 db e7 a1 13 f6 2b fb 9b 6e 7b fe 7a ee ac 7b ca 26 59 1f ca 92 10 03 1c 99 6d 00 76 75 8c 2b c5 8d 05 8e f2 dd 2e 95 2d ec ca 58 d9 6b fb 4e 66 a6 cd 1d 6c b8 21 f1 95 ff f2 7e 8c bb ce 0d 00 36 ef 3f bd f7 5f 1e 44 1d cd 79 b1 33 af ad 20 dc 62 0c f8 da ff d2 10 b6 5d 8b f8 dd ff 09 a0 Data Ascii: cM2R6`[0e8OJ63`fBs 3@n#e"e%2Havm^^:hdU}*L>#?i18TCjd($O#hGB+n{z{&Ymvu+.-XkNfl!~6?_Dy3 b]
2024-10-10 16:00:51 UTC	2475	IN	Data Raw: de 2c 30 3f 34 26 15 78 3c 32 d3 c9 17 b6 63 68 f2 5e 3e ca 38 c7 fa da b4 a6 b7 c9 4e e7 6b eb eb 52 5a e4 a3 63 e0 52 22 d0 e9 eb e5 b4 39 64 8c cb 89 81 6f d5 ca 69 80 28 8f c7 e5 c4 31 24 e6 e5 c4 29 24 a6 e5 c4 89 0f 04 77 29 6d e6 03 81 5d 4a 1b f9 40 80 97 d2 6e 7c 20 c6 4b 69 97 3e 50 1b a5 b4 73 1f 48 9c 52 da 85 0f a4 51 29 ed cc b7 9e 94 d3 ae d0 e1 5d 29 ed da b7 be 2d a7 1d c9 68 79 e3 e3 b4 66 7d f1 b5 ed ac f7 28 1c df ed 02 dd 2b ec 9b 9f eb f4 dd eb 7d 2b 33 dc 1d af db 7d ff f8 89 03 39 df f8 eb ad c1 71 0a 93 ff b5 bd 0e 9f d7 dd 17 14 4f 10 e3 02 ae 47 0f d8 5e 7f 74 4f dd e7 ee a1 fb d6 fd d5 7d e5 be 73 0f 7e 87 46 f4 ed c2 7d 89 4a 7c 59 a6 83 dc bb ef fd 83 56 74 1e 03 cf f7 82 63 43 7f e7 bf 94 24 d3 33 bf ed be 46 3e eb 7b 14 3a Data Ascii: ,0?4&x<2ch^>8NkRZcR"9doi(1$)$w)m]J@n\| Ki>PsHRQ)])-hyf}(+}+3}9qOG^tO}s~F}J\|YVtcC$3F>{:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49799	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:51 UTC	662	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	805	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:51 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: e6ef77a2-801e-0014-72dd-1ab494000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160051Z-185b7d577bdcmhtqq5qad662uw00000002r0000000017kxb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49800	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:51 UTC	663	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:51 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 369d214f-401e-0000-0837-1ab4e9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160051Z-17db6f7c8cf4g2pjavqhm24vp400000000qg0000000195g9 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49801	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:51 UTC	624	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:51 UTC	797	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:51 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: b4081c08-e01e-0019-1a14-1b3452000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160051Z-17db6f7c8cfkzc2r8tan3gsa7n00000000tg000000006cs1 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:51 UTC	15587	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-10 16:00:52 UTC	16384	IN	Data Raw: 0e b1 1f 36 e9 cf 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 Data Ascii: 6}L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-10 16:00:52 UTC	3197	IN	Data Raw: a3 d8 a6 8c a4 8c 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49804	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:52 UTC	417	OUT	GET /shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:52 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:52 GMT Content-Type: image/svg+xml Content-Length: 673 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:46 GMT ETag: 0x8DB5C3F47E260FD x-ms-request-id: e6ef77a2-801e-0014-72dd-1ab494000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160052Z-185b7d577bdcmhtqq5qad662uw00000002ug00000000mb9z x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:52 UTC	673	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 b5 55 db 6e db 30 0c fd 15 c1 7d 69 1e ac 50 b2 ae 43 1c a0 37 6c 2f c3 0a 64 fd 80 d4 b1 13 03 ae 1d d8 6e d3 f6 eb 47 ca f6 96 0c 79 6c 10 20 e6 91 45 f2 f0 98 94 16 dd db 96 bd bf 54 75 97 46 bb be df 7f 9b cf 0f 87 03 3f 24 bc 69 b7 73 09 00 73 dc 11 b1 43 b9 e9 77 69 24 bc 84 88 ed f2 72 bb eb 11 81 43 54 94 55 95 46 75 53 e7 d1 72 b1 65 cd 7e 9d 95 fd 47 1a 71 19 b1 ac 2a f7 f1 7e 4d ae af 6d 75 7d f5 30 c3 3d 84 d9 26 8d 7e 0a 65 0c 57 4c 58 af b9 cc bc 06 9e 58 06 88 25 70 17 1b 69 b9 96 13 12 0a 04 37 2b a9 84 e1 d6 c6 02 c0 b1 c1 3f d8 b1 d4 0a cd c4 01 57 4e 0e 88 25 3e e1 a6 b3 16 d7 24 ed a6 08 63 bc 11 7d 4e f4 03 bb 9b 59 34 3f a2 97 78 c5 31 bf 13 9a 9b cc 2a c3 b5 23 76 89 16 c8 47 61 6c 39 01 21 02 39 81 41 Data Ascii: Un0}iPC7l/dnGyl ETuF?$issCwi$rCTUFuSre~Gq~Mmu}0=&~eWLXX%pi7+?WN%>$c}NY4?x1#vGal9!9A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49805	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:52 UTC	418	OUT	GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:52 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:52 GMT Content-Type: image/svg+xml Content-Length: 1435 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:48 GMT ETag: 0x8DB5C3F4911527F x-ms-request-id: 369d214f-401e-0000-0837-1ab4e9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160052Z-185b7d577bdfx2dd0gsb231cq000000002hg00000000v6mb x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:52 UTC	1435	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 bd 57 4d 6f 1c 37 0c fd 2b 8b ed 75 56 96 48 4a a2 0a db 80 7b f2 c1 be fa 90 db b6 b1 b3 06 ec 26 88 17 76 fa ef fb 28 51 b3 46 91 a2 c9 a5 b0 f7 61 57 1c 51 fc 7c e2 9c bf bc 7e da 7c 7b 7e fa f3 e5 62 7b 38 1e bf fc 7a 76 f6 f6 f6 16 de 38 7c fe fa e9 8c 62 8c 67 78 62 bb 79 7b fc 78 3c 5c 6c 53 d4 ed e6 70 ff f8 e9 70 bc d8 92 6c 37 af 8f f7 6f bf 7d fe 76 b1 8d 9b b8 81 74 83 c5 cb f3 e3 e3 f1 e9 fe 72 ff f2 72 7f 7c 39 3f 1b bf ce bf ec 8f 87 cd c7 8b ed ad 48 50 2e 8b 84 72 97 34 c8 61 47 41 ee 6a c8 ca d7 82 af 37 ac 21 a5 b6 98 ec 9a 4b c8 9c 6e 98 42 12 5a fa 43 87 5d 88 d4 fa d6 6b 6a a1 dd 41 d1 81 83 70 b9 e1 1a 78 49 a6 fe 10 62 d6 1b 49 21 4b b6 93 3e 3c d3 92 42 94 b6 4f 81 8a 2e 03 23 fe d2 12 24 b5 5d 68 a5 Data Ascii: WMo7+uVHJ{&v(QFaWQ\|~\|{~b{8zv8\|bgxby{x<\lSppl7o}vtrr\|9?HP.r4aGAj7!KnBZC]kjApxIbI!K><BO.#$]h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49806	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:52 UTC	439	OUT	GET /shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_4285088f1dbaf52a876d.js HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:52 UTC	791	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:52 GMT Content-Type: application/x-javascript Content-Length: 35168 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Thu, 15 Aug 2024 17:52:55 GMT ETag: 0x8DCBD5317AEB807 x-ms-request-id: b08c5a45-301e-0078-5de9-1a1711000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160052Z-17db6f7c8cfvzwz27u5rnq9kpc00000000tg000000014cas x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:52 UTC	15593	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 c4 bd 6b 43 db 48 b2 30 fc fd f9 15 e0 9d 65 ac b5 00 df 30 18 70 58 06 92 49 76 33 93 9c 5c 66 cf 2e 30 59 59 96 6d 0d b2 65 24 99 4b 02 cf 6f 7f eb d2 97 6a c9 90 cc 9c 67 df 33 e7 6c 70 57 df aa ab ab ab ab aa ab 5b db 7f 59 ff 3f 6b 7f 59 db fc f6 ff d6 de 7f 38 7e f7 61 ed cd 8b b5 0f 2f 5f bd 3b 5d 7b 0b a9 7f ae fd fc e6 c3 ab 93 e7 df de 0e 76 8a ff fb 30 8d f3 b5 71 9c 44 6b f0 77 18 e4 d1 68 2d 9d af a5 d9 5a 3c 0f d3 6c 91 66 41 11 e5 6b 33 f8 37 8b 83 64 6d 9c a5 b3 b5 62 1a ad 2d b2 f4 b7 28 2c f2 b5 24 ce 0b a8 34 8c 92 f4 66 ad 0e cd 65 a3 b5 b7 41 56 dc ad bd 7a eb 6d 41 fb 11 b4 16 4f e2 39 d4 0e d3 c5 1d fc 9e 16 6b f3 b4 88 c3 68 2d 98 8f a8 b5 04 12 f3 3c 5a 5b ce 47 51 b6 76 33 8d c3 e9 da 4f 71 98 a5 79 Data Ascii: kCH0e0pXIv3\f.0YYme$Kojg3lpW[Y?kY8~a/_;]{v0qDkwh-Z<lfAk37dmb-(,$4feAVzmAO9kh-<Z[GQv3Oqy
2024-10-10 16:00:52 UTC	16384	IN	Data Raw: 0b fc b7 7d 4c 89 36 e5 f4 9a 94 e0 c7 fe 7a 3d 4e 40 b1 17 cf 5f e0 bf 2f 5e f4 37 e9 cf 0f 17 f7 e7 cb 53 30 14 ce e0 cf c9 0f a7 f8 ef c9 29 03 db 2f 08 78 8c 4d c1 9f 0e 43 3b 54 f4 74 b7 b3 49 7f 8e 09 fa 43 b7 49 65 9b 2d fc b7 cd 35 76 5f 5c 6c d3 a8 db 5f 23 2a cd c3 eb 78 7e f9 3a 18 46 09 d3 b1 83 c4 33 19 a7 51 5e c4 73 7a b4 81 b3 bb 4e f6 87 b8 48 22 ce d8 61 4a 77 7e bf 61 60 fd 83 c6 70 c7 3d 2a 24 65 3c ff 29 b8 05 65 8f 7e 92 28 a6 5f 03 b4 d0 e7 83 d6 01 a5 0e c3 03 62 c3 7e 07 64 3f 28 18 c0 de 59 28 e5 2a 95 c2 ad 0c bd 87 9b 9b 73 ef 0b 6e ef 4a 82 41 c5 98 db 07 16 9f 8d 40 26 e0 7b 08 5b f9 65 bc f8 90 5e 46 b8 dc fc 3e ee 76 a9 47 45 07 5c 78 b3 e5 cd 1b 0d e3 f9 ca 0c cb 13 7e 4b 7f b3 f5 a0 bd 18 b0 9c 02 ae 84 ce 0c ce 0e 98 ef Data Ascii: }L6z=N@_/^7S0)/xMC;TtICIe-5v_\l_#x~:F3Q^szNH"aJw~a`p=$e<)e~(_b~d?(Y(*snJA@&{[e^F>vGE\x~K
2024-10-10 16:00:52 UTC	3191	IN	Data Raw: 2d e9 61 bf de 76 31 e7 b5 b7 35 ec ae ac a0 fd 7a 5a e0 51 85 64 9c 71 86 da 05 75 05 e2 2f c1 e3 1b 2e e0 ac 2b f3 db b5 61 3f 28 3c f2 32 68 91 01 35 d9 bf 91 79 ee 76 ca 31 5d 87 e6 ce b3 68 e5 9d 9d 2e 03 be 71 96 2f 47 c1 de 90 b1 6d de b2 47 e1 bd a3 cd 0e 87 4e c4 50 4c ad 76 42 79 13 eb d1 84 ba 89 a8 ec 51 f8 46 ef 45 5e 59 6d ae 8d 02 82 52 f5 51 9c a3 01 35 fe 52 6d 5e eb b5 46 a5 5a 61 3a 08 21 bc 5e 6d 35 58 78 bd 56 2c 36 30 9c 5e 86 cf 75 f6 7b 81 77 02 f8 55 8d 84 b0 cc 45 ca d8 44 7f 89 74 f2 8a 88 52 95 62 2a a5 20 69 a9 dc a0 a0 52 ad a5 a2 81 21 b3 5b 2a a1 61 96 92 ca fe c5 54 63 90 d5 37 2a 4e bc 5d 53 05 b2 91 97 6a d4 5c e7 b2 d7 69 fe 72 6e 06 bd 93 76 bf 82 ed 7e 78 23 de 14 2a 36 0a d3 69 66 72 2e 59 04 99 e6 f2 d3 c0 28 c8 74 Data Ascii: -av15zZQdqu/.+a?(<2h5yv1]h.q/GmGNPLvByQFE^YmRQ5Rm^FZa:!^m5XxV,60^u{wUEDtRb* iR![aTc7N]Sj\irnv~x#*6ifr.Y(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49803	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:53 UTC	663	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:53 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:53 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0eab0195-f01e-0015-27e5-1aa35a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160053Z-17db6f7c8cfg4bg8ayn51tpsz800000000ng00000000vsw7 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:53 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49808	13.107.246.45	443	3716	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:00:54 UTC	418	OUT	GET /shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg HTTP/1.1 Host: aadcdn.msauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-10 16:00:54 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:00:54 GMT Content-Type: image/svg+xml Content-Length: 621 Connection: close Cache-Control: public, max-age=31536000 Content-Encoding: gzip Last-Modified: Wed, 24 May 2023 10:11:49 GMT ETag: 0x8DB5C3F49ED96E0 x-ms-request-id: 0eab0195-f01e-0015-27e5-1aa35a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * x-azure-ref: 20241010T160054Z-185b7d577bdfx2dd0gsb231cq000000002fg000000015hn1 x-fd-int-roxy-purgeid: 4554691 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:00:54 UTC	621	IN	Data Raw: 1f 8b 08 00 00 00 00 00 04 00 7d 55 4d 6f 22 31 0c fd 2b a3 d9 ab 93 c9 f7 47 3b 20 cd 9e 38 6c af 1c b8 4d 0b 05 24 0a 55 19 41 57 ab fe f7 b5 93 a0 55 61 58 0d d8 60 27 ef 3d db 09 b4 c7 d3 ba fa 7c db ed 8f 93 7a 33 0c ef 0f 4d 73 3e 9f f9 59 f3 c3 c7 ba 51 42 88 06 57 d4 d5 79 bb 1c 36 93 da 84 ba da ac b6 eb cd 90 3f 9f b6 ab f3 cf c3 e7 a4 16 95 a8 4c c0 57 3d 6d 97 ab d7 e3 b4 3d 0e bf 77 ab 29 ef ff bc 6e 77 bb 87 fd 61 bf 7a fc e2 cf f9 db 0f 23 e8 79 fc 6a 9b bc ac 6d f2 a6 8f d5 cb 50 bd ec fa 23 ca e9 ef b1 36 d3 f6 bd 1f 36 97 75 cf 75 b5 9c d4 4f 46 80 56 dc fa 30 37 62 a6 d5 5c bb 99 0a 73 ad 66 ca cc 55 e0 de b9 4e 0a ee 42 84 e2 04 3e 12 64 04 2d 7a 0c a5 78 89 32 cb ad f1 4c 72 0b 52 72 29 dc c5 e5 ac e2 4a 46 cc 7a 19 3b 4c 68 af a1 b8 Data Ascii: }UMo"1+G; 8lM$UAWUaX`'=\|z3Ms>YQBWy6?LW=m=w)nwaz#yjmP#66uuOFV07b\sfUNB>d-zx2LrRr)JFz;Lh

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49810	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:25 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:25 UTC	540	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:25 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Wed, 09 Oct 2024 03:56:29 GMT ETag: "0x8DCE8165B436280" x-ms-request-id: 933bb64d-501e-00a3-36e1-1ac0f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160125Z-17db6f7c8cfvzwz27u5rnq9kpc00000000u0000000013k5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:25 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-10 16:01:25 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49813	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:26 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:26 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 971a1148-a01e-000d-48cd-1ad1ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160126Z-17db6f7c8cffjrz2m4352snqkw0000000120000000004mqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.4	49812	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:26 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:26 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 38350f62-a01e-0021-1402-1a814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160126Z-185b7d577bdwmw4ckbc4ywwmwg000000024g000000012xu6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49811	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:26 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:26 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: bd7a82b2-401e-005b-4d28-1a9c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160126Z-185b7d577bdqh8w7ruf4kwucmw00000002g000000000h3zu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49815	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:26 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:26 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 5e770fdc-201e-0033-0e74-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160126Z-185b7d577bdwmw4ckbc4ywwmwg00000002400000000153dw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49814	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:26 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:26 GMT Content-Type: text/xml Content-Length: 1000 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB097AFC9" x-ms-request-id: 96b96e33-b01e-003d-2de3-1ad32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160126Z-17db6f7c8cf5mtxmr1c51513n000000000r0000000012tdd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	1000	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 31 30 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 32 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 52 65 73 75 6d 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 49 20 54 3d 22 33 22 20 49 3d 22 33 30 73 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 35 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120100" V="3" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <A T="2" E="TelemetryResume" /> <TI T="3" I="30s" /> <R T="4" R="120100" /> <TH T="5">

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49820	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:27 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:27 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: ed02cc85-901e-0015-15f6-19b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160127Z-185b7d577bdd97twt8zr6y8zrg00000002vg00000000ak9s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49816	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:27 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:27 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: db47d9da-201e-0096-57d7-19ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160127Z-185b7d577bdd97twt8zr6y8zrg00000002ug00000000eyqm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49817	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:27 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:27 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 6aeebda2-001e-008d-31ea-1ad91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160127Z-17db6f7c8cfnqpbkckdefmqa4400000000fg00000000p572 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49818	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:27 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:27 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 1633ae45-701e-006f-7504-1aafc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160127Z-185b7d577bdqh8w7ruf4kwucmw00000002kg000000002h1p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49819	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:27 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:27 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:27 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: c77ee0be-a01e-0032-0c24-1b1949000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160127Z-17db6f7c8cfg4bg8ayn51tpsz800000000r000000000f9nu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:27 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49821	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:28 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:28 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 3f94a801-101e-007a-28fa-19047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160128Z-185b7d577bdhgg84qrpnm2d6w000000002pg0000000062vv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:29 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49822	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:28 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:28 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 14c2f8e7-301e-0000-27cc-19eecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160128Z-185b7d577bdvdf6b7wzrpm3w2w00000002e0000000005m1r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:29 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.4	49823	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:28 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: b3ad5e0b-501e-000a-1fe3-1a0180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160128Z-17db6f7c8cfvzwz27u5rnq9kpc00000000u0000000013kkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49824	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:28 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:29 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:28 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 4a155f70-001e-0017-2dd7-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160128Z-17db6f7c8cf5mtxmr1c51513n000000000pg00000001bkqu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:29 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49825	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:29 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:29 UTC	491	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:29 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 458f517b-301e-000c-2fe6-1a323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160129Z-17db6f7c8cffjrz2m4352snqkw000000012g00000000235u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:01:29 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49827	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:29 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:29 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: f907bcfc-101e-007a-11f5-1a047e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160129Z-17db6f7c8cfkzc2r8tan3gsa7n00000000m000000000yy02 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49826	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:29 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:29 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: e456ac6c-b01e-0097-6bbf-1a4f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160129Z-17db6f7c8cfnqpbkckdefmqa4400000000q0000000009xwr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49828	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:29 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:29 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: b85ce019-d01e-0028-4fe2-1a7896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160129Z-17db6f7c8cfrbg6x0qcg5vwtus00000000vg000000013ddw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49830	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:30 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:30 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: a705c86c-801e-0078-3b70-1abac6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160130Z-185b7d577bdhgg84qrpnm2d6w000000002n000000000f193 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49832	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:30 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:30 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 77080ea6-601e-003e-13e1-1a3248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160130Z-17db6f7c8cfqxt4wrzg7st2fm800000000rg00000000k52c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49833	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:30 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:30 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 94af937e-501e-0047-50ca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160130Z-17db6f7c8cf5mtxmr1c51513n000000000tg00000000p1ax x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.4	49831	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:30 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:30 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:30 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 837be9b2-101e-0046-5ec9-1991b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160130Z-185b7d577bdqh8w7ruf4kwucmw00000002m00000000000z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:30 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49836	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:31 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:31 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: b59689ad-601e-005c-3fe1-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160131Z-17db6f7c8cfvzwz27u5rnq9kpc00000000y000000000fubr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:31 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49837	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:31 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:31 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 21d4d58c-201e-0051-64d1-197340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160131Z-185b7d577bdqh8w7ruf4kwucmw00000002kg000000002het x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:31 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49838	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:31 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:31 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 5007ca28-801e-00a0-7d20-1b2196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160131Z-17db6f7c8cfnqpbkckdefmqa4400000000q0000000009y0t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:31 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49829	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:31 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:31 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:31 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: aa894e1a-201e-0000-7cf8-19a537000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160131Z-185b7d577bdt2k4f7f9nr1pp7s00000002e0000000005215 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:31 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49835	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:31 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:31 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: a5450727-001e-0079-3380-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160131Z-185b7d577bdt2k4f7f9nr1pp7s00000002d0000000009zxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49839	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:32 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:32 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: 8cee974c-001e-005a-2e33-1ac3d0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160132Z-185b7d577bdt2k4f7f9nr1pp7s000000029000000000y1xw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49840	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:32 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:32 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 935479ee-801e-008f-6f7b-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160132Z-185b7d577bd8m52vbwet1cqbbw00000002qg0000000139w5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49841	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:32 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:32 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: f30ac50d-201e-0033-27d7-1ab167000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160132Z-17db6f7c8cf4g2pjavqhm24vp400000000sg00000000ys6a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49842	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:32 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:32 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 1507c9f1-d01e-007a-72eb-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160132Z-17db6f7c8cfnqpbkckdefmqa4400000000p000000000frwb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49843	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:32 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:32 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:32 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: c832ddd9-b01e-0084-55ca-1ad736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160132Z-17db6f7c8cfnqpbkckdefmqa4400000000p000000000frxn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:32 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	62115	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a9a22b8f-501e-007b-21d3-195ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-185b7d577bdxdkz6n7f63e388000000002d0000000010tqz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:33 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	62116	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 67f4a132-701e-0021-11f5-193d45000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-185b7d577bdqh8w7ruf4kwucmw00000002k0000000005d65 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:33 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	62114	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 30f6abec-501e-005b-072b-1ad7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-17db6f7c8cfkzc2r8tan3gsa7n00000000p000000000wskz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:33 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	62117	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:33 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: df49ad61-f01e-0085-3604-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-185b7d577bd8m52vbwet1cqbbw00000002q0000000015say x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:33 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	62121	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 65388d65-201e-0051-79ef-1a7340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-17db6f7c8cfdpvbpevek8sv5g400000000gg000000007ebx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:34 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	62120	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: ecc6c3cc-f01e-0003-1f2f-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-185b7d577bdwmw4ckbc4ywwmwg000000023g000000017n5k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:34 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	62122	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:33 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:33 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: de1f8e53-401e-0064-5dfb-1954af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160133Z-185b7d577bdqh8w7ruf4kwucmw00000002hg00000000883x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:34 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	62123	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:34 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:34 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 47cb7b1a-f01e-003f-4282-1ad19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160134Z-185b7d577bdxdkz6n7f63e388000000002gg00000000czh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:34 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	62118	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:34 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:34 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:34 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 49fa3939-001e-0017-20cd-1a0c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160134Z-17db6f7c8cffjrz2m4352snqkw0000000120000000004nb2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:34 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	62125	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:35 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:35 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: 725817be-301e-0052-7ede-1a65d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160135Z-17db6f7c8cfnqpbkckdefmqa4400000000q0000000009yb1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:35 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	62126	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:35 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:35 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7be0c3dd-601e-0084-696d-1a6b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160135Z-185b7d577bdhgg84qrpnm2d6w000000002q0000000003b3f x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:35 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	62127	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:35 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:35 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: acd8be42-501e-000a-16f9-190180000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160135Z-185b7d577bdvdf6b7wzrpm3w2w00000002d000000000avz6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:35 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	62128	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:35 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:35 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:35 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: 06589d36-d01e-0065-18bf-1ab77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160135Z-17db6f7c8cfnqpbkckdefmqa4400000000fg00000000p68n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:35 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	62130	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 4508f1f3-f01e-0096-78e2-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-17db6f7c8cfdpvbpevek8sv5g400000000g0000000007c99 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	62132	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 24993946-c01e-008e-55d7-1a7381000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-17db6f7c8cf5mtxmr1c51513n000000000x00000000027gs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	62131	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 0d368ba2-b01e-003d-016a-1ad32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-185b7d577bdhgg84qrpnm2d6w000000002ng00000000bzaf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	62133	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 5d72a51a-801e-008f-7fe1-1a2c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-17db6f7c8cfkzc2r8tan3gsa7n00000000q000000000r7xd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	62124	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 72dafb48-001e-0079-44ea-1a12e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-17db6f7c8cfbtxhfpq53x2ehdn00000000gg000000009ks1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	62134	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:36 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: 64ee2c34-901e-0048-70e2-1ab800000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-17db6f7c8cf4g2pjavqhm24vp400000000tg00000000t78u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	62136	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:36 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95c9d568-c01e-00a1-6afa-197e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160136Z-185b7d577bdt2k4f7f9nr1pp7s00000002c000000000f0n7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	62135	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b9724e67-901e-00ac-7bd7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-17db6f7c8cfbtxhfpq53x2ehdn00000000pg000000007mv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	62137	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 150221b2-d01e-007a-13e9-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-17db6f7c8cfqxt4wrzg7st2fm800000000m0000000016kk6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	62138	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: 2f48674a-001e-00a2-5d77-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-185b7d577bdwmw4ckbc4ywwmwg000000029g000000007r1e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	62139	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: fed7985d-c01e-0034-3cd8-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-17db6f7c8cfrbg6x0qcg5vwtus0000000110000000008txn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	62140	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:37 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: a45e7bac-201e-003c-72f3-1a30f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-17db6f7c8cf4g2pjavqhm24vp400000000u000000000pxem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:37 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	62141	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:37 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:37 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: b3584e95-501e-0029-5500-1bd0b8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160137Z-17db6f7c8cfg4bg8ayn51tpsz800000000sg00000000800n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	62142	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:38 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:38 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e64af527-401e-0015-1bcc-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160138Z-17db6f7c8cfrbg6x0qcg5vwtus00000000wg00000000y8an x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	62143	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:38 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0f8fe9c7-e01e-0020-59f9-19de90000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160138Z-185b7d577bdhgg84qrpnm2d6w000000002ng00000000bzfw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	62144	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:38 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:38 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 0e999b2a-201e-003f-411c-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160138Z-185b7d577bdwmw4ckbc4ywwmwg000000029g000000007r3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	62145	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:38 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:38 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 94508d5b-e01e-0052-6824-1ad9df000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160138Z-17db6f7c8cf5mtxmr1c51513n000000000ug00000000g9qz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	62146	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:38 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:38 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:38 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: 5dd409ef-301e-0099-0e1e-1b6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160138Z-17db6f7c8cfg4bg8ayn51tpsz800000000q000000000ntdh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:38 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	62148	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:39 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:39 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: 5c01f27a-b01e-0070-0a32-1a1cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160139Z-185b7d577bdqh8w7ruf4kwucmw00000002bg000000018hxc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:39 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	62151	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:39 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:39 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 2c65b6c1-101e-0079-26fb-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160139Z-185b7d577bdwmw4ckbc4ywwmwg00000002b00000000001s2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:39 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	62147	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:39 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:39 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 0e570907-201e-003f-4105-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160139Z-185b7d577bdwmw4ckbc4ywwmwg000000025000000000zacp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:39 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	62149	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:39 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:39 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 1fc8d475-a01e-0053-6f27-1a8603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160139Z-185b7d577bdx4h6cdqr6y962uw00000001x0000000010551 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:39 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	62150	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:39 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:39 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:39 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: c2e765f5-401e-0083-7b83-1a075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160139Z-185b7d577bdwmw4ckbc4ywwmwg000000023g000000017nm8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:39 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	62153	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:40 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:40 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: b5702fc7-501e-0047-59e6-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160140Z-17db6f7c8cf4g2pjavqhm24vp400000000rg000000014z9e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:40 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	62155	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:40 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:40 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: 7d3f2e15-101e-00a2-5aca-1a9f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160140Z-17db6f7c8cfnqpbkckdefmqa4400000000mg00000000mtv6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:40 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	62152	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:40 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 539cbafa-f01e-005d-6c8c-1a13ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160140Z-185b7d577bdfx2dd0gsb231cq000000002g0000000013hrq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	62154	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:40 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:40 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: a40a7ce5-701e-0050-3670-1a6767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160140Z-185b7d577bdx4h6cdqr6y962uw000000020g00000000eq1q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:40 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	62156	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:40 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:40 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:40 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: ed0fdcd4-901e-0015-70fb-19b284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160140Z-185b7d577bd8m52vbwet1cqbbw00000002t000000000ryeb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:40 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	62159	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:41 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:41 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: a296851e-501e-0035-4528-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160141Z-185b7d577bdqh8w7ruf4kwucmw00000002k0000000005e29 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:41 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	62160	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:41 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:41 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:41 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 94afa4f1-501e-0047-0aca-1ace6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160141Z-17db6f7c8cfrbg6x0qcg5vwtus000000011g00000000616w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:41 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	62157	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:41 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:41 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: 67a092be-301e-0099-76e2-1a6683000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160141Z-17db6f7c8cfqxt4wrzg7st2fm800000000qg00000000rma7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:41 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	62158	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:41 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:41 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:41 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: c078b21e-101e-0034-5333-1a96ff000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160141Z-185b7d577bdt2k4f7f9nr1pp7s00000002b000000000n1fm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:41 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	62162	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:42 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:42 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 99b3acd6-c01e-0046-32fd-192db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160142Z-185b7d577bdxdkz6n7f63e388000000002b000000001bw88 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:42 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	62163	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:42 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:42 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 8957210b-901e-005b-0df7-1a2005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160142Z-17db6f7c8cf4g2pjavqhm24vp400000000ug00000000kyem x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:42 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	62164	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:42 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:42 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:42 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 7fefe6fd-f01e-0096-2e74-1a10ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160142Z-185b7d577bdwmw4ckbc4ywwmwg0000000290000000009rvx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:42 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	62161	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:42 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:42 UTC	470	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:42 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: f4b6e6ad-001e-00a2-4de9-1ad4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160142Z-17db6f7c8cf7s6chrx36act2pg00000000y000000000525u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:42 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	62165	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:43 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:43 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 2eee43c6-d01e-0066-0203-1bea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160143Z-17db6f7c8cf7s6chrx36act2pg00000000sg000000011a94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:43 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	62167	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:43 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:43 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 61b77f63-201e-003f-4681-1a6d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160143Z-185b7d577bdxdkz6n7f63e388000000002g000000000ffxf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:43 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	62166	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:43 UTC	191	OUT	GET /rules/rule90401v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:43 GMT Content-Type: text/xml Content-Length: 1250 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE4487AA" x-ms-request-id: 9a7d960e-501e-00a0-6dcd-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160143Z-17db6f7c8cfkzc2r8tan3gsa7n00000000ug0000000021dh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:43 UTC	1250	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 39 30 34 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 53 61 6d 70 6c 69 6e 67 50 6f 6c 69 63 79 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 4d 65 74 61 64 61 74 61 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="90401" V="3" DC="ESM" EN="Office.Telemetry.SamplingPolicy" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" DL="A" DCa="PSP PSU" xmlns=""> <RIS> <RI N="Metadata" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	62169	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:43 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:43 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: e0a8bc36-801e-00ac-722f-1afd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160143Z-185b7d577bdt2k4f7f9nr1pp7s00000002dg000000007a38 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:43 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	62168	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:43 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:43 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: 588a334f-a01e-0098-1acf-1a8556000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160143Z-17db6f7c8cfnqpbkckdefmqa4400000000h000000000nttv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	62170	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:44 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:44 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: eb635e02-f01e-00aa-3c28-1a8521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160144Z-185b7d577bdwmw4ckbc4ywwmwg00000002b0000000000238 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	62171	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:44 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: d1236033-501e-008f-33ea-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160144Z-17db6f7c8cf5mtxmr1c51513n000000000r0000000012v4b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	62173	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:44 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:44 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: eccfae73-f01e-0003-4131-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160144Z-185b7d577bdwmw4ckbc4ywwmwg000000027000000000n41t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	62172	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:44 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: de6efc93-701e-001e-3381-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160144Z-185b7d577bdt2k4f7f9nr1pp7s000000029000000000y33m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	62174	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:44 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:44 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:44 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: e6504dd7-401e-0015-6cce-1a0e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160144Z-17db6f7c8cfkzc2r8tan3gsa7n00000000qg00000000pkx8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:44 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	62175	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:45 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: de2b4a30-201e-0071-54e2-1aff15000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160145Z-17db6f7c8cffjrz2m4352snqkw00000000w000000000cvf4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:45 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	62178	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:45 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: efbad5a3-301e-0000-2ec0-1aeecc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160145Z-17db6f7c8cffjrz2m4352snqkw000000010g00000000cmx2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:45 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	62177	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:45 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: f659b87d-a01e-0002-04d9-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160145Z-17db6f7c8cf4g2pjavqhm24vp400000000v000000000gryg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:45 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	62176	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:45 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 36ec684a-f01e-0052-24da-1a9224000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160145Z-17db6f7c8cfkzc2r8tan3gsa7n00000000ug0000000021kv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:45 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.4	62179	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:45 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:45 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 54013aee-c01e-0079-7db5-19e51a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160145Z-185b7d577bdd97twt8zr6y8zrg00000002tg00000000nbe8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:45 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	62180	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:45 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 60f9f18d-f01e-003f-6af9-19d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-185b7d577bdfx2dd0gsb231cq000000002fg000000015ptb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	62183	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: fd1eaa3c-c01e-0034-22e2-1a2af6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-17db6f7c8cfrbg6x0qcg5vwtus00000000z000000000mgen x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	62182	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: ed34bfa3-901e-0015-1f08-1ab284000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-185b7d577bdwmw4ckbc4ywwmwg0000000290000000009s4h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	62181	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: e8fbd797-601e-005c-7ee6-1af06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-17db6f7c8cfbtxhfpq53x2ehdn00000000hg000000009v6u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	62184	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 35289574-d01e-00ad-2923-1be942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-17db6f7c8cfdpvbpevek8sv5g400000000hg0000000074vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.4	62186	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: fa68fd7e-e01e-0099-0ae2-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-17db6f7c8cffjrz2m4352snqkw00000000zg00000000cet2 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	62188	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: fbf87e7d-e01e-0099-1431-1ada8a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-185b7d577bdt2k4f7f9nr1pp7s00000002dg000000007af2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	62185	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:46 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 8d697180-901e-005b-33fa-192005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-185b7d577bdwmw4ckbc4ywwmwg000000028000000000fbv7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:46 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	62187	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:46 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:47 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:46 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 5892b05f-f01e-0085-23d9-1a88ea000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160146Z-17db6f7c8cfbtxhfpq53x2ehdn00000000p0000000009t3x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:47 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	62192	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:47 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:47 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: a032a6e1-c01e-002b-15e5-1a6e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160147Z-17db6f7c8cfbtxhfpq53x2ehdn00000000kg00000000afsh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	62191	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:47 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: d62ed77e-d01e-0049-25d4-19e7dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-185b7d577bdhgg84qrpnm2d6w000000002hg00000000vg08 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	62193	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:47 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: 03f8bcf3-701e-0098-27e6-1a395f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-17db6f7c8cf5mtxmr1c51513n000000000s000000000x4vw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	62190	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:47 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:47 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: 05046913-601e-000d-6fd8-1a2618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160147Z-17db6f7c8cfvzwz27u5rnq9kpc00000000u0000000013pa6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	62198	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:48 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: 6411c5a0-901e-0083-0ae3-1abb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-17db6f7c8cfdpvbpevek8sv5g400000000fg000000007btv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	62196	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:48 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 0b77caee-501e-00a0-3370-1a9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-185b7d577bdx4h6cdqr6y962uw00000001yg00000000txc0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	62195	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:48 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 7318af80-d01e-002b-2bb0-1925fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-185b7d577bdqh8w7ruf4kwucmw00000002fg00000000m584 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	62197	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:48 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:48 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:48 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 1c06004d-d01e-005a-0ee5-1a7fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160148Z-17db6f7c8cf5mtxmr1c51513n000000000u000000000m094 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:48 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	62200	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:49 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:49 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: 842b74fa-501e-008c-2f04-1acd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160149Z-185b7d577bdd97twt8zr6y8zrg00000002q0000000018h0u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:49 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	62199	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:49 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:49 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: ec3ff346-f01e-0003-5304-1a4453000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160149Z-185b7d577bdt2k4f7f9nr1pp7s00000002c000000000f1pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:49 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	62202	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:49 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:49 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:49 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 85276eba-d01e-007a-7a70-1af38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160149Z-185b7d577bdwmw4ckbc4ywwmwg00000002a0000000004xmy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:49 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	62203	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:50 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:50 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 03a639d1-101e-008d-40f2-1a92e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160150Z-17db6f7c8cfnqpbkckdefmqa4400000000q0000000009zmc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:50 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	62205	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:50 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:50 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: f5856668-a01e-0002-568e-1a5074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160150Z-185b7d577bdt2k4f7f9nr1pp7s00000002dg000000007ax1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:50 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	62189	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:50 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:50 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:50 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: d113afee-501e-008f-14e4-1a9054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160150Z-17db6f7c8cfqxt4wrzg7st2fm800000000q000000000uexh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:50 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	62206	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:51 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:51 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: aec7f75a-c01e-00a2-6574-1a2327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160151Z-185b7d577bd8m52vbwet1cqbbw00000002t000000000rz4x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:51 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	62207	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:51 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:51 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: e2476cc5-001e-00ad-1ecd-1a554b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160151Z-17db6f7c8cfbtxhfpq53x2ehdn00000000kg00000000ag1s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:51 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	62208	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:51 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:51 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: ecb94678-501e-0035-51d8-1ac923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160151Z-17db6f7c8cfrbg6x0qcg5vwtus000000011g0000000062e3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:51 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	62209	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:51 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:51 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: 2c62a3b1-101e-0079-3ffa-195913000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160151Z-185b7d577bdxdkz6n7f63e388000000002f000000000q1kp x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:51 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	62210	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:51 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:51 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:51 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: fd184e04-b01e-0021-688c-1acab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160151Z-185b7d577bdx4h6cdqr6y962uw0000000230000000001h98 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:51 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	62211	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:52 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:52 UTC	563	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:52 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: c01deb01-701e-001e-0a34-1af5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160152Z-185b7d577bdt2k4f7f9nr1pp7s00000002d000000000a28d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	62212	13.107.246.67	443

Timestamp	Bytes transferred	Direction	Data
2024-10-10 16:01:52 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-10 16:01:52 UTC	584	IN	HTTP/1.1 200 OK Date: Thu, 10 Oct 2024 16:01:52 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: b9726785-901e-00ac-76d7-1ab69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241010T160152Z-17db6f7c8cffjrz2m4352snqkw00000000yg00000000cwqd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-10 16:01:52 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Target ID:	0
Start time:	12:00:26
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:00:28
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=2248,i,618462383061727548,14457692398767864436,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:00:31
Start date:	10/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://login.microsoftonline.com/redeem?rd=https%3a%2f%2finvitations.microsoft.com%2fredeem%2f%3ftenant%3df4a12867-922d-4b9d-bb85-9ee7898512a0%26user%3d0351806c-96eb-4cc1-87c1-6d9b19965a3a%26ticket%3dfzOvu7%25252b3x%25252bn7jW3wffZVq3DANcr4XbiLw1VboSs23%25252b0%25253d%26ver%3d2.0"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\LICENSE

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\_metadata\verified_contents.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.fingerprint

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\manifest.json

C:\Windows\SystemTemp\chrome_PuffinComponentUnpacker_BeginUnzipping3652_961314998\sets.json

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123