Edit tour

Windows Analysis Report
http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmd

Overview

General Information

Sample URL:	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX
Analysis ID:	1538400
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4940 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2200,i,14995416763360869801,3715102301362132616,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /setup/ws/1/validate?clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1Host: setup.icloud.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.icloud.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.icloud.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenX-Bst-Request-Id: kLtzWj:4kr:1969557X-Bst-Info: ch=req,t=1729489309,h=45b,p=1_2526,r=_internal_MustAuthRule_,v=7.11.56Content-Type: text/html; charset=utf-8Pragma: No-cacheCache-Control: No-cacheContent-Length: 440Data Raw: 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 72 65 70 6f 72 74 61 62 6c 65 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 68 61 73 20 72 65 66 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 55 52 4c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 0a 20 20 20 20 61 20 70 61 67 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 6e 6f 74 69 66 79 69 6e 67 20 79 6f 75 20 6f 66 20 74 68 69 73 20 65 76 65 6e 74 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0a 20 20 20 20 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 68 79 62 72 69 64 2d 77 65 62 2e 67 6c 6f 62 61 6c 2e 62 6c 61 63 6b 73 70 69 64 65 72 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6e 61 6d 65 3a 20 62 6c 6f 63 6b 74 72 61 6e 73 70 61 72 65 6e 74 72 6f 61 6d 69 6e 67 74 65 6d 70 6c 61 74 65 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4d 61 74 63 68 65 64 20 6f 6e 20 72 75 6c 65 20 27 5f 69 6e 74 65 72 6e 61 6c 5f 4d 75 73 74 41 75 74 68 52 75 6c 65 5f 27 3c 2f 70 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>Unreportable error</title> </head> <body> <p>The proxy has refused to serve the following URL but does not have a page configured for notifying you of this event. Please contact your administrator. <p>URL: http://hybrid-web.global.blackspider.com/favicon.ico</p> <p>Notification name: blocktransparentroamingtemplate</p> <p>Matched on rule '_internal_MustAuthRule_'</p> </body></html>
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenX-Bst-Request-Id: kLtzWj:4kr:1969586X-Bst-Info: ch=req,t=1729489324,h=45b,p=1_2526,r=_internal_MustAuthRule_,v=7.11.56Content-Type: text/html; charset=utf-8Pragma: No-cacheCache-Control: No-cacheContent-Length: 440Data Raw: 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 72 65 70 6f 72 74 61 62 6c 65 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 68 61 73 20 72 65 66 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 55 52 4c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 0a 20 20 20 20 61 20 70 61 67 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 6e 6f 74 69 66 79 69 6e 67 20 79 6f 75 20 6f 66 20 74 68 69 73 20 65 76 65 6e 74 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0a 20 20 20 20 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 68 79 62 72 69 64 2d 77 65 62 2e 67 6c 6f 62 61 6c 2e 62 6c 61 63 6b 73 70 69 64 65 72 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6e 61 6d 65 3a 20 62 6c 6f 63 6b 74 72 61 6e 73 70 61 72 65 6e 74 72 6f 61 6d 69 6e 67 74 65 6d 70 6c 61 74 65 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4d 61 74 63 68 65 64 20 6f 6e 20 72 75 6c 65 20 27 5f 69 6e 74 65 72 6e 61 6c 5f 4d 75 73 74 41 75 74 68 52 75 6c 65 5f 27 3c 2f 70 3e 0a 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html> <head> <title>Unreportable error</title> </head> <body> <p>The proxy has refused to serve the following URL but does not have a page configured for notifying you of this event. Please contact your administrator. <p>URL: http://hybrid-web.global.blackspider.com/favicon.ico</p> <p>Notification name: blocktransparentroamingtemplate</p> <p>Matched on rule '_internal_MustAuthRule_'</p> </body></html>

Source: chromecache_130.1.dr, chromecache_166.1.dr	String found in binary or memory: http://baris.aydinoglu.info)
Source: chromecache_130.1.dr, chromecache_166.1.dr	String found in binary or memory: http://barisaydinoglu.github.com/Detectizr/
Source: chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	String found in binary or memory: http://canjs.com/
Source: chromecache_144.1.dr, chromecache_103.1.dr	String found in binary or memory: http://feross.org
Source: chromecache_146.1.dr	String found in binary or memory: http://hybrid-web.global.blackspider.com/favicon.ico
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQ
Source: chromecache_115.1.dr, chromecache_145.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-ie6.min.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/bootstrap/css/ie.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/head.js
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/ie6_joined_classes.js
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/iepngfix/blank.gif
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/iepngfix/jquery.iepngfix.js
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/2020/notification_page_logo_145x35.png
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/empty.js
Source: chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/icons60/success.png
Source: chromecache_179.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/icons60/warning.png
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/jquery-1.4.2.min.js
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/notification-ie6.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/notification.css
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: http://www.mailcontrol.com/http-resources/notification-pages/respond.src.js
Source: chromecache_141.1.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_115.1.dr, chromecache_138.1.dr, chromecache_145.1.dr, chromecache_161.1.dr	String found in binary or memory: https://appleid.cdn-apple.com/appleauth/static/jsapi/acknowledgements.txt
Source: chromecache_144.1.dr, chromecache_103.1.dr	String found in binary or memory: https://feross.org/opensource
Source: chromecache_142.1.dr, chromecache_150.1.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_142.1.dr, chromecache_150.1.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE
Source: chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_158.1.dr, chromecache_114.1.dr	String found in binary or memory: https://www.icloud.com/applications/calendar/2426Project39/en-us/acknowledgements.txt
Source: chromecache_179.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.icloud.com/calendar/event/#t=2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZR
Source: chromecache_174.1.dr	String found in binary or memory: https://www.icloud.com/icloud_logo/icloud_logo.png
Source: chromecache_104.1.dr, chromecache_172.1.dr, chromecache_149.1.dr, chromecache_100.1.dr, chromecache_128.1.dr, chromecache_177.1.dr, chromecache_151.1.dr, chromecache_123.1.dr	String found in binary or memory: https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 49996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.253.45:443 -> 192.168.2.4:49809 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@18/143@22/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2200,i,14995416763360869801,3715102301362132616,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2200,i,14995416763360869801,3715102301362132616,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://jquery.org/license	0%	URL Reputation	safe
https://feross.org/opensource	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
http://feross.org	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	Virustotal		Browse
http://www.mailcontrol.com/http-resources/notification-pages/icons60/warning.png	0%	Virustotal		Browse
http://www.mailcontrol.com	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
hybrid-web.global.blackspider.com	85.115.56.150	true	false	unknown
calendarws.fe2.apple-dns.net	17.248.209.73	true	false	unknown
setup.fe2.apple-dns.net	17.248.209.70	true	false	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
gateway.fe2.apple-dns.net	17.248.209.69	true	false	unknown
ckdatabasews.fe2.apple-dns.net	17.248.209.70	true	false	unknown
cvws.apple-dns.net	17.248.209.42	true	false	unknown
feedbackws.fe2.apple-dns.net	17.248.209.68	true	false	unknown
cluster-aa.mailcontrol.com	85.115.52.220	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	unknown
setup.icloud.com	unknown	unknown	false	unknown
feedbackws.icloud.com	unknown	unknown	false	unknown
www.mailcontrol.com	unknown	unknown	false	unknown
cvws.icloud-content.com	unknown	unknown	false	unknown
ckdatabasews.icloud.com	unknown	unknown	false	unknown
p110-calendarws.icloud.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://www.mailcontrol.com/http-resources/notification-pages/icons60/warning.png	false	0%, Virustotal, Browse	unknown
https://p110-calendarws.icloud.com/ca/invitereply/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/notification.css	false		unknown
http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css	false		unknown
https://setup.icloud.com/setup/ws/1/validate?clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db	false		unknown
http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/2020/notification_page_logo_145x35.png	false		unknown
http://hybrid-web.global.blackspider.com/favicon.ico	false		unknown
https://feedbackws.icloud.com/reportStats	false		unknown
https://p110-calendarws.icloud.com/ca/inviterequest/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db	false		unknown
http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/icons60/success.png	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/empty.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.apache.org/licenses/LICENSE-2.0	chromecache_115.1.dr, chromecache_145.1.dr	false	0%, Virustotal, Browse	unknown
http://www.mailcontrol.com	chromecache_179.1.dr, chromecache_156.1.dr	false	0%, Virustotal, Browse	unknown
http://baris.aydinoglu.info)	chromecache_130.1.dr, chromecache_166.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/notification-ie6.css	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/iepngfix/blank.gif	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/jquery-1.4.2.min.js	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
https://github.com/zloirock/core-js	chromecache_142.1.dr, chromecache_150.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/ie6_joined_classes.js	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://barisaydinoglu.github.com/Detectizr/	chromecache_130.1.dr, chromecache_166.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/iepngfix/jquery.iepngfix.js	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
https://github.com/zloirock/core-js/blob/v3.36.0/LICENSE	chromecache_142.1.dr, chromecache_150.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/head.js	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQ	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://canjs.com/	chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	false		unknown
https://jquery.org/license	chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	false	URL Reputation: safe	unknown
https://feross.org/opensource	chromecache_144.1.dr, chromecache_103.1.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_138.1.dr, chromecache_113.1.dr, chromecache_161.1.dr, chromecache_148.1.dr	false	URL Reputation: safe	unknown
http://www.mailcontrol.com/http-resources/bootstrap/css/ie.css	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://www.videolan.org/x264.html	chromecache_141.1.dr	false		unknown
http://www.mailcontrol.com/http-resources/notification-pages/respond.src.js	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown
http://feross.org	chromecache_144.1.dr, chromecache_103.1.dr	false	URL Reputation: safe	unknown
http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-ie6.min.css	chromecache_179.1.dr, chromecache_156.1.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
85.115.56.150	hybrid-web.global.blackspider.com	United Kingdom	44444	FORCEPOINT-CLOUD-ASEU	false
17.248.209.73	calendarws.fe2.apple-dns.net	United States	714	APPLE-ENGINEERINGUS	false
17.248.209.70	setup.fe2.apple-dns.net	United States	714	APPLE-ENGINEERINGUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
17.248.209.69	gateway.fe2.apple-dns.net	United States	714	APPLE-ENGINEERINGUS	false
17.248.209.68	feedbackws.fe2.apple-dns.net	United States	714	APPLE-ENGINEERINGUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
17.248.209.42	cvws.apple-dns.net	United States	714	APPLE-ENGINEERINGUS	false
85.115.52.220	cluster-aa.mailcontrol.com	United Kingdom	44444	FORCEPOINT-CLOUD-ASEU	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1538400
Start date and time:	2024-10-21 07:40:40 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 41s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@18/143@22/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 64.233.167.84, 142.250.184.206, 34.104.35.123, 20.109.210.53, 93.184.221.240, 20.3.187.198, 192.229.221.95, 52.165.164.15, 23.215.23.119, 2.23.196.201, 23.215.17.144, 142.250.186.99, 17.32.194.7, 17.32.194.38, 172.217.18.10, 142.250.186.42, 216.58.206.74, 142.250.184.234, 142.250.185.170, 142.250.185.138, 142.250.185.202, 142.250.185.74, 142.250.186.74, 172.217.16.202, 142.250.186.106, 216.58.206.42, 142.250.186.138, 142.250.185.106, 142.250.185.234, 142.250.181.234, 172.217.18.106, 216.58.212.138, 142.250.186.170, 142.250.184.202
Excluded domains from analysis (whitelisted): www.apple.com.edgekey.net.globalredir.akadns.net, azurefd-t-fb-prod.trafficmanager.net, www.icloud.com-v1.edgekey.net, gateway.icloud.com, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, www.apple.com, wu.azureedge.net, idmsa.idms-apple.com.akadns.net, appleid.cdn-apple.com, idmsa.apple.com, clients2.google.com, ocsp.digicert.com, e4478.dscb.akamaiedge.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, e2885.e9.akamaiedge.net, update.googleapis.com, wu-b-net.trafficmanager.net, appleid.cdn-apple.com.edgekey.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.icloud.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, otelrules.azureedge.net, wu.ec.azureedge.net, ctldl.windowsupdate.com, www-cdn.icloud.com.akadns.net, e6858.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65K Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "Analyze", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false }

URL: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqv Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "To view secured document, click here", "prominent_button_name": "Continue to Site", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65K Model: claude-3-haiku-20240307	```json { "brands": [ "Forcepoint" ] }
	```json { "brands": [ "Forcepoint" ] }
URL: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqv Model: claude-3-haiku-20240307	```json { "brands": [ "Forcepoint" ] }
	```json { "brands": [ "Forcepoint" ] }
URL: https://www.icloud.com/calendar/event/#t=2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC&p=p110 Model: claude-3-haiku-20240307	```json { "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "The best place for all your photos, files, notes, mail, and more.", "prominent_button_name": "Sign In", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.icloud.com/calendar/event/#t=2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC&p=p110 Model: claude-3-haiku-20240307	```json { "brands": [ "iCloud" ] }
	```json { "brands": [ "iCloud" ] }
URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "iCloud" ] }
	```json { "brands": [ "iCloud" ] }
URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in with Apple Account", "prominent_button_name": "unknown", "text_input_field_labels": [ "Email or Phone Number" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "contains_trigger_text": true, "trigger_text": "Sign in with Apple Account", "prominent_button_name": "unknown", "text_input_field_labels": [ "Email or Phone Number" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Apple" ] }
	```json { "brands": [ "Apple" ] }
URL: https://www.icloud.com/ Model: claude-3-haiku-20240307	```json { "brands": [ "Apple" ] }
	```json { "brands": [ "Apple" ] }
URL: https://www.icloud.com/ Model: gpt-4o	```json{ "legit_domain": "icloud.com", "classification": "wellknown", "reasons": [ "The URL 'www.icloud.com' matches the legitimate domain name for Apple's iCloud service.", "Apple is a well-known brand, and 'icloud.com' is the official domain for their cloud services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or Phone Number' are typical for a login page associated with cloud services like iCloud." ], "riskscore": 1}
URL: www.icloud.com Brands: Apple Input Fields: Email or Phone Number
URL: https://www.icloud.com/ Model: gpt-4o	```json{ "legit_domain": "icloud.com", "classification": "wellknown", "reasons": [ "The URL 'www.icloud.com' matches the legitimate domain name for Apple's iCloud service.", "Apple is a well-known brand, and 'icloud.com' is the official domain for its cloud services.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields 'Email or Phone Number' are typical for a login page associated with cloud services like iCloud." ], "riskscore": 1}
URL: www.icloud.com Brands: Apple Input Fields: Email or Phone Number

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	downloaded
Size (bytes):	2958520
Entropy (8bit):	5.4722976239331516
Encrypted:	false
SSDEEP:	49152:Ts9WKWQmDhZf/R7Tb1UPPW+btTxWS5XYBCHUpISN+8cMgV1Tyc0n1OCCY4lxTQY+:T4jmHbV
MD5:	DB3F39499D60B1588EB8B6BF4643FCCE
SHA1:	7A4EDAF3D596EE694A18097BE037533D9019D453
SHA-256:	CBC118E3D56A231AFBB2A9F483C6D367C2DC7C2571B509861D020E7F80A4C81D
SHA-512:	11F0A426CE4BD28AA8A11F34FCBD12DF7CC0E85E945608A907F2FB570EAABDFF842BB75831A3BFB54E816DF3D9656AE58F5548D5162BA09AD8852CBE3001A537
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2364
Entropy (8bit):	4.561836229722971
Encrypted:	false
SSDEEP:	48:cf+1USO7wQUlYvSNamnrbmM+sb1yRBVLb:cfwiwQUlYvSII2tsb1ypLb
MD5:	CC3C17D31CFDA473CA545554C30794AC
SHA1:	B64FA9CF9CBA5BA68567EC8FEA1A229B023F9FFD
SHA-256:	4F70A22F0D4E8ED3F4F2F823F7385328CBAAEDFF0EAE324A51287C3C1CBA4F92
SHA-512:	F89443708E33135A68E8658AF32BD17FB343F4074E094251AA6F103E46E8FE210C41638B88334F9A7527E8D2465F5117C7D3AA10144D60934948738728376F54
Malicious:	false
Reputation:	low
Preview:	"use strict";.(function (){. function isLocStringsScriptTag ( node ) {. return node && . node.tagName === 'SCRIPT' &&. node.type === 'application/json' &&. node.classList.contains('localization_strings');. }. . function parseJSONTextContent ( node ) {. try {. //this may failed if the content of the script tag is still not render.. return JSON.parse(node.textContent);. } catch ( error ) {. return undefined;. }. }. . window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.i18n_legacy = window.idms.app_config.i18n_legacy \|\| [];. . if (!window.idms.localizationStringsObserver) {. var parsedJSONScripts = [];. window.idms.localizationStringsObserver = new MutationObserver(function (mutationList) {. . var found = false;. . for (var i = 0; i < mutationList.length; i++) {. var record = mutationList[i];. . for (var j = 0; j < record.addedNodes.length; j++

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5139
Entropy (8bit):	7.845848077175545
Encrypted:	false
SSDEEP:	96:uQXvOXGhJ0tzNOViyIkMgevg8Xm09S5AevhnMsYG:ufg0t7yyX4BAe+sYG
MD5:	77A3A0B185162C69866163A6EEB0E943
SHA1:	734279F002A37E3D5F7253360DFF61638D0C3846
SHA-256:	322F28A6CD99566089B035E83C4F580504FC5142F62B8C758ECD896121D032ED
SHA-512:	6679A3C8DFF6F2F78D4E3787A02B35A3BB58F0BF9E851D9224BAB3ED0EC65E2144C8F151CA80D7E124709D916EA4C312F2F401CB78BD827116857E111D33228C
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/notification-pages/icons60/warning.png
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118083B0C717926B30" xmpMM:DocumentID="xmp.did:38AF328D63BE11E2BCA885484A8CF26D" xmpMM:InstanceID="xmp.iid:38AF328C63BE11E2BCA885484A8CF26D" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD6D15A33E2068118083FEFAFED61F9F" stRef:documentID="xmp.did:07801174072068118083B0C717926B30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....AIDATx..[.p\.y..w%....Vk...%....L..i..BH.

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47124), with NEL line terminators
Category:	dropped
Size (bytes):	241706
Entropy (8bit):	5.327937354961122
Encrypted:	false
SSDEEP:	3072:gm4cgIKAQa7XwCRPM6naxlBQ/mhhHg/VBymzrgG:+clKXaTwUPmQ/mhhHEzyrG
MD5:	FB9CDEC9DC81C2FC0710CAB9204CFD34
SHA1:	3EC6F4BB754216C3BCEAF077AA2B3E36DAFC19FA
SHA-256:	8E7EAEA42F149031D0A2E4A7B8C3E52824B585B77737E3435DB788E4826694CF
SHA-512:	C1F4F4A5AFCEED38289DDE70D21DD0B792F8F199A0EB8A71DCB8D446C07BF66B0A7FD326C93F3C1FF35C453F6B93AA8B563C1E050B25A8691DED6EB437E044BC
Malicious:	false
Reputation:	low
Preview:	!function(t){var r={};function e(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:n})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,r){if(1&r&&(t=e(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(e.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)e.d(n,o,function(r){return t[r]}.bind(null,o));return n},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},e.p="",e(e.s=849)}([function(t,r,e){var n=e(1),o=e(40).f,i=e(36),a=e(28),u=e(179),c=e(135),s=e(114);t.expo

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	dropped
Size (bytes):	2958520
Entropy (8bit):	5.4722976239331516
Encrypted:	false
SSDEEP:	49152:Ts9WKWQmDhZf/R7Tb1UPPW+btTxWS5XYBCHUpISN+8cMgV1Tyc0n1OCCY4lxTQY+:T4jmHbV
MD5:	DB3F39499D60B1588EB8B6BF4643FCCE
SHA1:	7A4EDAF3D596EE694A18097BE037533D9019D453
SHA-256:	CBC118E3D56A231AFBB2A9F483C6D367C2DC7C2571B509861D020E7F80A4C81D
SHA-512:	11F0A426CE4BD28AA8A11F34FCBD12DF7CC0E85E945608A907F2FB570EAABDFF842BB75831A3BFB54E816DF3D9656AE58F5548D5162BA09AD8852CBE3001A537
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2715)
Category:	downloaded
Size (bytes):	10118
Entropy (8bit):	5.209538250666559
Encrypted:	false
SSDEEP:	192:H1cmz1G9njq7n7hnEwU7RQP15mM0jpgPlW0qtwv6:V/z1Gi7hnEwUXE6
MD5:	2A121974E8149C23333DC1284215EEAD
SHA1:	C19554DCBCE6745703B54CF6B0E675233BCD42B2
SHA-256:	D443397E9D5A2439209607357D92A4AC0C1704C05FD65C8E2B87A5B47C540547
SHA-512:	319E9C2F55AECC9880C3FD539414D72B42503E0175F39927D189DE5A37D82875073407C11EADD6DDCFDE579EDFC9D1F857CDDB7DFF4D5104B3E5217E26AAC714
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/applications/calendar/current/en-us/index.html?rootDomain=www
Preview:	<!DOCTYPE html><html lang="en-us" data-cw-private-path-prefix="" data-cw-private-build-number="2426Project39" data-cw-private-mastering-number="2426B25"><head><meta http-equiv="Content-Security-Policy" content="base-uri 'self' .cdn-apple.com .icloud.com .icloud.com.cn; object-src 'none'; script-src 'self' blob: .icloud.com .icloud.com.cn .apple.com .cdn-apple.com .apple-mapkit.com .apple-cloudkit.com .apple-livephotoskit.com 'sha256-JFJvxqMr7d0c5kvkhpyFwvNHHhwfiIFw0UaFnTp+u9M=' 'sha256-lAQZwmP1ZS8kL2gWEXChopPsE9UYxLaa93qsyyl3s00=' 'sha256-26W8JbT1vQArZ+8F3eitbNZVzh5WonwHlQl29E4pato=' 'sha256-svdOQzSg9T05h6Q3mC/8FCU+2bG3vWTBwdPa+czq+YY=' 'sha256-HenvlWVrAISuwfRzCus0xoCe+m4/jV6vXViy4FodZC8='; style-src 'self' data: 'unsafe-inline' .icloud.com .icloud.com.cn .apple.com .cdn-apple.com; default-src 'none'; child-src 'self' blob:; form-action 'self' .icloud.com .icloud.com.cn; connect-src blob: 'self' data: icloud.com icloud.com.cn .icloud.com .icloud.com.cn .apple.com .c

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 215624, version 1.0
Category:	downloaded
Size (bytes):	215624
Entropy (8bit):	7.9989485398001365
Encrypted:	true
SSDEEP:	6144:z7V3AfjW2JBwuqxw4GJ14Yz2tx91c8YxRwXGs:zBASwii4GJ14m0U8vR
MD5:	9B53803BF8700DBA963BDB71BADC62C0
SHA1:	DD36319DD80C03A90367E48D2086F0B1D94A9A4A
SHA-256:	D42C2920FEE98B6A295697AE4217EE1215EA01C37E2F38887DF42BDB2A1ACA95
SHA-512:	0A9B253B8FB3244B6A409C638F8254EFE2696AFE2388D9137AEF015B61ADA2CAFD4B580216751C68C087EF8FEFEC820FA17629AE9568810385C8833040D62F3C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2
Preview:	wOF2......JH......F...I............................D..f.`...B..l..b.....P....6.$..r..x.. ?meta. ..V. ..k[........sy@......\.:q......~.B..N!.1.>A.j...c.. V.C.Ds.p!..l...U1.oSH.............W..........,,E.......1....11.......b...y!..f.j..Q..jT.e){.._.`..d.F..b..hlX[..Y..0C.b.n.Wm8...>.6...{UX)..u#......t..6B@....".H..T..6.r.]......D..`..}.3,...VK6.).b...b.9D.h[.... B8>.8..C&..;.+....8......2{.R1kjf..X=...\|.....e/.n.<.3..j.[....&.j..v....Y..P&..$n..N...4=.-.,Ez~w.F..U(b'}{?.a.V...;.O9</.p....A.}..TV.UX...A..)g..u.8g...qa...C........c3a...6K.w.~=.%(f......~..=.hP..O..9;..<...Su..]<.2{.#...E....:...p.%.e.>.n.,.%..%;..D?.i.I..}M..x>.6.D...6.j.FPu.......Hr..6.....N..S.i..."...Q"V.b.D..-Q_.;.,i.&.9#.f...._....\~...#.A......MB1Uzb$..F....g...A..0.....6.3..5..32...$.\;.G......}.y.=...EQ.y.<..4i..&eA.k.m.^...)Kauw1....~4..+\b.....M.\.~....{b....{.Z.....o.....G.Y.k............#P^..G%\R..X...t......D..).e.'..).uw...YJo.....KI.WF..&....W.N...z...]..K.:k.

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	88
Entropy (8bit):	4.9929364496525155
Encrypted:	false
SSDEEP:	3:6uh1lF+DrHHWV605jf3DcVAJKtAKx:F1FeqV601DcVAXk
MD5:	4C9A2A97BF692BEFE9AFBAA0693327E3
SHA1:	F9D792D134004B00C3120A61B4352799B8880818
SHA-256:	61E72C504C870B558B89030E0833E9520C76C746D346334C25CEBD0FFDF933E6
SHA-512:	123A04E6F2F67C74477867446BD9048289FB6432E2BA81E83FD0DF7F5B473B357553947D3DF5682FB275E8C3391E06C8A7ADF1A6AB9E416B674CBAD5B10E95E3
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnoYockEE1TRRIFDVuSjeESBQ3byczY?alt=proto
Preview:	CkAKDQ1bko3hGgQIVhgCIAEKLw3byczYGgQISxgCKiIIClIeChQhQC4kIypfLT8mKyUvLCleOig9PBABGP////8P

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6553
Entropy (8bit):	7.907619030791439
Encrypted:	false
SSDEEP:	96:uQDvOg1TFEPDTrIemtPGRNBLXtZlfbumseorEWeUQUtqxmxiGK1:uc1TWPXdmkRHLXflfbuheorEWektqxuG
MD5:	AFA666DB1988CC9CAD27F7614FE05FB9
SHA1:	A164FFB954E6CBDFA73C3C0274C3742A16F940A2
SHA-256:	7990A456B08FD166AFA514C9EA93481EEAE9245308ADD794F6118C0CC17E230F
SHA-512:	2762842092906CF3C6FA2446FAB94F011B76CC0EB0BA62FED8C2573D1806252D5E8C01BB05FDA2CE57290C03107F51D788699DA65E4C5A3C9F6FCA1FFB90FEE2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118083B0C717926B30" xmpMM:DocumentID="xmp.did:40594A7463B511E2BCA885484A8CF26D" xmpMM:InstanceID="xmp.iid:40594A7363B511E2BCA885484A8CF26D" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD6D15A33E2068118083FEFAFED61F9F" stRef:documentID="xmp.did:07801174072068118083B0C717926B30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.A#]....IDATx..yp....=.4..}......\|p..0&b1.&...

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6881
Entropy (8bit):	5.27174468280763
Encrypted:	false
SSDEEP:	96:+AkGLU6RATA6R4Lwxus5GTcp5qw88wSYF8UkGGHwfD86EG:Nkmd6TJCLwvgTuqwaF8Uk1wfDVEG
MD5:	B5EE5DCFDA3D9112B23994D4CF56CCAE
SHA1:	6C97B7909C0EFC134EA0C663D6B83399196BE0C1
SHA-256:	555E46552504BF49F30E6A7566E5B10C6027264FDB25355EB24B99D28B5D468A
SHA-512:	6C68E9FCF8ED9EB6681EC15FCCE3A09B889A89CB56CC568A9CD64B52437EE1B7C83FAA8413FAA8490CE48E1CC6302F37F5F0498416A9BB1B9F1CE3EAC021D708
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/wallpaper.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1749" height="869"><defs><path id="b" d="M1184.977 325.484C899.46 111.884 518.28 70.143 194.473 211.91c-27.819-54.408-64.765-104-109.022-145.924C70.243 51.561 53.914 37.8 36.926 25.09 25.489 16.532 13.299 8.248 0 0v860.642h1547.53c-55.588-206.795-178.218-397.256-362.553-535.158"/><path id="f" d="M0 868.743h1270.541C1261.121 545.556 1123.348 228.316 869.466 0H0z"/><path id="k" d="M0 868.743h975.982C945.487 538.148 780.492 220.771 494.274 6.648A1075 1075 0 0 0 485.297 0H0z"/><path id="p" d="M389.215 175.315C272.06 87.67 138.795 28.968 0 0v814.776h773.901C735.24 568.442 604.185 336.141 389.215 175.315"/><path id="r" d="M550.894 346.734C409.766 169.557 213.734 49.71 0 0v412.198h598.826a999 999 0 0 0-47.932-65.46z"/><path id="t" d="M0 868.743h1270.541C1261.121 545.556 1123.348 228.316 869.466 0H0z"/><path id="w" d="M389.215 175.315C272.06 87.67 138.795 28.968 0 0v814.776h773.901C735.24 568.442 604.185

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 234260, version 1.0
Category:	downloaded
Size (bytes):	234260
Entropy (8bit):	7.998922087699875
Encrypted:	true
SSDEEP:	6144:e1+WZBHan60UAryv9uqI7l/i2c43oOBODy9HgW69FOdns:YRZdAr6PI7Zcm7Omlr69FOs
MD5:	B37ECD8895B373064F6E8630804F08AA
SHA1:	F2BFB2774A6294A641973B2920A9B2D7B2D863C9
SHA-256:	7B0041C48BA67087FCF5F6E8EC8D24E95DB06CAE9BF78C45B4542984BCB7208C
SHA-512:	5732DE86B7022DB347749E010E64A6B5A771CDD4D81D03F20593268028455CB2EA2B4047566CC742A00106584F7584BD7D5A79BAD7FAB09292C8DEA4493542B3
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_semibold.woff2
Preview:	wOF2..............................................f..f.`...B..l..b.....H..O.6.$..r..x.. ?meta.$..B. ..k[o....U$....WW.T7.p.......#.y-.@.\|.i.?#.y..6.q.1..B......6.{I+.c+.,... ...............x...I...kX.m.Ol.0.....3..&.........P.YNFi..Y..jQ.c.P.].1_u..,p.}c.0..$i.C..H..E.f...{>..._.%..z.d=.c..8..TE-..._{....9.S#.$t...[....GN..2..>y..nj&8R.TI....;....[.I..1a.a..rW.. 8.5....z..v..../F...........M.J{M..E.....f.j~...j.i.....AU..$..u...../Fe..L.}>j.#\1...f...h$L...5;..ln.n..6..:.B...1...\.....:..e..9u.R.^..tv.B.NR..S>....f..%...._J.....GR~.!..-+o..?...f..E..........>...e5.$r... ...%..5......U(..H...H[..}.." ...........'.................e.,.......\|.e3..4..A.Qz-...W..r!..$....T...0....%.$....za...F..{7o.R.Z.N==......\..............P..a."......v...M.whz....4..?.~I..o.Z..#.e...xJ..O'..VD_.....;.~....{...m.5K.w..W...p`....(.(..BK.F....8..{.x.r......t..U.v.hvC'.J....Q.KM=D....j .....H.$[.....6.Gc..'p....$........'..s"..@.o...p.ME@......'.<.=.`>.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	668
Entropy (8bit):	4.557973434449113
Encrypted:	false
SSDEEP:	12:i3Ge5VpOLqd9S+6Qqy2pIyjlbhBDyPlvfM46ryAQW0Q4xleWcW+Q5Nj2:i3Ge5VpI6No7htQP+4WOxMWcWti
MD5:	7992210072C34E8147662CA7F8A22EBC
SHA1:	7751C6F0B48875D8456CFBA72B4EE74083281E60
SHA-256:	B683ED39FAFDD904BC8D2E4A3494D030041F8F69F46C381677A92C5CE04A03C3
SHA-512:	CDE76680FB7F34D28E226C0FFAAB6B97BE0CBA645C5DA86263612C1DF59815AA3E415EA4BB560D9086F4AB3739CDFBAC5E32DCE04E46308F7C558B2934A5B854
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/images@1x.bin
Preview:	.......<svg viewBox="0 0 268.0201416015625 158.116943359375" version="1.1" xmlns="http://www.w3.org/2000/svg">. <g transform="matrix(1 0 0 1 79.49508056640616 114.2884521484375)">. <path d="M46.3867 8.59375C49.2676 8.59375 51.5137 7.4707 53.0762 5.12695L98.7793-65.5762C99.9512-67.334 100.391-68.8965 100.391-70.4102C100.391-74.2676 97.5586-77.0508 93.6035-77.0508C90.8691-77.0508 89.209-76.0742 87.5488-73.4375L46.1914-7.91016L25-34.7656C23.3887-36.7676 21.7285-37.6465 19.3359-37.6465C15.332-37.6465 12.4512-34.8145 12.4512-30.9082C12.4512-29.1992 13.0371-27.5879 14.4531-25.8789L39.7461 5.27344C41.6016 7.56836 43.6523 8.59375 46.3867 8.59375Z" />. </g>.</svg>

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 215624, version 1.0
Category:	downloaded
Size (bytes):	215624
Entropy (8bit):	7.9989485398001365
Encrypted:	true
SSDEEP:	6144:z7V3AfjW2JBwuqxw4GJ14Yz2tx91c8YxRwXGs:zBASwii4GJ14m0U8vR
MD5:	9B53803BF8700DBA963BDB71BADC62C0
SHA1:	DD36319DD80C03A90367E48D2086F0B1D94A9A4A
SHA-256:	D42C2920FEE98B6A295697AE4217EE1215EA01C37E2F38887DF42BDB2A1ACA95
SHA-512:	0A9B253B8FB3244B6A409C638F8254EFE2696AFE2388D9137AEF015B61ADA2CAFD4B580216751C68C087EF8FEFEC820FA17629AE9568810385C8833040D62F3C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_regular.woff2
Preview:	wOF2......JH......F...I............................D..f.`...B..l..b.....P....6.$..r..x.. ?meta. ..V. ..k[........sy@......\.:q......~.B..N!.1.>A.j...c.. V.C.Ds.p!..l...U1.oSH.............W..........,,E.......1....11.......b...y!..f.j..Q..jT.e){.._.`..d.F..b..hlX[..Y..0C.b.n.Wm8...>.6...{UX)..u#......t..6B@....".H..T..6.r.]......D..`..}.3,...VK6.).b...b.9D.h[.... B8>.8..C&..;.+....8......2{.R1kjf..X=...\|.....e/.n.<.3..j.[....&.j..v....Y..P&..$n..N...4=.-.,Ez~w.F..U(b'}{?.a.V...;.O9</.p....A.}..TV.UX...A..)g..u.8g...qa...C........c3a...6K.w.~=.%(f......~..=.hP..O..9;..<...Su..]<.2{.#...E....:...p.%.e.>.n.,.%..%;..D?.i.I..}M..x>.6.D...6.j.FPu.......Hr..6.....N..S.i..."...Q"V.b.D..-Q_.;.,i.&.9#.f...._....\~...#.A......MB1Uzb$..F....g...A..0.....6.3..5..32...$.\;.G......}.y.=...EQ.y.<..4i..&eA.k.m.^...)Kauw1....~4..+\b.....M.\.~....{b....{.Z.....o.....G.Y.k............#P^..G%\R..X...t......D..).e.'..).uw...YJo.....KI.WF..&....W.N...z...]..K.:k.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46673)
Category:	downloaded
Size (bytes):	134281
Entropy (8bit):	5.315833008606401
Encrypted:	false
SSDEEP:	1536:McLDh9iasJAJWjL0//GL7+eYWaxsZdyriLM5ZabFkBC2Ekp8Br/SReLjK/JUmtvu:5s2JWqOLM5ZKM64eJYIgYrojr/Nmn
MD5:	B293E734E70FDD3941ED23CB75D798A7
SHA1:	45D46E2054A48DE58993A73E015E361AF58AE48C
SHA-256:	FA4CB957A209F05B0E7AAA99012E69B84E937A3CE6F5334064DC5572D3EF0EDE
SHA-512:	D8A8938D7F3C14D79A9CA2D5A8D4794653BE0B6E7A56CF6CF72237A2E13301E9A2DA2735CD1D17062F971FAA0F09D6DF85062458A74131EAD4F7F789C5C49DFD
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/1770954589/init-app.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=865)}({105:function(e,t,n){"use strict";t.a=function(e,t){return e===t\|\|e!=e&&t!=t}},106:func

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65021)
Category:	dropped
Size (bytes):	3351448
Entropy (8bit):	5.447999745278466
Encrypted:	false
SSDEEP:	49152:f+aA5moPniGnw1PmGqMVCJHSq7wG/UJ1TkMpocPjRalPUT7zs:fPTAnfw1PeMT7g
MD5:	9F4BEE4D660ECA6EA7DC3C699ABE16D2
SHA1:	35BEE90F1CDF31171039FA33D4459F322A8C87DD
SHA-256:	930AD003A2B67B77285719E5ACB631A428DA4E19DA74E5DC88A0F39125BFFBD5
SHA-512:	1BF7E8FA5FE5182C249598879CB9728C8F1B660A700F14FD99642718258CF11122CA0CDC0B57F81F3C2C4B0BAFB14E1AC270EE4CA3470F0EC9692B6E6373115B
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/applications/calendar/2426Project39/en-us/acknowledgements.txt for licensing information.. */.!function(e){var n="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{var t=n.performance,o=n.Promise,r=n.MessageChannel,a=n.requestAnimationFrame;if(!(t&&t.mark&&o&&r&&a))return;var s=function(n){return t.mark("chunk-"+e+"-"+n)},f=!1,i=!1,c=o.resolve();s("exec-start");for(var u=0;u<5;u++)c=c.then();if(c.then((function(){s("exec-sync-end")})),"undefined"!=typeof window){var l=function(){f&&!i&&(s("after-paint"),i=!0)},p=new r;

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60050)
Category:	downloaded
Size (bytes):	577883
Entropy (8bit):	5.534201114776914
Encrypted:	false
SSDEEP:	12288:aYSsK4GZvdM3qaMZpdTwGpIXN4BSWquq2iGuFDeBD1qWPH+LLIIHQ:TK9Tw2
MD5:	E9A08F695655A19BA3E7B741B791F0E9
SHA1:	F248C2604A23EC1CC3510595A35D87708E626476
SHA-256:	2FB77285AF8EB1F9BD68C3190A434C52E48D7DE25B3A3AE7DA2DCB754F39775C
SHA-512:	9E28BFCF06ADA3114FFBD703572FF8CA4BBE2F623B90955AC486E5CF6FF60A39F0DB641F79462BE1A5006A452E5E673992F085BB48CE4F6C2703F60FF9E511D8
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/format-phonenumber/format-phonenumber.js?v=2
Preview:	!function(e){var o={};function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,o){if(1&o&&(e=t(e)),8&o)return e;if(4&o&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&o&&"string"!=typeof e)for(var n in e)t.d(r,n,function(o){return e[o]}.bind(null,n));return r},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,o){return Object.prototype.hasOwnProperty.call(e,o)},t.p="",t(t.s=1)}([function(e,o,t){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17248
Entropy (8bit):	5.310509287024952
Encrypted:	false
SSDEEP:	384:c8i6a2S0gvVzN440/h7ZCkZYju3TqzabHFrVBtBxyYgKdvzGKou+rFVkhL3qqBh:c8i6a2S0gvVzN440/h7skYjdzabHFrV7
MD5:	8C88ED0933F583EA151D723E205EBBBF
SHA1:	FB59D17468EF2AC7D43277846D7717FB340C9D4F
SHA-256:	44E54D4976556AA0DACF4C441E18166B923AB30C243EB7EB1A0F794C6B674B1D
SHA-512:	F70281E4D191F3B195722E9F1AAB34ECCA668DCCBEEF6E484A073C77079CFF23720484EFF9DF2A93C65633A3EA62F0A02362B939B198EE7950EA05C30C31D354
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts/?families=SF+Pro,v3"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.eot');.../ (C) 2019 Apple Inc. All ri

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65366), with no line terminators
Category:	downloaded
Size (bytes):	744879
Entropy (8bit):	5.417822969978046
Encrypted:	false
SSDEEP:	3072:M8Oz5tcVPa8Oz5tcVPO8Oz5tcVPO8Oz5tcVPf8Oz5tcVPI8Oz5tcVPr8Oz5tcVP2:2
MD5:	3899C1A2B27F9605F947D97BD997FED1
SHA1:	1A34467ECC7610C04C74CEBD839F8E238652C9C2
SHA-256:	BA66701A334A41D5512DA96A8909D150953B36D9AE6A63762E4F2BAAB50E5556
SHA-512:	F7C3E1A377E1C91518A914CFCDB18251A3B0864D8388034C0D6CE56050C81BF372FC7F8178479E120E094A41E19278A44462284F8ED7003DBFC63879685C1996
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/module-assets/home-11404516dbe75ee27465.css
Preview:	@media only screen and (min-width:1441px){[dir=ltr] .xlarge-offset-0{margin-left:0}[dir=rtl] .xlarge-offset-0{margin-right:0}.xlarge-order-0{order:0}.xlarge-1{flex-basis:8.33333%;max-width:8.33333%}[dir=ltr] .xlarge-offset-1{margin-left:8.33333%}[dir=rtl] .xlarge-offset-1{margin-right:8.33333%}.xlarge-order-1{order:1}.xlarge-2{flex-basis:16.66667%;max-width:16.66667%}[dir=ltr] .xlarge-offset-2{margin-left:16.66667%}[dir=rtl] .xlarge-offset-2{margin-right:16.66667%}.xlarge-order-2{order:2}.xlarge-3{flex-basis:25%;max-width:25%}[dir=ltr] .xlarge-offset-3{margin-left:25%}[dir=rtl] .xlarge-offset-3{margin-right:25%}.xlarge-order-3{order:3}.xlarge-4{flex-basis:33.33333%;max-width:33.33333%}[dir=ltr] .xlarge-offset-4{margin-left:33.33333%}[dir=rtl] .xlarge-offset-4{margin-right:33.33333%}.xlarge-order-4{order:4}.xlarge-5{flex-basis:41.66667%;max-width:41.66667%}[dir=ltr] .xlarge-offset-5{margin-left:41.66667%}[dir=rtl] .xlarge-offset-5{margin-right:41.66667%}.xlarge-order-5{order:5}.xlarge-6

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44491), with no line terminators
Category:	dropped
Size (bytes):	44491
Entropy (8bit):	5.356087114729719
Encrypted:	false
SSDEEP:	768:FxRxDxZqIrvVvIsWSZWM2CB29ickQzxHKG/4WnqM+:FxRxDxYIrvVvIsTZWM2CBWGQzxH5wsQ
MD5:	6186E0C996FA0CADBB4153DC31A2C360
SHA1:	DAA1483C790CE6E79F5B7DDA776DE04BF32D7425
SHA-256:	CF475C9C80A0759904674B79164E41118FB0970D9228595AC57528D5ECB3A6BC
SHA-512:	A6479624B67027A8543217C53869D6A1B747864F62BC68BF0621BA003C86CBC5C40C75A779D03B83D87E81D9805796C5623D2049F925B7946747007A9EE67478
Malicious:	false
Reputation:	low
Preview:	(()=>{var e={1989:(e,t,o)=>{var n=o(1789),r=o(401),i=o(7667),a=o(1327),c=o(1866);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},8407:(e,t,o)=>{var n=o(7040),r=o(4125),i=o(2117),a=o(7518),c=o(4705);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},7071:(e,t,o)=>{var n=o(852)(o(5639),"Map");e.exports=n},3369:(e,t,o)=>{var n=o(4785),r=o(1285),i=o(6e3),a=o(9916),c=o(5265);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},2705:(e,t,o)=>{var n=o(5639).Symbol;e.exports=n},9932:e=>{e.exports=function(e,t){for(var o=-1,n=nu

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3775
Entropy (8bit):	7.933892218866822
Encrypted:	false
SSDEEP:	96:pgn79kpWHHul8WtsiREv3vhputZaWWmYCfRbmgM7soc:pfp8Ol8UEPvhputZqCftmP7c
MD5:	326D20EADAD1A744B0AD8BDDDE18F987
SHA1:	7C29E96615B8444F9C9D8D3E2B2BFA0FDAD84EB8
SHA-256:	27A062E1F7C1F84BD52495DB51E4DE6E8FC9D95396B9EA40A454F158992F61BB
SHA-512:	E01FCA8E789198E884C570E3BF4810CE2B1FC38E727DAF01278C89139614F94678D2C25AD20E85349AC5F563E8FA72DA98D65DBC935FEFDA864BFD5FB6553637
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............IDATx^.1K#A..3.u....La+h!..~.I.O`..KX..Z[J.BH..p.wEP..Ab..R.E.Y!k....If......K..?..b...dV.2..UJEb\b....@.I.. ..#.q."y.HDb.....G..?rM..R......8.R^..5V..iY.......h..+.........Y.d....z..z....A.p.....3.$S.Y.l.....S.n.H.B@.$W.1..0sK.puWH...I..H?;...t....{.t1.3l........3..]yVb.x.Y..>$K$$^...i'..!...^U...H7U.(N...!6J.zs..6...&.}u2N,...2y.(.l.0.\|R..GD.c..........^.....s l97..4..h..... !_..d..f.....NK.....C...8....'.._}l..c.o........>DH ENl..^.5..........1c.v....:.i..n.H+..(....5U+....<......%B.....B .)...Z.JB.. >.F!@.!8......a...3s?...wo.{.....8X.k....s.Yk.u.N...]...AP.?U......._}.60y.F..pM_\|....7ux...V..]....U2....]f....+.#...._UP...b..bR.`f(...%;...9..>...m]....d\|.......o..o.0...X..]=Qw`....,.D.,+..A.-=.../.......<R....rWX>D.j.:....^4..'....C.xg..6QL{.qk...E8_.....'.......:.N.."...n....ydx..L.}......Q6..\..H.;-.U.s..w.xi...../.e...3..@.F....:.9...../.Zs..00.$.@B3. ..V.A......p.C.....9.%......@P....A...'...J..+b....

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1785
Entropy (8bit):	5.41293492716982
Encrypted:	false
SSDEEP:	24:YqnMppeEWkx1ZM0Hxff+mrP3+/10llB6ElkUIfiOWqMYH++ARx7qv8:Yg7QbMeR9/+/10lBIffMYQ7qv8
MD5:	892C146ACCF68A028A9760AF0E7CBC68
SHA1:	E4004C19B7FE138FBFF2197A5D161E84BDCF9B28
SHA-256:	1CDB5641BEAE1FD97A5406BCA1F7809F5E5C4A4E900FA75D40B4DF40BBC06DBA
SHA-512:	C293FD9AB0CCC22A9ED001E8232DBFE76A0ACB9B0D3D93193EB2342C17A0E840E532EDFEBA882879A6738DEBEFF17F1D400AD652B14C3FD04AA300288188D859
Malicious:	false
Reputation:	low
URL:	https://p110-calendarws.icloud.com/ca/inviterequest/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db
Preview:	{"OonWebRsvpEventDetails":{"localizedEventTimeStampLine1":"Tuesday, October 22, 2024","localizedEventTimeStampLine2":"9:30 AM - 10:30 AM (IDT)"},"Event":[{"tz":"Asia/Jerusalem","icon":8,"recurrenceException":false,"title":"..... ...","tzname":"IDT","duration":60,"allDay":false,"startDateTZOffset":"03:00","pGuid":"2BB1EAA0-6768-4E61-8C9C-8EC0A83D7C7B","hasAttachments":false,"birthdayIsYearlessBday":false,"alarms":[],"lastModifiedDate":[20241021,2024,10,21,5,42,342],"readOnly":false,"localEndDate":[20241022,2024,10,22,3,30,1230],"localStartDate":[20241022,2024,10,22,2,30,150],"createdDate":[20241020,2024,10,20,6,11,371],"extendedDetailsAreIncluded":true,"guid":"599C0CDC-1F79-4ABC-BDE0-AED33D06C50A","etag":"m2h6vy6h","startDate":[20241022,2024,10,22,9,30,570],"endDate":[20241022,2024,10,22,10,30,810],"masterStartDate":[20241022,2024,10,22,9,30,570],"masterEndDate":[20241022,2024,10,22,10,30,810],"birthdayShowAsCompany":false,"recurrenceMaster":false,"transparent":false,"invitees":

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6553
Entropy (8bit):	7.907619030791439
Encrypted:	false
SSDEEP:	96:uQDvOg1TFEPDTrIemtPGRNBLXtZlfbumseorEWeUQUtqxmxiGK1:uc1TWPXdmkRHLXflfbuheorEWektqxuG
MD5:	AFA666DB1988CC9CAD27F7614FE05FB9
SHA1:	A164FFB954E6CBDFA73C3C0274C3742A16F940A2
SHA-256:	7990A456B08FD166AFA514C9EA93481EEAE9245308ADD794F6118C0CC17E230F
SHA-512:	2762842092906CF3C6FA2446FAB94F011B76CC0EB0BA62FED8C2573D1806252D5E8C01BB05FDA2CE57290C03107F51D788699DA65E4C5A3C9F6FCA1FFB90FEE2
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/notification-pages/icons60/success.png
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118083B0C717926B30" xmpMM:DocumentID="xmp.did:40594A7463B511E2BCA885484A8CF26D" xmpMM:InstanceID="xmp.iid:40594A7363B511E2BCA885484A8CF26D" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD6D15A33E2068118083FEFAFED61F9F" stRef:documentID="xmp.did:07801174072068118083B0C717926B30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.A#]....IDATx..yp....=.4..}......\|p..0&b1.&...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	downloaded
Size (bytes):	382888
Entropy (8bit):	5.583850597824589
Encrypted:	false
SSDEEP:	6144:a3qRQCO4J5ZdBoVzH8HS0TDyjp6p1GBUA2dHaiirqJpeSsXT+fDU8EQgMPE:0zH8HS0TDyjp6pYqA2d6j0peSsXT+fDa
MD5:	84798D97BCBC577FBC965878516C5EEA
SHA1:	011163731420105F9738C85874B172E3A668EA07
SHA-256:	E1870BEE0E36DE2AECB7BA94F7ADB51F3F9784A346E4F2CB2473534196741547
SHA-512:	C8776C9738B4DA4CC2EBA75BA2408E34E400C7C25320551071E8045B527B1AB480851A3555378ECE06E8242F6565906A3DE51B593D51FC74F87510EC049E211C
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/2.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	779432
Entropy (8bit):	4.863703490650496
Encrypted:	false
SSDEEP:	1536:gjiGi3btH4ji8pr6MGxG85PezFWgo3sLpUyTLjKg68dqp6q5rSWeHrSWeY5PTbfV:j7G85PeBW7cLpUyTSg6njque5
MD5:	CA8ACFADEA3CB37239935DD886EF77FE
SHA1:	BD12CB28623B038775D78C2F4C001CB75659A7FF
SHA-256:	8E554E170C4B1DEA9C1FD9ED1918A5C0D35E9103E7E9678722A21254DB4095E7
SHA-512:	4937339A4BE660D418DC23BF769B7E5FB70D66A5AA7F4271EB5E354CD0860FA31CEB9F921EDD7A27AA1C9A4FD13BC9F0A39A634A5C5D50DCC286C394BB2266DB
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/main.css
Preview:	*{margin:0;padding:0}.cw-hidden{display:none!important}button.unstyled-button{background:none;color:inherit;border:0;padding:0;text-align:start;inline-size:-webkit-fit-content;inline-size:-moz-fit-content;inline-size:fit-content}[dir=ltr] button.unstyled-button,button.unstyled-button[dir=ltr]{text-align:left;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content}[dir=rtl] button.unstyled-button,button.unstyled-button[dir=rtl]{text-align:right;width:-webkit-fit-content;width:-moz-fit-content;width:fit-content}button.unstyled-button:not([disabled]){cursor:pointer}ol.unstyled-list,ul.unstyled-list{list-style:none;-webkit-margin-start:0;margin-inline-start:0;-webkit-padding-start:0;padding-inline-start:0}[dir=ltr] ol.unstyled-list,[dir=ltr] ul.unstyled-list,ol.unstyled-list[dir=ltr],ul.unstyled-list[dir=ltr]{margin-left:0;padding-left:0}[dir=rtl] ol.unstyled-list,[dir=rtl] ul.unstyled-list,ol.unstyled-list[dir=rtl],ul.unstyled-list[dir=rtl]{margin-right:0;padding-right:0}a.unst

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44491), with no line terminators
Category:	downloaded
Size (bytes):	44491
Entropy (8bit):	5.356087114729719
Encrypted:	false
SSDEEP:	768:FxRxDxZqIrvVvIsWSZWM2CB29ickQzxHKG/4WnqM+:FxRxDxYIrvVvIsTZWM2CBWGQzxH5wsQ
MD5:	6186E0C996FA0CADBB4153DC31A2C360
SHA1:	DAA1483C790CE6E79F5B7DDA776DE04BF32D7425
SHA-256:	CF475C9C80A0759904674B79164E41118FB0970D9228595AC57528D5ECB3A6BC
SHA-512:	A6479624B67027A8543217C53869D6A1B747864F62BC68BF0621BA003C86CBC5C40C75A779D03B83D87E81D9805796C5623D2049F925B7946747007A9EE67478
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsapi/authService.latest.min.js
Preview:	(()=>{var e={1989:(e,t,o)=>{var n=o(1789),r=o(401),i=o(7667),a=o(1327),c=o(1866);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},8407:(e,t,o)=>{var n=o(7040),r=o(4125),i=o(2117),a=o(7518),c=o(4705);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},7071:(e,t,o)=>{var n=o(852)(o(5639),"Map");e.exports=n},3369:(e,t,o)=>{var n=o(4785),r=o(1285),i=o(6e3),a=o(9916),c=o(5265);function s(e){var t=-1,o=null==e?0:e.length;for(this.clear();++t<o;){var n=e[t];this.set(n[0],n[1])}}s.prototype.clear=n,s.prototype.delete=r,s.prototype.get=i,s.prototype.has=a,s.prototype.set=c,e.exports=s},2705:(e,t,o)=>{var n=o(5639).Symbol;e.exports=n},9932:e=>{e.exports=function(e,t){for(var o=-1,n=nu

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 205, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	68036
Entropy (8bit):	7.992416269719688
Encrypted:	true
SSDEEP:	1536:c5LgkD5UhBFCOyXo2mblid0zuI7M5J5Zf2:c5LvD+hBQOyYZlvuI7M5J5V2
MD5:	52DA2BFB2F521C7B226CBE7C2BA3F01F
SHA1:	7FC0721EE21A7A22643E0E0D39BE1E670F0590AC
SHA-256:	C347366E5FC76ED933855C185A9A0B1A26DE9B5CD4CB1B50E5140C05CFF6FBDF
SHA-512:	6E664277B24046758EFB3B1CDC7AB7D482CF41D7B85915F2E7997F51A39C49BC3AD7AD0A872A3311485E2BE60174C2F5F3B00842AB4996BE38D836D116572A6B
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/06b68855764eb0e23f269ed4ef7935f0.png
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i........................................................n.h..@.IDATx..}....~m...N.)...)!@B...d.A`L.ar0.......y..m.`.l... .".....( .s.N.N..6...z.gggg..N...].o.{......:w.H......#.^...8.cp.8p.J<.....G...!n..'....\|{........d.........-_.....b..U........+............0..iu..x<......K..?..d.,.SJ...\...Sd....3.O..W.Z.......e.....x.x...+..ON.L._K."<..l...6..sD.8...@.^.z..>;?.yT.?JE.......s.....\.;.S\\\|.N....JqH...R.L."...E...Z[[...$........[<..<..Y..pL...M(++....`...j....{}=..[.....%..b...z.Z.6.Rv..;j..T.D.......FjU.^.8..h.<.T.a.M.i."2e_.\.QrI.F..y.{N....d..$.....l.X./.G..L.uE................h....{.............`..@.%d...K.O.A.G....m...$..I.E:...nw.K...$..p._..q..o~..;.<.b......[$.#F.G..@B.L.%....!....b.f{....r..g...Eb}b.y......._v...w&.=H.....d...\.P.o",..qH......;d{.GJ....d.NV.Qy..g2F.Z4..[\|...Kvn.../..g..B=......-[...Hj...`....W.....yw.O4q.o...G ....\|.Q.\|.Q...zg.=.5...k....

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2364
Entropy (8bit):	4.561836229722971
Encrypted:	false
SSDEEP:	48:cf+1USO7wQUlYvSNamnrbmM+sb1yRBVLb:cfwiwQUlYvSII2tsb1ypLb
MD5:	CC3C17D31CFDA473CA545554C30794AC
SHA1:	B64FA9CF9CBA5BA68567EC8FEA1A229B023F9FFD
SHA-256:	4F70A22F0D4E8ED3F4F2F823F7385328CBAAEDFF0EAE324A51287C3C1CBA4F92
SHA-512:	F89443708E33135A68E8658AF32BD17FB343F4074E094251AA6F103E46E8FE210C41638B88334F9A7527E8D2465F5117C7D3AA10144D60934948738728376F54
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/1970480931/boot/initLocalizationStrings.js
Preview:	"use strict";.(function (){. function isLocStringsScriptTag ( node ) {. return node && . node.tagName === 'SCRIPT' &&. node.type === 'application/json' &&. node.classList.contains('localization_strings');. }. . function parseJSONTextContent ( node ) {. try {. //this may failed if the content of the script tag is still not render.. return JSON.parse(node.textContent);. } catch ( error ) {. return undefined;. }. }. . window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.i18n_legacy = window.idms.app_config.i18n_legacy \|\| [];. . if (!window.idms.localizationStringsObserver) {. var parsedJSONScripts = [];. window.idms.localizationStringsObserver = new MutationObserver(function (mutationList) {. . var found = false;. . for (var i = 0; i < mutationList.length; i++) {. var record = mutationList[i];. . for (var j = 0; j < record.addedNodes.length; j++

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	downloaded
Size (bytes):	280773
Entropy (8bit):	5.625798439586788
Encrypted:	false
SSDEEP:	6144:Jo5lj2X9UNhmneeIp3CZsenIhLmFjF7ZatX6EgvHr:Jo5lO+mn5ZseIxmFjFFatxgvHr
MD5:	F514376E4D7D91C8A38FADF21D3503C7
SHA1:	8DE95E802B82AB454A47CA9528E9727380120AFA
SHA-256:	FFA9F71A43BDD16DBF1BBB33BE0834D77BF03F61C927E2DA2BF557D7C6259B67
SHA-512:	F04BBE1F60F2170C7A23F71BEF66CA2D18EA398D17D1F53C04259012E650FC09DCC8F17F51263767B102FE6E64D0E291C01F40A8C48CF394200626CBB6197C95
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/1.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	6756
Entropy (8bit):	4.638324890211791
Encrypted:	false
SSDEEP:	192:4KLcWazhi2qaOZBwK9m1VfkNV4eCwX8owDiU2+6jppkvwUvi/qHqyao:pgWali2aZ6K9m1C4wUDivDiqql
MD5:	D95841F7F8CA1E64B29B14EC1BF8B625
SHA1:	99ADB1F42583DF74F9529B472EFC3D95921A7A01
SHA-256:	F46F8884CEAA4D6AECBAD6B256014C541AB5F892B0D403F7B3F4E4CE9C6673D9
SHA-512:	74738A9C444E8E42E4B153416B2A84C9394872E3DA70F651D2F63A08EEDAE27AEAC8B59D3C915F497F44244AD85950BDDDA807B248B3D21297475F48C3834EA5
Malicious:	false
Reputation:	low
Preview:	"use strict";.(function (){.. /. bootArgs has the structure:.. bootArgs.additional = {} full of known arguments with specific js that must be applied,. ex: functions, string values that need to be manipulated prior to being set, etc. bootArgs.direct = {} keys/values which can be set wholesale into bootData.. /.. function populateFromBootArgs(bootArgs) {. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.bootData = window.idms.app_config.bootData \|\| {};. var bootData = window.idms.app_config.bootData;. bootData.canRoute2sv = false;.. // Process all direct fields into place. if (typeof bootArgs.direct === 'object') {. Object.keys(bootArgs.direct).forEach(function (key) {. bootData[key] = bootArgs.direct[key];. });. }.. // Functions for setting the the additional variables from the bootArgs. /*. Function to get the value at bootArgs.additional[pathElements],

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12505)
Category:	downloaded
Size (bytes):	13729
Entropy (8bit):	5.498642029507824
Encrypted:	false
SSDEEP:	192:7wI0dSohLI/vnpiTAvJu3CMS1lqjjk3/cGtjVQf3Wi83WO0q:n0dv+/PCA8Clqi/cRf3WiWj0q
MD5:	E6CA40918AC2AFF1C7DB95190691DF43
SHA1:	678831A3FE5460C97616AD0222B9E6A62F0416A0
SHA-256:	CF988504C0358A4646994323D302F0F61E1000BC86CA066502BECA562E18A04E
SHA-512:	F968040E03059EE8049F3D6B2AFAADEE7D17C8C8735AFDCD9259FB65FB4E8DDD111100F226067D09D803070FE6297E0592E893B77C2F07CD39AE9B72C943A04A
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/N173194890/common-header.js
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};return e[o].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=860)}({860:function(e,n,t){t(861),t(862),t(863),e.exports=t(864)},861:function(e,n){(function

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 430 x 388, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48202
Entropy (8bit):	7.972408335290431
Encrypted:	false
SSDEEP:	768:UKqrpw3bBpZrd5CmemUfHipma6uP8TIrgz5K4ZThxUts6QnSqLwXs97ZesZ:Uly/LEdfCKuePz5KUThxosbnSq8XAZeq
MD5:	C214D8BFB5062D87CB9E36E4C26109D0
SHA1:	68F3FF415A4ADCEE1461704F40FE07601B57A044
SHA-256:	771C00DC5A82559FD436C0ED9BA211B98021327C5E42F5B47BBF5FE5520057FF
SHA-512:	89DCF39C000814B951E32E764019D33F2A359D58B1F63B5267F5FDE77973AD534DBE77402CFB1A7182EEA950FB4B7390E52E7083254F2C4A072D83BB893F6478
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............n.......sRGB........PeXIfMM.*...................i.........&...............................................Z#....YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx....lIY&.'.wy;EQPR.".E...(. .3c.N/.M..:......#..4.6.0.B!....%%K......^.....]s.<.}.9....y.w..{......._F.....2...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7708, version 1.0
Category:	downloaded
Size (bytes):	7708
Entropy (8bit):	7.966033488711406
Encrypted:	false
SSDEEP:	192:15do6O6rmh/K5Tscl/taNzWNzff7nMOETKtR55xeT+:1/S862UWNzGMR5yS
MD5:	F4DE72FB79097F6D8780F120DB08F3F5
SHA1:	D949E8C1E890A7014B4FAD48BEFA76470ABA5B30
SHA-256:	E80C7728FA04323A109D9DA93F96C81DC424E8AD18E9F7949F8B8667F86E3EB6
SHA-512:	DB3B641D9DA7512314977F5EF6F30A7D647B472089D1650BC8B6D26FC054E70AF9611CB64EF09ECBCB5BCC9BB42233ABA5C8E1C4F6B37137732B8DC28E695E05
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v3/sf-pro-icons_regular.woff2
Preview:	wOF2..............W\|.............................`..Z...d.A.6.$..V..... ..N..Y..KUFe.....DT...E]....O.r..yW....I 0Z..).+.rGM.S.Ce.#.K>J.........T[.....r..........>.x.....xy...Z..aV.).#F."H..uu..8U:w.{....m..n3.h.....h.1..PJ.a.s..&...\..]D.......%=.]........R.T......q.Xm.......[GC..x.6.<J.<......;$..6.av>.s...`..7.?.??...A.U......\........3....C....g........J7.l6.oiJg...q....)......5...hV.=YI$...+M.V.Ki.J.V...)J....Q.A.9..(..."(x000000.b.hh.mvP.l6....iw...\|.q<..)\FF.(l......cxs.j...@.J.{.51>....x...&{6..q!-T..Y..XO,../.....B..-]......>E;V_.>o.np...#...\...H......>...F.M..v.bU.4{T....Su5.e.W}..bU_.U.@G..........#X...X..CY...Y...,..h..`6......eA..X...,.@...`....E$.."..b..z...]Y..,.@...?.".."...........@...Z...q,x...>..B.....,D ......,d`..9.......Y.....`>.BP.D.(&t)-..t1uS7]H..8.....t.......e.I...2..9......blM.Q.U..VYA.z.B..p.../...;Pu.0.../$..W..T}.........$.C...uMmt6J...:B..xX8..tz...],...C.8t ..I.@....M(.L...c...+-..bK,.........3..3.......

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	22382
Entropy (8bit):	1.8139780344520928
Encrypted:	false
SSDEEP:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
MD5:	310FD67D702063937E39C17B2060067F
SHA1:	503B0C1CD35674B8E58B6B35431F381F1417A1A5
SHA-256:	2EE7CA9B189DF54D7CCDD064D75D0143A8229BAE9BDB69F37105E59F433C0A8B
SHA-512:	D523F0CAA326B7842CB2A0D13D95E2D4CF432FC7A6B12FA503B7175AA188A848C9AFF631685BFA2D2D3609B7FCC6AB398FD9CC95ECAE436FFA9EA2D55550E616
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/favicon.ico
Preview:	............ .h...6... .... .........@@.... .(B..F...(....... ..... ................................................................................................................z...t...$.......S......./...............................................................4...........................t....................................................................................................h..................._.........................................K...........................................................I...............................................................................................................................................................................................*.......................)..................................................................P..................m...............................................5...'..."...o...,...6.................................................../.........................................

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.584183719779188
Encrypted:	false
SSDEEP:	3:dRYt1v:Tul
MD5:	0AD20532F4522AC36C5AF6D7E41DD7A5
SHA1:	2A481C2006BB42C2445873DFD13E86983BC7AC3E
SHA-256:	07D90AC0BB037489B159EE3FC691B2DB8A624A6363B8BDDACDFA0A929A39B716
SHA-512:	86FDE154B958453E8BC402FDB682C4E110F40737AA4A63C6EE9B9E882B1A6E481C01843C34C36A1232C00F93DFAE3CE730AFC311ABF4117BEB0F8B0147364163
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	668
Entropy (8bit):	4.557973434449113
Encrypted:	false
SSDEEP:	12:i3Ge5VpOLqd9S+6Qqy2pIyjlbhBDyPlvfM46ryAQW0Q4xleWcW+Q5Nj2:i3Ge5VpI6No7htQP+4WOxMWcWti
MD5:	7992210072C34E8147662CA7F8A22EBC
SHA1:	7751C6F0B48875D8456CFBA72B4EE74083281E60
SHA-256:	B683ED39FAFDD904BC8D2E4A3494D030041F8F69F46C381677A92C5CE04A03C3
SHA-512:	CDE76680FB7F34D28E226C0FFAAB6B97BE0CBA645C5DA86263612C1DF59815AA3E415EA4BB560D9086F4AB3739CDFBAC5E32DCE04E46308F7C558B2934A5B854
Malicious:	false
Reputation:	low
Preview:	.......<svg viewBox="0 0 268.0201416015625 158.116943359375" version="1.1" xmlns="http://www.w3.org/2000/svg">. <g transform="matrix(1 0 0 1 79.49508056640616 114.2884521484375)">. <path d="M46.3867 8.59375C49.2676 8.59375 51.5137 7.4707 53.0762 5.12695L98.7793-65.5762C99.9512-67.334 100.391-68.8965 100.391-70.4102C100.391-74.2676 97.5586-77.0508 93.6035-77.0508C90.8691-77.0508 89.209-76.0742 87.5488-73.4375L46.1914-7.91016L25-34.7656C23.3887-36.7676 21.7285-37.6465 19.3359-37.6465C15.332-37.6465 12.4512-34.8145 12.4512-30.9082C12.4512-29.1992 13.0371-27.5879 14.4531-25.8789L39.7461 5.27344C41.6016 7.56836 43.6523 8.59375 46.3867 8.59375Z" />. </g>.</svg>

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1324 x 950, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	213358
Entropy (8bit):	7.968202543812873
Encrypted:	false
SSDEEP:	6144:I4h6XA9Yv2dvjX8jdrq64EYcay5NsT20P:I4/Nxa/w20P
MD5:	616FA4B7B4CED3958818770EE3B68953
SHA1:	2B073C5F80E1850830E2275819D18BBE70BB08C8
SHA-256:	C49B9B2A18F9009BF2781A3884833EA9404E7359FE01B812DC45B317A77A1FF9
SHA-512:	8634C127C44C7EA76D07D3FFEEE3A79FC2A9DD2D9D0C8EEF0B3C6E91D1DA5741241815C732681A29468083123310DAE770FAF0933DC50976012AE212DBD0BE39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...............A5IDATx^...o\......=.... .T%."."I..*aV.".Jm...=u...R[....F..R...,.D.T....;.....#q....;q.....g...].D.$I.$I.$I.$I.$I..F.$IR.GB$G.$I2XJ.$I......N..$I.KI.$...L....._.L#.7jJ.$..$I.d....k.....a...$.`)I.$.%s.C..]W..L."...S;{.,.].6.#.3%I2XJ.$I...(.V....O> ..=.,Y.>.qs."f>X!S.$..$I.d....Z9F.........G.&g.:_+G....3...$.`)I.$eL.&....B.....sO.~Lp..=ER...bgm.\|..3+B.ELI....$I.qr..%;Ar............B.X.\|..6.A..3..u$I2XJ.$I..q..1Y... .\|7BVE.3..M....Lr..u.g].\|..4kBfy#..1...$.,%I...d9NV..b....r.<3Yp.Z......+.`.....+M..p"......#Xh..4.I.d......@.........2.$..d..N....L.....{..d.....a..z.V;b#...%...F......K;.(x^...b.,...Y......$I.KI.$.(.g..89E..F.r.<S..,.D...A.d..3Y.V"X.d......d.X.......A..eR..}../.~.l....$..l.l...=6h.K>i...6....B.,..r...Y:'?R.S.$..$I.<..,..R.,G..V.._.nq..T.\|.8...68..$9>]...S........_....p..........._.:[.......!..1+.0....$I.KI.$.(..5q.{........msz......j..4..8......@..N.....}......n4.d/h.\g..".{;....yM.,oa...)I..R.$I....

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	634399
Entropy (8bit):	4.889397548101686
Encrypted:	false
SSDEEP:	1536:kioC8DSJoiZp/6vn9YqsdJ7T2IqsWa6O7oM8ohC60GWc0VXfeHLbRhk1f4MqkfIv:uu7dJ7TVqsWa6O7n
MD5:	325AB772AA0623E61D03FC94BFAF535A
SHA1:	BE32585F4D11F01D8FBB6AA7B022572932EF7AD3
SHA-256:	A167D6A30D776E0CCD9C02D58323AAF30A8274D6E04C41127AEC107349684CB8
SHA-512:	767A6BB306A67BCF0EC0CFDEE4E991C4D3F31DF224CEDE8D8EF0ECA9766010C79E48511EF18C2DE99572545DD78A61A24371C974C8167F6F5727611B3C2578B7
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/1.main.css
Preview:	.root-component iframe.child-application{-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;border:0;margin:0;padding:0;border-radius:inherit;position:absolute;inset-inline-start:0;inset-block-start:0;inline-size:100%;block-size:100%;visibility:hidden;opacity:0}.root-component[dir=ltr] iframe.child-application,[dir=ltr] .root-component iframe.child-application{left:0;top:0;width:100%;height:100%}.root-component[dir=rtl] iframe.child-application,[dir=rtl] .root-component iframe.child-application{right:0;top:0;width:100%;height:100%}.flex-page-viewport{position:absolute;inset-inline-start:0;inset-block-start:0;inline-size:100%;block-size:100%;overflow-y:auto;visibility:hidden;opacity:0}.flex-page-viewport[dir=ltr],[dir=ltr] .flex-page-viewport{left:0;top:0;width:100%;height:100%}.flex-page-viewport[dir=rtl],[dir=rtl] .flex-page-viewport{right:0;top:0;width:100%;height:100%}.flex-page-viewport .flex-page-content{position:absolute;inset-inline-start:0;inse

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61121)
Category:	dropped
Size (bytes):	2059907
Entropy (8bit):	6.281709126213554
Encrypted:	false
SSDEEP:	49152:Y43TeLepq6oNvxYeKNbGTFsT+3SvfV0/KibQyzxyjU:YjCNbGTFsT+3SvfVeh7
MD5:	FC8D4FE929094F6F43E47192608E5AFD
SHA1:	FAEC1E46946783BB470190C804AA2C2111B776C2
SHA-256:	FB68516E45AC0E05BD3C92F88954CBB6B468200DC5F1BA94C8BA47CCFD468FC2
SHA-512:	6073522F6E9E771DB774DC6C0CED8BB1979CD7E928C82E0200889B902DBCF7148AC08E224E4A6E4ACD5704D0B8F6510A5336D7E94B94A8D8F838D0804C8ADAEB
Malicious:	false
Reputation:	low
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999665275561376
Encrypted:	true
SSDEEP:	24576:4T6mWHb8V0AE96KIw1yF1X/YwUXlep2ipmExS3h:rmyb8VjE0KsD/Ywi7iFxmh
MD5:	8CF94CC055011766874441BFADBF9A87
SHA1:	D6E7B90FEBF50BBFC14A6632842CFE0C9A128EE1
SHA-256:	9F58F3140619487F340B8EF4B0D1A947BF70AF7ED9AB91885663752D5060E9F0
SHA-512:	C03BD9E456BCBEE10D951BEE8C2F9AD4E2C6DFA67D5D0DA6AEFB5676B7E4CB704FB903D5981336CC17285A4F054755DD7B9CEA2DA21E2A8ECDBB1D52FD3016F1
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/fpo@1x.mp4:2f838c66fbee78:1
Preview:	+....PT../..#....a7.O/8C..R.....%jB...4...b.....,..?.J.....Z;.BI.s..._..B....QCQ.._tW...q..e..' .F.p.".m6.7l.$..4....C].1.8A.UJ.:.$~$?Q.d.E.tY...y0...?.V....Gc+V3......D.`.h+....@.Y.......,.....M..,.[....71.x.u\s:...1.S....:..R`.Uv..U.C.}z[.}..#Rl.z...c..ij.k<../Qn.0......?%b.....o:..N.y.?.3%......d....;TR.(..).[?..[......}w...?.S.~z..Rj&..FV.....E...... . ...dD..-.q.E"..\..@x...o..#A.V.j.......\.....&.E0.......c..p.&Ai.h..'..E.K...<Y.a..\....0..k.-[.-..&q/.q%T8..R.b..Z..~.n1..+9.l.C5-....n.......n..Qb....w.B.]....wg.p.4...Lh.%....}^.'...y.~Ut!H.Nn.D..\.,......h....i'.l ......s.I.].q.x[.,...8H.Z.<...&..V?...].w...........=...@....O..[.9}8&......s.o.\|..:...).~...s...i.6.F....E........`...Ga..~... r.9.pag.9.na..u<R...%....?.. Q...z!w...r.2v....._...`...U.q....QU>/.V..._"uR1.-../.W.{=...B....`$C.]I.".X..R..%N.h..a?.pe.v..EaZ...F$..Z?..T.b.....!{..c....].i=. ..U.0.`...p.1...F1.v....z..1.E..k.2.$.A...jx.?...D..j..J...4.5..3.NZ......bN..=Y.."u..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 35, 8-bit/color RGBA, interlaced
Category:	downloaded
Size (bytes):	4344
Entropy (8bit):	7.940745446890522
Encrypted:	false
SSDEEP:	96:6to98W1PrmaT6yvofu3TTYTYAbq2qLZXFMfnwwr3Xu2USgPEUneKz:6qGWlrmaJSu3TTaYsq2+XM3M3MULz
MD5:	22E1C1E59B39AAC2F6940CCD293018FD
SHA1:	80C1C0B64A5F5E24D1758AD6052904E840373611
SHA-256:	E8327C3DB89A35D3F9902126BFB4400C5AF64E30C70201724153377DC83B4638
SHA-512:	D5D45DF287074C8BE5619C35AC7AA40C416BE8FD93A52A04C2601EF9FBF76AC1471C7A0924DF2E120EEC467073F039E3EB81D8BB4C5EEFFDE88C7A58E4B28A95
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/notification-pages/2020/notification_page_logo_145x35.png
Preview:	.PNG........IHDR.......#.............gAMA......a.....IDATx..[.t.E....&i..Z...?.IMr.e. {...RPP.B.[u.v.].t9.... .n..E.X..K.[<.Z..V..mA#.O..M..VWBK..ir...>..;_.{s..n...s.3.....;..3......4..Roq8...m\|.H[iqY.]6OXq.......U.\P^..t6.+..W..3..a.\\[{.....2..f.[.r.c.0.).z..h.>WV...>.Yy)...p........p....p...K...e..p.om......W...&.........v^QY.^..89P.....]..z;ZL........T.j..d.....y.h.By...q.2..............?2....UJ.[k.c.l.`........#..J.C.6S..Hg;.^.4......>).f+.O.T\......+..3.\|8\3...q....c.`c..>..e.#...9........l...R..ue.v../.h..}.Rs.t._&.^.x5~.m..m_.\.Tw0.`.>..'3..;p`.i....e......d...-j...p......3d...Ny......F...kG.%R..WX...?M..X.G..nb~A........6....}Ge..\.2.h..XRB..3....l.(\...$..M...c0.z:Z..<...K-.z..w..'..W.?.7.......1..M..m%.UR^o.......]}..)+...K.8...p.O.d`.s.7.N...@CP]]..W.b.`.u.D...N.b...L...G.s=.Y.A..t^^UoK.a.a.N1.f;63.mylN.jO.1..'f..).....j.,.....z:.....Ux.cJ..p.. .%.qd}W[..L3,......:..;.y..==.M..t0....s.v.......'.s` ~.v..!.t...<.(MJ......a.......w,.....

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999687007676359
Encrypted:	true
SSDEEP:	24576:L09YLjUw+mqsoUM3atcBCoi1s4XOeZd22QCsWIpV3mtKFe90jt5cU+:0YsJE+q3MCE2QCsWAI09+
MD5:	F3D1E309CF432576842F23D9582ADD03
SHA1:	053254FB014BE13300265C6080581AEF6858ED9D
SHA-256:	D4658E16847A99E8BEA4D80E55D1BB5974C0C92DCA5C736E2D307C884627C2C8
SHA-512:	30F9D4C89E051CBBB08601BE4AB42C256975E61BF7AE2BD42F79EA84E9B350C28B0F330774EB0CDBCDD367395E3A6B2D9C7D7613C5E81B36E898E51AF5180990
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/fpo@1x.mp4:2f838c66fbee78:0
Preview:	... ftypmp42....mp42iso2avc1mp41....free.7\|.mdat..........E...H..,. .#..x264 - core 164 r3065 ae03d92 - H.264/MPEG-4 AVC codec - Copyleft 2003-2021 - http://www.videolan.org/x264.html - options: cabac=1 ref=16 deblock=1:0:0 analyse=0x1:0x131 me=umh subme=10 psy=1 psy_rd=1.00:0.00 mixed_ref=1 me_range=24 chroma_me=1 trellis=2 8x8dct=0 cqm=0 deadzone=21,11 fast_pskip=1 chroma_qp_offset=-2 threads=12 lookahead_threads=2 sliced_threads=0 nr=0 decimate=1 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=8 b_pyramid=2 b_adapt=2 b_bias=0 direct=3 weightb=1 open_gop=0 weightp=2 keyint=600 keyint_min=60 scenecut=40 intra_refresh=0 rc_lookahead=60 rc=crf mbtree=1 crf=5.0 qcomp=0.60 qpmin=0 qpmax=69 qpstep=4 vbv_maxrate=20000 vbv_bufsize=25000 crf_max=0.0 nal_hrd=none filler=0 ip_ratio=1.40 aq=1:1.00....+.e..........So......&_Cu%.....:......w]....Ap.h.....h....7..BP.,l.o...O..V.\.yLm2.....I..9.4....5.!..t'.c...J.O.v......([...3.cIB......8..."P..$o.X....C.6.)W....he.i...G+g...m.>..'

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	downloaded
Size (bytes):	404935
Entropy (8bit):	5.385910554462082
Encrypted:	false
SSDEEP:	3072:Lr0a+V4eEkxMRqkXh2q3f2U6cPuSyY5wHu3LuYUffTSo:I16YqP2U1uFE2LB
MD5:	FC6B025072EBDB7024244F13BAEDFB40
SHA1:	A03914A0551F6141BDA8926FCDD439D64A9AB520
SHA-256:	ED598909E1B02A02360E3B1584A196AB48BE370ED534FF38BC6D3EE479BA1196
SHA-512:	3A47C228432CF86C6AB0AC7E9F144802588A808F7F98F6F45E4023789559D88337E6B6780693EF8065CC5DC22599300424F32997E5D8467DABFCD6E2BF909DFD
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/module-assets/home-3d9cc87dfa00944927b0.js
Preview:	/! For license information please see home-3d9cc87dfa00944927b0.js.LICENSE.txt /.window.webpackChunk_idms_private_appleauth_web_sa&&delete window.webpackChunk_idms_private_appleauth_web_sa,function(){var e,t,n={8054:function(e,t,n){"use strict";n.d(t,{Kq:function(){return E},HY:function(){return M},Eu:function(){return q},VP:function(){return $},$V:function(){return K},LU:function(){return qe}});var r=n(1701),o=n(4747),i=n(4787);let a=function(e){e()};const u=()=>a;var s=n(6166);const c=Symbol.for("react-redux-context"),l="undefined"!=typeof globalThis?globalThis:{};function f(){var e;if(!s.createContext)return{};const t=null!=(e=l[c])?e:l[c]=new Map;let n=t.get(s.createContext);return n\|\|(n=s.createContext(null),t.set(s.createContext,n)),n}const d=f();function p(e=d){return function(){return(0,s.useContext)(e)}}const v=p();let h=()=>{throw new Error("uSES not initialized!")};const y=(e,t)=>e===t;function m(e=d){const t=e===d?v:p(e);return function(e,n={}){const{equalityFn:r=y,stabil

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 98995
Category:	downloaded
Size (bytes):	14581
Entropy (8bit):	7.9835366772082
Encrypted:	false
SSDEEP:	384:amRet11PnOKZwL/eHzdvjPxqEpJaqp/cKm0SeG+ROeVCGDYr:amkT1Wd/eHzdvjPxqExpkP0NG+RnvDYr
MD5:	5E917A087579A9B6136514A5184FF244
SHA1:	426E24BE032328922F80EC9B909227ED8E367EE1
SHA-256:	53A964866818C857BEF64A3E96F6D71F1968DE9BF181105287A50EC8F9D296B1
SHA-512:	E5428A3C971B898D6EBDA6898A3A185366BF6270D8D695EA566E5CEFAB8B587BBE015B7614FE05CCD43319E368B3FB99B5ECD23C6EB53701837F269971465C27
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css
Preview:	...........}k..7..w..:96l.$]O>.1.........r..3.Qd.....bQ-..... .@..e.I=.....D".H....o...M..]7\..<G..E...7.....C.<..(..4..f..~...............h8.....%J.5.y......?==-J......[.u..........e.).../...OU..6.....Q....{WG..............?...a.q_..B..W..~hvm={U^...U.C...}.+.C...=)..y...:.e..~..y..T.....;.......rn.....vo.x...k.t.W....$...:..9.....(z.J._....%#.S7\|..;.}.^..I..Q<.{..-+.......&T.._(..S.}...~..e._..0B.?....A.y.w....]........UG:........8........y....z.z......7O..E}..........Qs...-....KC{.!..(?..X.....CM..."R.....-Q?...=.....L..E}.u..[.\|.g.(.e..........a]..Z......ho4'....;.]E.mvW...e{%5..mN..@..%:{E;...Rp.?6'A....;.<#.......w..r..y...X............D..Q..x/.UE4Dp...r....\..5......&..?..;6.+.gw./..\|..qR..u....7#.;U'E.v.AJ.m..T..{:`...&..k.....`....7u[9y$..x...w]_r.....U.s....:'....8...........N...y.uM....a[.;j../.~.....P....{.^..tF,......9...,...D.....Sl..I.t9.F......CY.vr9..,wo..r..8......\|z.....E..(......K.gCQt].

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47124), with NEL line terminators
Category:	downloaded
Size (bytes):	241706
Entropy (8bit):	5.327937354961122
Encrypted:	false
SSDEEP:	3072:gm4cgIKAQa7XwCRPM6naxlBQ/mhhHg/VBymzrgG:+clKXaTwUPmQ/mhhHEzyrG
MD5:	FB9CDEC9DC81C2FC0710CAB9204CFD34
SHA1:	3EC6F4BB754216C3BCEAF077AA2B3E36DAFC19FA
SHA-256:	8E7EAEA42F149031D0A2E4A7B8C3E52824B585B77737E3435DB788E4826694CF
SHA-512:	C1F4F4A5AFCEED38289DDE70D21DD0B792F8F199A0EB8A71DCB8D446C07BF66B0A7FD326C93F3C1FF35C453F6B93AA8B563C1E050B25A8691DED6EB437E044BC
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/445765738/webSRPClientWorker.js
Preview:	!function(t){var r={};function e(n){if(r[n])return r[n].exports;var o=r[n]={i:n,l:!1,exports:{}};return t[n].call(o.exports,o,o.exports,e),o.l=!0,o.exports}e.m=t,e.c=r,e.d=function(t,r,n){e.o(t,r)\|\|Object.defineProperty(t,r,{enumerable:!0,get:n})},e.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},e.t=function(t,r){if(1&r&&(t=e(t)),8&r)return t;if(4&r&&"object"==typeof t&&t&&t.__esModule)return t;var n=Object.create(null);if(e.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:t}),2&r&&"string"!=typeof t)for(var o in t)e.d(n,o,function(r){return t[r]}.bind(null,o));return n},e.n=function(t){var r=t&&t.__esModule?function(){return t.default}:function(){return t};return e.d(r,"a",r),r},e.o=function(t,r){return Object.prototype.hasOwnProperty.call(t,r)},e.p="",e(e.s=849)}([function(t,r,e){var n=e(1),o=e(40).f,i=e(36),a=e(28),u=e(179),c=e(135),s=e(114);t.expo

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60050)
Category:	dropped
Size (bytes):	577883
Entropy (8bit):	5.534201114776914
Encrypted:	false
SSDEEP:	12288:aYSsK4GZvdM3qaMZpdTwGpIXN4BSWquq2iGuFDeBD1qWPH+LLIIHQ:TK9Tw2
MD5:	E9A08F695655A19BA3E7B741B791F0E9
SHA1:	F248C2604A23EC1CC3510595A35D87708E626476
SHA-256:	2FB77285AF8EB1F9BD68C3190A434C52E48D7DE25B3A3AE7DA2DCB754F39775C
SHA-512:	9E28BFCF06ADA3114FFBD703572FF8CA4BBE2F623B90955AC486E5CF6FF60A39F0DB641F79462BE1A5006A452E5E673992F085BB48CE4F6C2703F60FF9E511D8
Malicious:	false
Reputation:	low
Preview:	!function(e){var o={};function t(r){if(o[r])return o[r].exports;var n=o[r]={i:r,l:!1,exports:{}};return e[r].call(n.exports,n,n.exports,t),n.l=!0,n.exports}t.m=e,t.c=o,t.d=function(e,o,r){t.o(e,o)\|\|Object.defineProperty(e,o,{enumerable:!0,get:r})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,o){if(1&o&&(e=t(e)),8&o)return e;if(4&o&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(t.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&o&&"string"!=typeof e)for(var n in e)t.d(r,n,function(o){return e[o]}.bind(null,n));return r},t.n=function(e){var o=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(o,"a",o),o},t.o=function(e,o){return Object.prototype.hasOwnProperty.call(e,o)},t.p="",t(t.s=1)}([function(e,o,t){"use strict";var r=this&&this.__createBinding\|\|(Object.create?function(e

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	440
Entropy (8bit):	4.69673655933992
Encrypted:	false
SSDEEP:	6:qL/sGcsnO4aAEdpaWkCXALaDATDQUwKPdPrXavS+jiWLMQORfh0Hos4oXQTojbeD:fin4AEdoeGh1K6+z+fhoh4oXGojbzQL
MD5:	ACA8A77A9882B34746D8121A869BE3F5
SHA1:	0428852C5A0DD8A373142B79C019ECA03FD25DFD
SHA-256:	8F82BA3108D295567D04C3738C840C1865EF236DEADB59C1EBB98502E05F952B
SHA-512:	5B8CD587026F17DD6D326FB099585118850A0F22560C1E40A870FE22FEBB4BAA142F42566F6D8A8682E0CEC59EE9666279EDF092D86AF7BC9AECA64A2E00A16F
Malicious:	false
Reputation:	low
URL:	http://hybrid-web.global.blackspider.com/favicon.ico
Preview:	.<html>. <head>. <title>Unreportable error</title>. </head>. <body>. <p>The proxy has refused to serve the following URL but does not have. a page configured for notifying you of this event. Please contact your administrator.. <p>URL: http://hybrid-web.global.blackspider.com/favicon.ico</p>. <p>Notification name: blocktransparentroamingtemplate</p>. <p>Matched on rule '_internal_MustAuthRule_'</p>. </body>.</html>.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22124
Entropy (8bit):	5.311977646975752
Encrypted:	false
SSDEEP:	384:c8i6a2S0gvVzN440/h7ZCkZYju3TqzabHFrVBtBxyYgKdvzGKou+rFVkhL3qqBmJ:c8i6a2S0gvVzN440/h7skYjdzabHFrVs
MD5:	C4B61D2A21F2723EA6D6F6A68412D1F2
SHA1:	1ACB40561D2D5E9E43D061B39B2C8C0CD3E8CCD2
SHA-256:	3031AA1B654CA979F7577E4706173D35A9D8FF35CBDB80A8E4911FD9423E2BC4
SHA-512:	6E2ED976F8B34B0D36B28FE1B7A4F21E45665C6644ABDDF25044FDA93ED6B14DC2A2E0C787F79D7412866C08622085401ED6E9D02827C5ABDDA9D103B81BE8F9
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v3\|SF+Pro+Icons,v3"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2019 Apple Inc. All rights reserved.. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v3/sf-pro-display_ultralight.eot');.../ (C) 2019 Apple Inc. All ri

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46673)
Category:	dropped
Size (bytes):	134281
Entropy (8bit):	5.315833008606401
Encrypted:	false
SSDEEP:	1536:McLDh9iasJAJWjL0//GL7+eYWaxsZdyriLM5ZabFkBC2Ekp8Br/SReLjK/JUmtvu:5s2JWqOLM5ZKM64eJYIgYrojr/Nmn
MD5:	B293E734E70FDD3941ED23CB75D798A7
SHA1:	45D46E2054A48DE58993A73E015E361AF58AE48C
SHA-256:	FA4CB957A209F05B0E7AAA99012E69B84E937A3CE6F5334064DC5572D3EF0EDE
SHA-512:	D8A8938D7F3C14D79A9CA2D5A8D4794653BE0B6E7A56CF6CF72237A2E13301E9A2DA2735CD1D17062F971FAA0F09D6DF85062458A74131EAD4F7F789C5C49DFD
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var i=t[r]={i:r,l:!1,exports:{}};return e[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var i in e)n.d(r,i,function(t){return e[t]}.bind(null,i));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=865)}({105:function(e,t,n){"use strict";t.a=function(e,t){return e===t\|\|e!=e&&t!=t}},106:func

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	dropped
Size (bytes):	280773
Entropy (8bit):	5.625798439586788
Encrypted:	false
SSDEEP:	6144:Jo5lj2X9UNhmneeIp3CZsenIhLmFjF7ZatX6EgvHr:Jo5lO+mn5ZseIxmFjFFatxgvHr
MD5:	F514376E4D7D91C8A38FADF21D3503C7
SHA1:	8DE95E802B82AB454A47CA9528E9727380120AFA
SHA-256:	FFA9F71A43BDD16DBF1BBB33BE0834D77BF03F61C927E2DA2BF557D7C6259B67
SHA-512:	F04BBE1F60F2170C7A23F71BEF66CA2D18EA398D17D1F53C04259012E650FC09DCC8F17F51263767B102FE6E64D0E291C01F40A8C48CF394200626CBB6197C95
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65453)
Category:	dropped
Size (bytes):	404935
Entropy (8bit):	5.385910554462082
Encrypted:	false
SSDEEP:	3072:Lr0a+V4eEkxMRqkXh2q3f2U6cPuSyY5wHu3LuYUffTSo:I16YqP2U1uFE2LB
MD5:	FC6B025072EBDB7024244F13BAEDFB40
SHA1:	A03914A0551F6141BDA8926FCDD439D64A9AB520
SHA-256:	ED598909E1B02A02360E3B1584A196AB48BE370ED534FF38BC6D3EE479BA1196
SHA-512:	3A47C228432CF86C6AB0AC7E9F144802588A808F7F98F6F45E4023789559D88337E6B6780693EF8065CC5DC22599300424F32997E5D8467DABFCD6E2BF909DFD
Malicious:	false
Reputation:	low
Preview:	/! For license information please see home-3d9cc87dfa00944927b0.js.LICENSE.txt /.window.webpackChunk_idms_private_appleauth_web_sa&&delete window.webpackChunk_idms_private_appleauth_web_sa,function(){var e,t,n={8054:function(e,t,n){"use strict";n.d(t,{Kq:function(){return E},HY:function(){return M},Eu:function(){return q},VP:function(){return $},$V:function(){return K},LU:function(){return qe}});var r=n(1701),o=n(4747),i=n(4787);let a=function(e){e()};const u=()=>a;var s=n(6166);const c=Symbol.for("react-redux-context"),l="undefined"!=typeof globalThis?globalThis:{};function f(){var e;if(!s.createContext)return{};const t=null!=(e=l[c])?e:l[c]=new Map;let n=t.get(s.createContext);return n\|\|(n=s.createContext(null),t.set(s.createContext,n)),n}const d=f();function p(e=d){return function(){return(0,s.useContext)(e)}}const v=p();let h=()=>{throw new Error("uSES not initialized!")};const y=(e,t)=>e===t;function m(e=d){const t=e===d?v:p(e);return function(e,n={}){const{equalityFn:r=y,stabil

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	downloaded
Size (bytes):	936715
Entropy (8bit):	5.4385675853741935
Encrypted:	false
SSDEEP:	6144:hM/fa1A6HC80PQZSI85O1+Bh0h6macDUj9VJMN4XTQTKNK4mu2TMmvFjS9ee5:hM/h6HC80880Dywv497
MD5:	02968EC175293EB955B717E1586D1B23
SHA1:	D259655E27801754A2A1A6392BFC8847D5EFBCE7
SHA-256:	0231B718AB03807406F6A088DD722D4747E0E0BCF73D130D0C448554DFA7D4C2
SHA-512:	9F5EE54A61EECB13E60BCD1C4BAC9E4D0AB16F5A3C2B54F3F981AFE3659A3444E0CC8B929CC0994CE63D0015483F76CB58B4DEADB27BEF74D4310D9B717BD8BB
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/3.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	5.250414944135716
Encrypted:	false
SSDEEP:	3:GMUPA3GndKrig4ZclBF5YfuTp/2UuzIHgbRR:vUPYGnWD1PGfuTxMz+UD
MD5:	0112C3D6C20F0ED6F8C2BC05D51B747E
SHA1:	72A217344EF54EFBAA6DEE6681EC2F76C7E86D8C
SHA-256:	4DD4E712C0307525A3D863EB72EEAB5067B320FE498956CF2450C0CC419DA24F
SHA-512:	395D1AC3CCC0CA0235B3E05B8986DEB76BB78BF5E6CA0FA0208EA78D509C65944F3DA6E88116EDDD1DC5919DC7B33F593B9EE88EE6F3327BBE494322E2990727
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnXxKN5APiXQBIFDVuSjeESBQ3byczYEhcJ6GKHJBBNU0USBQ1bko3hEgUN28nM2A==?alt=proto
Preview:	ChIKBw1bko3hGgAKBw3byczYGgAKQAoNDVuSjeEaBAhWGAIgAQovDdvJzNgaBAhLGAIqIggKUh4KFCFALiQjKl8tPyYrJS8sKV46KD08EAEY/////w8=

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	8852
Entropy (8bit):	5.2457434063756025
Encrypted:	false
SSDEEP:	192:PQntGOjOqyqVaKOiZYk56bb99HRNzkkkGvktRESmAYKEJ2:PQnt5jOqyyaViZYk56bb95RNzkkkGvEF
MD5:	71017847D439506E008DCE42714BBAD1
SHA1:	DBA8B5846CACC1F2A58DC81BDE50292C913EE3C9
SHA-256:	82B8DAE49941096EA066F74ED5FA44A3CFADC30E75BFB3FD3C93976C099F3A40
SHA-512:	15FAC84EB3B6F924B7ACCF45D4CBEC2A0B1268DFBB88B0346E3D4440508707DB25ACA5A6C08E231C7987CA2018A3CC57588BD84CEF9BAF8458B94A49994C629B
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/wallpaper_dark.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1749" height="869"><defs><radialGradient id="d" cx="46.062%" cy="120.162%" r="99.121%" fx="46.062%" fy="120.162%" gradientTransform="scale(.5561 1)rotate(-31.01 .644 .539)"><stop offset="0%" stop-color="#FFF" stop-opacity="0"/><stop offset="66.572%" stop-opacity="0"/><stop offset="84.431%" stop-color="#FFF" stop-opacity=".082"/><stop offset="100%" stop-color="#FFF" stop-opacity=".253"/></radialGradient><radialGradient id="h" cx="19.041%" cy="98.341%" r="117.611%" fx="19.041%" fy="98.341%" gradientTransform="matrix(.64634 -.32642 .2232 .94522 -.152 .116)"><stop offset="0%" stop-color="#FFF" stop-opacity="0"/><stop offset="77.677%" stop-color="#FFF" stop-opacity="0"/><stop offset="87.851%" stop-color="#FFF" stop-opacity=".08"/><stop offset="100%" stop-color="#FFF" stop-opacity=".25"/></radialGradient><radialGradient id="l" cx="-21.087%" cy="110.982%" r="136.388%" fx="-21.087%" fy="110.982%" gradient

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6756
Entropy (8bit):	4.638324890211791
Encrypted:	false
SSDEEP:	192:4KLcWazhi2qaOZBwK9m1VfkNV4eCwX8owDiU2+6jppkvwUvi/qHqyao:pgWali2aZ6K9m1C4wUDivDiqql
MD5:	D95841F7F8CA1E64B29B14EC1BF8B625
SHA1:	99ADB1F42583DF74F9529B472EFC3D95921A7A01
SHA-256:	F46F8884CEAA4D6AECBAD6B256014C541AB5F892B0D403F7B3F4E4CE9C6673D9
SHA-512:	74738A9C444E8E42E4B153416B2A84C9394872E3DA70F651D2F63A08EEDAE27AEAC8B59D3C915F497F44244AD85950BDDDA807B248B3D21297475F48C3834EA5
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/431342789/boot/initBootData.js
Preview:	"use strict";.(function (){.. /. bootArgs has the structure:.. bootArgs.additional = {} full of known arguments with specific js that must be applied,. ex: functions, string values that need to be manipulated prior to being set, etc. bootArgs.direct = {} keys/values which can be set wholesale into bootData.. /.. function populateFromBootArgs(bootArgs) {. window.idms = window.idms \|\| {};. window.idms.app_config = window.idms.app_config \|\| {};. window.idms.app_config.bootData = window.idms.app_config.bootData \|\| {};. var bootData = window.idms.app_config.bootData;. bootData.canRoute2sv = false;.. // Process all direct fields into place. if (typeof bootArgs.direct === 'object') {. Object.keys(bootArgs.direct).forEach(function (key) {. bootData[key] = bootArgs.direct[key];. });. }.. // Functions for setting the the additional variables from the bootArgs. /*. Function to get the value at bootArgs.additional[pathElements],

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3148
Entropy (8bit):	4.8385665571897105
Encrypted:	false
SSDEEP:	96:SIA6oS8kHU/TBorI+bpgllnVk0/RVN+iRV/M+TL6AgmCgbL6agMzKj:Pr7HcTBolFqnTNFT/MQ6/ev6xMz2
MD5:	91F9C2C7FBAE8283E3283104C97BC49C
SHA1:	9744B697B755C871547AE683C1774E943D2EDA82
SHA-256:	C632443218D81149FE7FC6DADD8EB351D00C841B2349902AAAB8CB1895E87642
SHA-512:	8EEDE4196193AF658F70AA80B97DC579F82ED8CCC4C89EA90A6D7AE1AC869960993F4968751174859CF8276F99ECD3AD619B0915711E6F82476550BB22188687
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/locales/5/en-US.json?clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db
Preview:	{"locale":"en-US","date":{"ca":["gregory","generic"],"hourNo0":true,"hour12":true,"formats":{"short":"{1}, {0}","medium":"{1}, {0}","full":"{1} 'at' {0}","long":"{1} 'at' {0}","availableFormats":{"Bh":"h B","Bhm":"h:mm B","Bhms":"h:mm:ss B","d":"d","E":"ccc","EBhm":"E h:mm B","EBhms":"E h:mm:ss B","Ed":"d E","Ehm":"E h:mm a","EHm":"E HH:mm","Ehms":"E h:mm:ss a","EHms":"E HH:mm:ss","Gy":"y G","GyMMM":"MMM y G","GyMMMd":"MMM d, y G","GyMMMEd":"E, MMM d, y G","h":"h a","H":"HH","hm":"h:mm a","Hm":"HH:mm","hms":"h:mm:ss a","Hms":"HH:mm:ss","hmsv":"h:mm:ss a v","Hmsv":"HH:mm:ss v","hmv":"h:mm a v","Hmv":"HH:mm v","M":"L","Md":"M/d","MEd":"E, M/d","MMM":"LLL","MMMd":"MMM d","MMMEd":"E, MMM d","MMMMd":"MMMM d","MMMMW-count-one":"'week' W 'of' MMMM","MMMMW-count-other":"'week' W 'of' MMMM","ms":"mm:ss","y":"y","yM":"M/y","yMd":"M/d/y","yMEd":"E, M/d/y","yMMM":"MMM y","yMMMd":"MMM d, y","yMMMEd":"E, MMM d, y","yMMMM":"MMMM y","yQQQ":"QQQ y","yQQQQ":"QQQQ y","yw-count-one":"'week' w 'of' Y","yw-

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (452), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4894
Entropy (8bit):	5.095457721308081
Encrypted:	false
SSDEEP:	48:GN5aupAKLgGVi/13YjDIVj9HcpJMuPSxtOgJGgdi5ekP74rbDr:GN0uqK8Yi/1Fj9uMc0EgA2UWr
MD5:	BE96DABAE18C8DB017C28350CF6F1E97
SHA1:	52F1369212D2FB21B8FDFAAF805FCF401D95B493
SHA-256:	4454E5D57EDE1DC46EAD9CD0A3203C146014EAA97186D4D36F691015B2A980F4
SHA-512:	E7EC286870CC3609D6AB2816813236B173A8B3954DC654C2C1E9DAE8FA13BC2BBF205D7202F7E563C7425002D802B4B690269E8CB01978D459704BCD8B8ABE8E
Malicious:	false
Reputation:	low
URL:	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=scan
Preview:	<!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//en" "http://www.w3.org/TR/html4/loose.dtd">.. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.. <head>.. <meta charset="utf-8"/>.. <base href="http://www.mailcontrol.com">.. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"/>.. .. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css" type="text/css">.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css" type="text/css">.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification.css" type="text/css">.. [if IE ]>.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css" type="text/css">.. <script src="http://www.mailcont

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5139
Entropy (8bit):	7.845848077175545
Encrypted:	false
SSDEEP:	96:uQXvOXGhJ0tzNOViyIkMgevg8Xm09S5AevhnMsYG:ufg0t7yyX4BAe+sYG
MD5:	77A3A0B185162C69866163A6EEB0E943
SHA1:	734279F002A37E3D5F7253360DFF61638D0C3846
SHA-256:	322F28A6CD99566089B035E83C4F580504FC5142F62B8C758ECD896121D032ED
SHA-512:	6679A3C8DFF6F2F78D4E3787A02B35A3BB58F0BF9E851D9224BAB3ED0EC65E2144C8F151CA80D7E124709D916EA4C312F2F401CB78BD827116857E111D33228C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...<.....:..r....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:07801174072068118083B0C717926B30" xmpMM:DocumentID="xmp.did:38AF328D63BE11E2BCA885484A8CF26D" xmpMM:InstanceID="xmp.iid:38AF328C63BE11E2BCA885484A8CF26D" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FD6D15A33E2068118083FEFAFED61F9F" stRef:documentID="xmp.did:07801174072068118083B0C717926B30"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.....AIDATx..[.p\.y..w%....Vk...%....L..i..BH.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65021)
Category:	downloaded
Size (bytes):	3351448
Entropy (8bit):	5.447999745278466
Encrypted:	false
SSDEEP:	49152:f+aA5moPniGnw1PmGqMVCJHSq7wG/UJ1TkMpocPjRalPUT7zs:fPTAnfw1PeMT7g
MD5:	9F4BEE4D660ECA6EA7DC3C699ABE16D2
SHA1:	35BEE90F1CDF31171039FA33D4459F322A8C87DD
SHA-256:	930AD003A2B67B77285719E5ACB631A428DA4E19DA74E5DC88A0F39125BFFBD5
SHA-512:	1BF7E8FA5FE5182C249598879CB9728C8F1B660A700F14FD99642718258CF11122CA0CDC0B57F81F3C2C4B0BAFB14E1AC270EE4CA3470F0EC9692B6E6373115B
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/applications/calendar/2426Project39/en-us/main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/applications/calendar/2426Project39/en-us/acknowledgements.txt for licensing information.. */.!function(e){var n="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{var t=n.performance,o=n.Promise,r=n.MessageChannel,a=n.requestAnimationFrame;if(!(t&&t.mark&&o&&r&&a))return;var s=function(n){return t.mark("chunk-"+e+"-"+n)},f=!1,i=!1,c=o.resolve();s("exec-start");for(var u=0;u<5;u++)c=c.then();if(c.then((function(){s("exec-sync-end")})),"undefined"!=typeof window){var l=function(){f&&!i&&(s("after-paint"),i=!0)},p=new r;

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	499023
Entropy (8bit):	7.987511988906666
Encrypted:	false
SSDEEP:	12288:F26lce5ixm9S0hK3qJotVSb8iWshxQFL7WfmzS:F26vMP0h6Ro9WgzfmS
MD5:	7F5DDACFDEC74AA66381D350C4F40EB4
SHA1:	3BB1CA641A4F835210083281AF64DAF435AB4904
SHA-256:	15DAA2ACA6EAA9AE339078AFAABD6FB2C6507CF537BF33209FE05A3DBFB6E467
SHA-512:	DB1F67F6E77E76CE618384E7FDD76932B198FCED809930463AB18A6F07656B71D1633AABD22D862DBA7B59DB1BEC6EE51F3A705A98D96237CB4E94E9C9CE321A
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/fpo@1x.mp4:2f838c66fbee78:3
Preview:	..U...a".X.]p..Mi.r.a.L..6.}R..V.#7w.;.!..0....F.w.....e....kaV.W.7....o.).Z...E.q.nu.-:.P..?..\|......(.....E..a..^.\..G8..0..........(.:..m/.....M%........`d........c.7L[..\.G.u9%t....N..J....0..uz......b....8u......8...9.TP.P..'y(.{.....g.5..o...I..,].A.H... .#6.2.A~4...$%.A.z..........FoP...w...K\|.....W.ly.....y!>..Nu.g2.`A..W...bm...6U.B0..j....3..w...$Q...&O...<.<]...\..t-.....QKD......5...=...\|+...B..s._.i1.I.UakM.^.x.,..........a."FL.;..a^.....n..9/6\|.;...$.a.`.VN.5f..w6,_.. um.Ui.J.......!9(&.{y$.Q.x..a..b..a2I}....c..t...nM...<..T.2.ht#j.Y:.@@.b..>.!:...b......2..W]gZ.7.._..$.0....P.d\|mvz.`....-.j.......KyL.....4t......f5A5<..i...TV.k.S....c..`XV.'~'9F........$.L..s....,.&..q.'.3..A.yn/..=..71....;C1...m..d.K..k..{.....B.'....#.u.Q.....[S..--..+13...$.(.V...x..2...y.>.5...]....b.)#hEI...C.@..o..7!0K..?.N3DO..Lr.l.rjy.r......'..Pk... bg.v5.S..Gk....... ..,1*).-.r..S.%.S.TL=...ND..B.v5...h.'...9..[N...+......

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 23928
Category:	downloaded
Size (bytes):	5183
Entropy (8bit):	7.962044939169663
Encrypted:	false
SSDEEP:	96:YIm2TekEXHfG2LdoBPcj/PKBuK+MSlDmYJG3lP7nnZBgag+z0WCAGWJxb7pmdXi:Y3XBoBPYXKBuJlnydLCU0Wr/7cdS
MD5:	2D24C9B3A17B6F227A9ACE90A915EE36
SHA1:	8642427413055842CE3386BEAFE37FB65FCE186B
SHA-256:	56E5DF48D4DB05D03DD8BA4E73F708A06678DB62F3A8B2D5DE0B3C7DA54932CF
SHA-512:	194BD14C4541BAA0F8AFD4365AA1839F695256F5250984F4A38A2B981828CA1698552052F033C861ACDF5B5E1755C7D1D0B6416D7C437C4FDC4FD0550AC7126C
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/notification-pages/notification.css
Preview:	............ks...+...9Q.(..i.S;qZOs.M....P"h..H.I.q4.....@.......X,...b_d.,.e.!.(q.4.Y..2p..Sr..vgipG6]B.[:...NA..N.}....g......a..N./..nr.E~.#...NN.(......ZDs.\.5}.#e..^.A.%7NLC..U.2N..A......u.8.]Q..$....S.\.Y.'..7.ct...]..]re.4N......;%...w....:.kG.L...W ..074.._..m..XM..noo...(.}....&..x.DE.. .n.Z'L..\|v2%z..L.9q.P?s$..E...9...............eK.!.[\"..{.7.0.._..(.e.....%L$....qRk......7R......-.%.e.CluL%....FqAAFWYz...7..X.7.c..0L.e..h..y...r...~V..-.....?.L..J3..E.ob.....%8m.{..G....1.T$iB......w.....x.[..m+?.o.,x.................@.D.."....9...V....a{.J..9s.E.....&..9.O3F..H$$.%.C..`.EA....EQ?...Yg........G}.......!.....(.46}FJ..!.(_...$JPP.Y..?O..u.A..&....X.......e.>;`d..~.-...._..F3...~57......0..$.f.....4-@4..6.tm.~v.%......G.Iz....l:...=A....d..'a./.i.h.s......Y?}x....$a.Qd.....WW..8... ...:..".u........+P.d..Z.S...>..........]......YF...6T.^...O.......n..>)U...h..A.K.v.:l..U.B...c.g.<../&..i .3...n.W.C.g....l#..qec?.4....8O.oJt.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (61121)
Category:	downloaded
Size (bytes):	2059907
Entropy (8bit):	6.281709126213554
Encrypted:	false
SSDEEP:	49152:Y43TeLepq6oNvxYeKNbGTFsT+3SvfV0/KibQyzxyjU:YjCNbGTFsT+3SvfVeh7
MD5:	FC8D4FE929094F6F43E47192608E5AFD
SHA1:	FAEC1E46946783BB470190C804AA2C2111B776C2
SHA-256:	FB68516E45AC0E05BD3C92F88954CBB6B468200DC5F1BA94C8BA47CCFD468FC2
SHA-512:	6073522F6E9E771DB774DC6C0CED8BB1979CD7E928C82E0200889B902DBCF7148AC08E224E4A6E4ACD5704D0B8F6510A5336D7E94B94A8D8F838D0804C8ADAEB
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/jsj/99153411/widget/auth/app.js
Preview:	!function(e){function r(r){for(var n,l,f=r[0],i=r[1],a=r[2],c=0,s=[];c<f.length;c++)l=f[c],Object.prototype.hasOwnProperty.call(o,l)&&o[l]&&s.push(o[l][0]),o[l]=0;for(n in i)Object.prototype.hasOwnProperty.call(i,n)&&(e[n]=i[n]);for(p&&p(r);s.length;)s.shift()();return u.push.apply(u,a\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,f=1;f<t.length;f++){var i=t[f];0!==o[i]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={i:r,l:!1,exports:{}};return e[r].call(t.exports,t,t.exports,l),t.l=!0,t.exports}l.m=e,l.c=n,l.d=function(e,r,t){l.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},l.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},l.t=function(e,r){if(1&r&&(e=l(e)),8&r)return e;if(4&r&&"object"==typeof e&&e&&e.__esModule)return e;var t=Object.create(null)

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1324 x 950, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	213358
Entropy (8bit):	7.968202543812873
Encrypted:	false
SSDEEP:	6144:I4h6XA9Yv2dvjX8jdrq64EYcay5NsT20P:I4/Nxa/w20P
MD5:	616FA4B7B4CED3958818770EE3B68953
SHA1:	2B073C5F80E1850830E2275819D18BBE70BB08C8
SHA-256:	C49B9B2A18F9009BF2781A3884833EA9404E7359FE01B812DC45B317A77A1FF9
SHA-512:	8634C127C44C7EA76D07D3FFEEE3A79FC2A9DD2D9D0C8EEF0B3C6E91D1DA5741241815C732681A29468083123310DAE770FAF0933DC50976012AE212DBD0BE39
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/7cb9ecdad2b384754de394732519f658.png
Preview:	.PNG........IHDR...,...............A5IDATx^...o\......=.... .T%."."I..*aV.".Jm...=u...R[....F..R...,.D.T....;.....#q....;q.....g...].D.$I.$I.$I.$I.$I..F.$IR.GB$G.$I2XJ.$I......N..$I.KI.$...L....._.L#.7jJ.$..$I.d....k.....a...$.`)I.$.%s.C..]W..L."...S;{.,.].6.#.3%I2XJ.$I...(.V....O> ..=.,Y.>.qs."f>X!S.$..$I.d....Z9F.........G.&g.:_+G....3...$.`)I.$eL.&....B.....sO.~Lp..=ER...bgm.\|..3+B.ELI....$I.qr..%;Ar............B.X.\|..6.A..3..u$I2XJ.$I..q..1Y... .\|7BVE.3..M....Lr..u.g].\|..4kBfy#..1...$.,%I...d9NV..b....r.<3Yp.Z......+.`.....+M..p"......#Xh..4.I.d......@.........2.$..d..N....L.....{..d.....a..z.V;b#...%...F......K;.(x^...b.,...Y......$I.KI.$.(.g..89E..F.r.<S..,.D...A.d..3Y.V"X.d......d.X.......A..eR..}../.~.l....$..l.l...=6h.K>i...6....B.,..r...Y:'?R.S.$..$I.<..,..R.,G..V.._.nq..T.\|.8...68..$9>]...S........_....p..........._.:[.......!..1+.0....$I.KI.$.(..5q.{........msz......j..4..8......@..N.....}......n4.d/h.\g..".{;....yM.,oa...)I..R.$I....

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6881
Entropy (8bit):	5.27174468280763
Encrypted:	false
SSDEEP:	96:+AkGLU6RATA6R4Lwxus5GTcp5qw88wSYF8UkGGHwfD86EG:Nkmd6TJCLwvgTuqwaF8Uk1wfDVEG
MD5:	B5EE5DCFDA3D9112B23994D4CF56CCAE
SHA1:	6C97B7909C0EFC134EA0C663D6B83399196BE0C1
SHA-256:	555E46552504BF49F30E6A7566E5B10C6027264FDB25355EB24B99D28B5D468A
SHA-512:	6C68E9FCF8ED9EB6681EC15FCCE3A09B889A89CB56CC568A9CD64B52437EE1B7C83FAA8413FAA8490CE48E1CC6302F37F5F0498416A9BB1B9F1CE3EAC021D708
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1749" height="869"><defs><path id="b" d="M1184.977 325.484C899.46 111.884 518.28 70.143 194.473 211.91c-27.819-54.408-64.765-104-109.022-145.924C70.243 51.561 53.914 37.8 36.926 25.09 25.489 16.532 13.299 8.248 0 0v860.642h1547.53c-55.588-206.795-178.218-397.256-362.553-535.158"/><path id="f" d="M0 868.743h1270.541C1261.121 545.556 1123.348 228.316 869.466 0H0z"/><path id="k" d="M0 868.743h975.982C945.487 538.148 780.492 220.771 494.274 6.648A1075 1075 0 0 0 485.297 0H0z"/><path id="p" d="M389.215 175.315C272.06 87.67 138.795 28.968 0 0v814.776h773.901C735.24 568.442 604.185 336.141 389.215 175.315"/><path id="r" d="M550.894 346.734C409.766 169.557 213.734 49.71 0 0v412.198h598.826a999 999 0 0 0-47.932-65.46z"/><path id="t" d="M0 868.743h1270.541C1261.121 545.556 1123.348 228.316 869.466 0H0z"/><path id="w" d="M389.215 175.315C272.06 87.67 138.795 28.968 0 0v814.776h773.901C735.24 568.442 604.185

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	1048576
Entropy (8bit):	7.999691529437621
Encrypted:	true
SSDEEP:	24576:LT8NZB+CmdN/akdmspy3UkfCW8Ss9ZvS8dT67P3Onf/R8I:ksommssLfCNPDa8Qry3RL
MD5:	3A1234EA5A872A8152E6C9A2758F9CFF
SHA1:	CBFB0D6A73421CD9616E6696DFD9F6228539914E
SHA-256:	538F055E168892183C0946CE5381A8DA118B31288466F98172CC3ED44A464808
SHA-512:	6B4FC31ADA78B5E8BF5DB82B78014F7E119C13B9F8D4D6DB2CE53202188975C84F432F32AA56DA41AC5B7DA29B151A56B6CE46F574405A87A3A9E2AAE4481112
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/fpo@1x.mp4:2f838c66fbee78:2
Preview:	F&>7..PY..N.>.R..y....k.....ps.....$....-k.$r...T..7.....+C.....b....S.......... .k.62...c.]Q>...[.e.X......^.!..<<mI3..J......{.....HL.2>.]..7......CA.K....PX..z4.x/!.. .Q~.........Ig....7.:uK).C..P./tN.....P.5..B...X.0.......\-.f$..}....... .).e<...........&...a.S.^.5R....cD.Tn.4.......u....Q...o.c...V.8.@se.<...Dr....w...K~hf.fzjm....v...*...!.l..[?7.@-Yxs..Ro...I..LW...M..l,ca....?9.......j6..l R.T.......~...a.&g.N..)....Q.......Lw......t/m...q..=9....k{......JA.._b.;K6.f...B$/..v..=.o7E..N+.L..([...M\...'..?........{..H.TCO.xXT-_......q,..../.pY....2.B$7....1..ZX.D0%\|'.MO..z.@^ -..UxY..k..p.-I.V..q2.D.L...3..((...}....Hs.(f.c.SZ.s{........^..dA.....I......A.y..&......;.\|B.U.W.AQ....~"....c.ik>`.{z.......B.. w.v......o...,C_.....>...5HvEk..Z......d7..L+Kzt0(.V ..-i6{.....B..^.....Va.3%#;;.L....."y>II....,D. M....o&q[...2..<(.[.m..L..^..>>O...HtT..F.P...o.....d.$..(.G`....db...<...v..p.j"..:.....Sv...9.......6b.....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 231048, version 1.0
Category:	downloaded
Size (bytes):	231048
Entropy (8bit):	7.998861039547291
Encrypted:	true
SSDEEP:	6144:f0qlANLlOdpD0F3z8qPvw5Y6TniomwkNaTaaZv:fLlycneoOvw5Y+iYkkTai
MD5:	01AE716A31EB383E1DF472E09888379C
SHA1:	9480B4273E241238E688FADD8A6E854B4236B08D
SHA-256:	39E23831B68995DBE602A60FAA248BE99E52B71730972DDB53378EBFC40A3A4F
SHA-512:	525488164554300677CA4C802950B66FEAF8C07B9BCF510C871255F8DCA6D848291BC9A17B3B6D6A7F019EF4365092E20B7E080180BBBED5797F28BFED2C02D0
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v3/sf-pro-display_semibold.woff2
Preview:	wOF2..............................................$..f.`...B..l..b........Z.6.$..r..x.. ?meta.$..`. ..k[.._.w{...^.....T.d.....@.C...h..V%8....Dbm6$...A.T?...J...3@...H.1.t...\.....................M~D:.7.w3.{E.....H...E.QL05......N......:...H.L6..\|!JP..xbrj....{...".......&\.+R$sJ.........."d.!......e..(.DWj..k.u....m.UvU,c.Ek.8._..D....4..!..r.U&..$m[.7...EE .l..^.m.....%x...N1evI....$...I..<7.+.cz._.>.A.hjz...KF..63...Z..U.3..t..`.?.h....sL..u....)..P.[..=.V.Blh..O.%v.Y.q..@X.S58.....1.......G.....V._w.".#.8.\U...E.. v8...Ng.C~.]f.\|....9K..V..("...['.f...c..y.yiq.Er9.VH.eK....s..#\|^....y.5$WJ.....W..x..c..F.N^3..NL....Y....pbt.E..u[.h..zXt...(T.Z.B.N.#Q..)......M.'B&.^0xc.e~..@...r.kV0/..$..e...!...$}..}&....B..l/..d.c.[.2..6..V!...-w........v..?...%.w...<..L'.}.lbY..}......O...2qAW!..wDD.gBtO>.\].%Iun..gx...V!\........L.=.#1.M..N.~.>......O...*bw....H........_.....".3.....v...(Jq.........8.._h...o.Q...D....K.....A..~.$....BW...l...r

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12505)
Category:	dropped
Size (bytes):	13729
Entropy (8bit):	5.498642029507824
Encrypted:	false
SSDEEP:	192:7wI0dSohLI/vnpiTAvJu3CMS1lqjjk3/cGtjVQf3Wi83WO0q:n0dv+/PCA8Clqi/cRf3WiWj0q
MD5:	E6CA40918AC2AFF1C7DB95190691DF43
SHA1:	678831A3FE5460C97616AD0222B9E6A62F0416A0
SHA-256:	CF988504C0358A4646994323D302F0F61E1000BC86CA066502BECA562E18A04E
SHA-512:	F968040E03059EE8049F3D6B2AFAADEE7D17C8C8735AFDCD9259FB65FB4E8DDD111100F226067D09D803070FE6297E0592E893B77C2F07CD39AE9B72C943A04A
Malicious:	false
Reputation:	low
Preview:	!function(e){var n={};function t(o){if(n[o])return n[o].exports;var i=n[o]={i:o,l:!1,exports:{}};return e[o].call(i.exports,i,i.exports,t),i.l=!0,i.exports}t.m=e,t.c=n,t.d=function(e,n,o){t.o(e,n)\|\|Object.defineProperty(e,n,{enumerable:!0,get:o})},t.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},t.t=function(e,n){if(1&n&&(e=t(e)),8&n)return e;if(4&n&&"object"==typeof e&&e&&e.__esModule)return e;var o=Object.create(null);if(t.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:e}),2&n&&"string"!=typeof e)for(var i in e)t.d(o,i,function(n){return e[n]}.bind(null,i));return o},t.n=function(e){var n=e&&e.__esModule?function(){return e.default}:function(){return e};return t.d(n,"a",n),n},t.o=function(e,n){return Object.prototype.hasOwnProperty.call(e,n)},t.p="",t(t.s=860)}({860:function(e,n,t){t(861),t(862),t(863),e.exports=t(864)},861:function(e,n){(function

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 205, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	68036
Entropy (8bit):	7.992416269719688
Encrypted:	true
SSDEEP:	1536:c5LgkD5UhBFCOyXo2mblid0zuI7M5J5Zf2:c5LvD+hBQOyYZlvuI7M5J5V2
MD5:	52DA2BFB2F521C7B226CBE7C2BA3F01F
SHA1:	7FC0721EE21A7A22643E0E0D39BE1E670F0590AC
SHA-256:	C347366E5FC76ED933855C185A9A0B1A26DE9B5CD4CB1B50E5140C05CFF6FBDF
SHA-512:	6E664277B24046758EFB3B1CDC7AB7D482CF41D7B85915F2E7997F51A39C49BC3AD7AD0A872A3311485E2BE60174C2F5F3B00842AB4996BE38D836D116572A6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB........DeXIfMM........i........................................................n.h..@.IDATx..}....~m...N.)...)!@B...d.A`L.ar0.......y..m.`.l... .".....( .s.N.N..6...z.gggg..N...].o.{......:w.H......#.^...8.cp.8p.J<.....G...!n..'....\|{........d.........-_.....b..U........+............0..iu..x<......K..?..d.,.SJ...\...Sd....3.O..W.Z.......e.....x.x...+..ON.L._K."<..l...6..sD.8...@.^.z..>;?.yT.?JE.......s.....\.;.S\\\|.N....JqH...R.L."...E...Z[[...$........[<..<..Y..pL...M(++....`...j....{}=..[.....%..b...z.Z.6.Rv..;j..T.D.......FjU.^.8..h.<.T.a.M.i."2e_.\.QrI.F..y.{N....d..$.....l.X./.G..L.uE................h....{.............`..@.%d...K.O.A.G....m...$..I.E:...nw.K...$..p._..q..o~..;.<.b......[$.#F.G..@B.L.%....!....b.f{....r..g...Eb}b.y......._v...w&.=H.....d...\.P.o",..qH......;d{.GJ....d.NV.Qy..g2F.Z4..[\|...Kvn.../..g..B=......-[...Hj...`....W.....yw.O4q.o...G ....\|.Q.\|.Q...zg.=.5...k....

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 430 x 388, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48202
Entropy (8bit):	7.972408335290431
Encrypted:	false
SSDEEP:	768:UKqrpw3bBpZrd5CmemUfHipma6uP8TIrgz5K4ZThxUts6QnSqLwXs97ZesZ:Uly/LEdfCKuePz5KUThxosbnSq8XAZeq
MD5:	C214D8BFB5062D87CB9E36E4C26109D0
SHA1:	68F3FF415A4ADCEE1461704F40FE07601B57A044
SHA-256:	771C00DC5A82559FD436C0ED9BA211B98021327C5E42F5B47BBF5FE5520057FF
SHA-512:	89DCF39C000814B951E32E764019D33F2A359D58B1F63B5267F5FDE77973AD534DBE77402CFB1A7182EEA950FB4B7390E52E7083254F2C4A072D83BB893F6478
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/0e4e931e06552e87f2fdff2832e11bb9.png
Preview:	.PNG........IHDR.............n.......sRGB........PeXIfMM.*...................i.........&...............................................Z#....YiTXtXML:com.adobe.xmp.....<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 6.0.0">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:tiff="http://ns.adobe.com/tiff/1.0/">. <tiff:Orientation>1</tiff:Orientation>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>..^....@.IDATx....lIY&.'.wy;EQPR.".E...(. .3c.N/.M..:......#..4.6.0.B!....%%K......^.....]s.<.}.9....y.w..{......._F.....2...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0...C..0

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 220536, version 1.0
Category:	downloaded
Size (bytes):	220536
Entropy (8bit):	7.99894522755539
Encrypted:	true
SSDEEP:	3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q
MD5:	059D2EDEB663A16DE959975D5ED21DB8
SHA1:	3674A0E6FBC086CF109A1B192EF5016D328FDFA5
SHA-256:	3231B77EE2775DADBAA76DE85F95763976AFF1091F63A67FA553D727A6EDB933
SHA-512:	FC26A8FB8B2EE58FE21FB45A1812F6CCCCFC5F8ED55B4ACD49657C9E4DE33FBFE0171C01A7A8FD13FC1E4090CC5D003C760054029F76AF6004A0DD3462112CEC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
Preview:	wOF2......]x..........]............................D..f.`...B..l..b.....\..H.6.$..r..x.. ?meta. ..8. ..k[8^...D.OK..Q.....)s..n..R...L#09..Mq..}.. ..z...z..E. ....u...............Z....{.....[.I...Y...RKl......4J.a"0.Y^.e...z......V/n2...j..g;...A..d..j..@....w..e...q2......U.qT.c....q.m.#...z.s@... =..X.Y x^b.a.....6M...y3........x....R33.25.H......TZ.z.e..z".kQ....%b.M....0.b.y.oG9Z.V.]g.......X....:...N..J.?.O......,.....3O.. .>.3....a.{.a..T.......M4Zy..K....t..L7XL.G..".^3\....zH.x...d..UD..m~WKS7._.....v#.rq.P..k.-j].C..E.R7s...S.....f.o............'..'.....q..}G..<.8:pO5.k.^3......[P.8.B.s...0a..F.C3a\.$.0f!..!../<....ke.........Z..?..G.D..Q.....S........<..N.]1d........Q_.2.M.._..2..Q[Nm:59E.N&..B......\|"....T..e.}1....>rg....~.~.#Y....A.....x.Fz",}.../.Os...FW...8.A...SzEm........Mu..5..........H7.....v.@Ijw&_@..K\...d.w.'..oQ...M...nc4M.r....".V.......k.9...c.U...(.Z..~..b.6}.K.n..n...a...Q.......0q.P......4S..f2K..`.~/.i....

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	8852
Entropy (8bit):	5.2457434063756025
Encrypted:	false
SSDEEP:	192:PQntGOjOqyqVaKOiZYk56bb99HRNzkkkGvktRESmAYKEJ2:PQnt5jOqyyaViZYk56bb95RNzkkkGvEF
MD5:	71017847D439506E008DCE42714BBAD1
SHA1:	DBA8B5846CACC1F2A58DC81BDE50292C913EE3C9
SHA-256:	82B8DAE49941096EA066F74ED5FA44A3CFADC30E75BFB3FD3C93976C099F3A40
SHA-512:	15FAC84EB3B6F924B7ACCF45D4CBEC2A0B1268DFBB88B0346E3D4440508707DB25ACA5A6C08E231C7987CA2018A3CC57588BD84CEF9BAF8458B94A49994C629B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" width="1749" height="869"><defs><radialGradient id="d" cx="46.062%" cy="120.162%" r="99.121%" fx="46.062%" fy="120.162%" gradientTransform="scale(.5561 1)rotate(-31.01 .644 .539)"><stop offset="0%" stop-color="#FFF" stop-opacity="0"/><stop offset="66.572%" stop-opacity="0"/><stop offset="84.431%" stop-color="#FFF" stop-opacity=".082"/><stop offset="100%" stop-color="#FFF" stop-opacity=".253"/></radialGradient><radialGradient id="h" cx="19.041%" cy="98.341%" r="117.611%" fx="19.041%" fy="98.341%" gradientTransform="matrix(.64634 -.32642 .2232 .94522 -.152 .116)"><stop offset="0%" stop-color="#FFF" stop-opacity="0"/><stop offset="77.677%" stop-color="#FFF" stop-opacity="0"/><stop offset="87.851%" stop-color="#FFF" stop-opacity=".08"/><stop offset="100%" stop-color="#FFF" stop-opacity=".25"/></radialGradient><radialGradient id="l" cx="-21.087%" cy="110.982%" r="136.388%" fx="-21.087%" fy="110.982%" gradient

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Windows Precompiled iNF, version 1.0, flags 0x89c70200, at 0x524448,, LanguageID c41e, at 0x88758a8b, at 0x5c120a8
Category:	dropped
Size (bytes):	7962
Entropy (8bit):	7.687536397628308
Encrypted:	false
SSDEEP:	192:pAobyJrrEI8l3/NKPqBnRaP+R4q0rTL46H4UgEacNN7cI:pKrt8l3/NKogWR4qOL/H4UVRcI
MD5:	EE40A89BD58698F7F26024722F7825BC
SHA1:	58E663ED37761B5925BA38CD481E43D199E401E3
SHA-256:	496C4FDA8A4A7F529BEA1870348A181016284404EDC4789E1D4D608DA7742F97
SHA-512:	F5B1DC3647BDB300686A62A367A5E1D1427F09310B1E8ADC8159B7DF85E386D8E0676C61A6156A2AF4AE89FF20AD6BC84AA8A9ABBF133EE5A6E990961940BECF
Malicious:	false
Reputation:	low
Preview:	.......PNG........IHDR...>...>.......`.....IDATx..AHTA...^.<w..7O{.Q..A.....u.. .... .6...b... &.^....".ER.J.}1ou.ig..7...........{.3.\|3.E.....y<.+.......B\....)..4...U.f...?...B.g.h....F%.._.2JJt..>.m.......-../t.......o.....3B3.....r....1...DB35...JK.#\G..;)a...].nW....~....$u^p..8v...S..;......=&x...gE?T..{.....Oiy,.r......u....-..MKhj.i...9...3..z.;/k..:\|O..6wf5.=ji.j..)..z..r.#m....B.=..s....w.5p..l...G.e.o4...%..b...b.\M...-z..q.......S.. .i.).\....T.I..!.S.z....-.Z.j.!)..$..).P...v..L.I....&.w....../..9.T....[..O.*.-. F...O4mW..-.....h..M=s.u.G.ZD.9.Z..~7~..V..Iw.c.....?f...#....t.>Zf.0k=_c....h/k6.R..^.......QR&j.g.zj..e.u'."...d.....Z~...........o.N.[........IEND.B`.......S.PNG........IHDR... ..........n.....IDATx..W..1.m...............[.>n.....w...3.r.V..yuN<.{....Ss[X.oK..\|P..^.HW...$...z...QL.u/f(.g(.+...3....k..(..S..v.A..q......I...PTh.@.{...7)....`..s.]..P.?r.Z..4.R.........n;.\|.=.S.vH9e?...g.\|.....`.&..x..........wN..W....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	downloaded
Size (bytes):	140974
Entropy (8bit):	5.5357707652128125
Encrypted:	false
SSDEEP:	3072:bx6VkMUmPJAOLE6VcDSIQ5XBVtoEzPqw3EKU91:ITADb
MD5:	A6BF7F65044BEC2E9BC708E2897F7A95
SHA1:	3B480F0491640E2D6B5E75833194C6022972DBE3
SHA-256:	DBD52437D7CFDEC0C99DAED938D9B093CBB90533846C3EB36F5FD155034015C3
SHA-512:	44EE04B52911552C334C6A461867923CBA87DF1E5402B048E8D3B7AB99006E936E2FF062B0BED03F8BB519F30CCB93EAD6F61061314D112BC53CA89775CDA626
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/4.main.js
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Windows Precompiled iNF, version 1.0, flags 0x89c70200, at 0x524448,, LanguageID c41e, at 0x88758a8b, at 0x5c120a8
Category:	downloaded
Size (bytes):	7962
Entropy (8bit):	7.687536397628308
Encrypted:	false
SSDEEP:	192:pAobyJrrEI8l3/NKPqBnRaP+R4q0rTL46H4UgEacNN7cI:pKrt8l3/NKogWR4qOL/H4UVRcI
MD5:	EE40A89BD58698F7F26024722F7825BC
SHA1:	58E663ED37761B5925BA38CD481E43D199E401E3
SHA-256:	496C4FDA8A4A7F529BEA1870348A181016284404EDC4789E1D4D608DA7742F97
SHA-512:	F5B1DC3647BDB300686A62A367A5E1D1427F09310B1E8ADC8159B7DF85E386D8E0676C61A6156A2AF4AE89FF20AD6BC84AA8A9ABBF133EE5A6E990961940BECF
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/applications/calendar/2426Project39/en-us/images@1x.bin
Preview:	.......PNG........IHDR...>...>.......`.....IDATx..AHTA...^.<w..7O{.Q..A.....u.. .... .6...b... &.^....".ER.J.}1ou.ig..7...........{.3.\|3.E.....y<.+.......B\....)..4...U.f...?...B.g.h....F%.._.2JJt..>.m.......-../t.......o.....3B3.....r....1...DB35...JK.#\G..;)a...].nW....~....$u^p..8v...S..;......=&x...gE?T..{.....Oiy,.r......u....-..MKhj.i...9...3..z.;/k..:\|O..6wf5.=ji.j..)..z..r.#m....B.=..s....w.5p..l...G.e.o4...%..b...b.\M...-z..q.......S.. .i.).\....T.I..!.S.z....-.Z.j.!)..$..).P...v..L.I....&.w....../..9.T....[..O.*.-. F...O4mW..-.....h..M=s.u.G.ZD.9.Z..~7~..V..Iw.c.....?f...#....t.>Zf.0k=_c....h/k6.R..^.......QR&j.g.zj..e.u'."...d.....Z~...........o.N.[........IEND.B`.......S.PNG........IHDR... ..........n.....IDATx..W..1.m...............[.>n.....w...3.r.V..yuN<.{....Ss[X.oK..\|P..^.HW...$...z...QL.u/f(.g(.+...3....k..(..S..v.A..q......I...PTh.@.{...7)....`..s.]..P.?r.Z..4.R.........n;.\|.=.S.vH9e?...g.\|.....`.&..x..........wN..W....

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4646)
Category:	downloaded
Size (bytes):	29956
Entropy (8bit):	5.499906607453313
Encrypted:	false
SSDEEP:	768:RGi7hrUXMFXoqp2UKUUckgVuaiDi0EzblzoNWbc9u:RZFXoTUXPLzbJwI
MD5:	CE2C72D3D2E6287B7D486B8101A01AD5
SHA1:	3A076C1DDA6EB65EFFBC4B0EE61A9BC74DC94261
SHA-256:	3C5930775E5B89FE98184659C8F580EFCC8844DA14B52495A4F514323CA494BD
SHA-512:	05CAD41D4297612240E9DC864098E864B360675BA7BD20456E8AA1AC044DC30B19F73F74EA406E17C053F9A2C0A1BA93B3F9D499085558AA4E47CFDF75D07788
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/calendar/event/
Preview:	<!DOCTYPE html><html lang="en-us" data-cw-private-path-prefix="" data-cw-private-build-number="2426Hotfix45" data-cw-private-mastering-number="2426Hotfix45"><head><meta http-equiv="Content-Security-Policy" content="base-uri 'self'; object-src 'none'; script-src blob: 'self' .apple.com .apple-cloudkit.com .cdn-apple.com 'sha256-JFJvxqMr7d0c5kvkhpyFwvNHHhwfiIFw0UaFnTp+u9M=' 'sha256-pX2WkA0wTGmuAZ5sesVaf6eECXUdLqbZ1R42KgA7Q2A=' 'sha256-26W8JbT1vQArZ+8F3eitbNZVzh5WonwHlQl29E4pato=' 'sha256-svdOQzSg9T05h6Q3mC/8FCU+2bG3vWTBwdPa+czq+YY=' 'sha256-HenvlWVrAISuwfRzCus0xoCe+m4/jV6vXViy4FodZC8=' 'sha256-lRaqSyfzcyRaZDbyf9zk3ZsU3HWpfeHMdgqioLyb3K4=' 'sha256-0rXMbx26A4onu5T4cL6hVliM2L81bg6tUL0y8QXdVU0='; style-src 'self' data: .apple.com 'unsafe-inline'; default-src 'none'; child-src blob: 'self'; connect-src blob: 'self' data: .icloud.com .icloud.com.cn .apple.com .cdn-apple.com .icloud-content.com .icloud-content.com.cn .apple-mapkit.com; form-action 'self' .apple.com .icloud.com .ic

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 15 tables, 1st "FFTM", 14 names, Macintosh, Copyright (c) 2018, Gurpreet Kaur Balgir1shared-iconsiconsFontForge 2.0 : shared-icons : 23-7-20
Category:	downloaded
Size (bytes):	16672
Entropy (8bit):	6.310786385029788
Encrypted:	false
SSDEEP:	384:1E4VocGSRB1aWsGHjQjlIhNvkiiNfLbV91aA7YkLK:1DZvaWs1ja1kiefLLoA7BLK
MD5:	E48C756B6037D6D7EC88E3E75F2F0E83
SHA1:	7822FDF8E0E11F419930F413E2B9766284543EB5
SHA-256:	7B28292CD7FB89CAF6051AD0EB4E464C1EA4F83062842AA95CC697152A135D48
SHA-512:	04AD2C880DE12140FDFBF1B2E863724098A2F335683B1089305E405BF5C9C8D38249B7F111779DE9C716B93DA0D5E1A3BD34B85769C1E05DB32C7D878588228D
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/bin/cb3537100279/dist/assets/shared-icons.ttf
Preview:	...........pFFTM.9..........OS/2@.]N.......`cmap.......x...Bcvt .d....4...."fpgm......4.....gasp......4.....glyf.6.0......+.head.s.........6hhea.Y.D.......$hmtxe...........loca/1:%../....pmaxp......04... name..q...0T...Lpost....2....0prep......@..............A.......{.......{.............L.f...G.L.f....................................PfEd.....4.........Z............... .....................<........... ...........4.................................................................................................................................................................................................................................................................................................U.....*@'.......a.....U....Y.....M..............+3.3.'3.#..wff.U....3...............7.S.c.s.v@sE....F0)%......S.....J........c.........c..........a.........c.....W....[.....OedVTmjdser^[TcVcRPIGDB;9.....'#'!...+7.3254'&54632..&#".......#"'7&5...#'&'#....#73...36?.3.#7.3254'&54632..&#"......

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	389267
Entropy (8bit):	4.909572113691647
Encrypted:	false
SSDEEP:	1536:2xlucF4M1hC60GWc0VXfeHLbRhk1f4MqkQxG85PezFWgo3sLpUyTeg6k:gvG85PeBW7cLpUyTeg6k
MD5:	CC6D90FCA69BE105F46F406B3307957D
SHA1:	CCC20C36F4B80DCD47828A6A872C7461F255EA94
SHA-256:	D7701446DA91E2AFAD810974822811DCD578536028E9530CFE112C59E9A51DBC
SHA-512:	37A9955ABFCECF4E7189849CAF8A6B762A8388F49093E0134699E634C9296507FA4D43EF43491E6767253CE61FB1F8D7833F954C923574D6A3507EB78AF70A58
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/applications/calendar/2426Project39/en-us/main.css
Preview:	{margin:0;padding:0}.cw-hidden{display:none!important}.cw-alert{max-inline-size:640px}.cw-alert[dir=ltr],.cw-alert[dir=rtl],[dir=ltr] .cw-alert,[dir=rtl] .cw-alert{max-width:640px}.cw-alert {-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none}.cw-alert>div:not(.alert-button-container){-webkit-padding-start:20px;padding-inline-start:20px;-webkit-padding-end:20px;padding-inline-end:20px}.cw-alert[dir=ltr]>div:not(.alert-button-container),.cw-alert[dir=rtl]>div:not(.alert-button-container),[dir=ltr] .cw-alert>div:not(.alert-button-container),[dir=rtl] .cw-alert>div:not(.alert-button-container){padding-left:20px;padding-right:20px}.cw-alert .alert-main-content{display:-webkit-box;display:-webkit-flex;display:-ms-flexbox;display:flex;-webkit-padding-before:20px;padding-block-start:20px;-webkit-padding-after:20px;padding-block-end:20px}.cw-alert[dir=ltr] .alert-main-content,.cw-alert[dir=rtl] .alert-main-content,[dir=ltr] .cw-alert .alert-main-content,[dir=

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65026)
Category:	dropped
Size (bytes):	140974
Entropy (8bit):	5.5357707652128125
Encrypted:	false
SSDEEP:	3072:bx6VkMUmPJAOLE6VcDSIQ5XBVtoEzPqw3EKU91:ITADb
MD5:	A6BF7F65044BEC2E9BC708E2897F7A95
SHA1:	3B480F0491640E2D6B5E75833194C6022972DBE3
SHA-256:	DBD52437D7CFDEC0C99DAED938D9B093CBB90533846C3EB36F5FD155034015C3
SHA-512:	44EE04B52911552C334C6A461867923CBA87DF1E5402B048E8D3B7AB99006E936E2FF062B0BED03F8BB519F30CCB93EAD6F61061314D112BC53CA89775CDA626
Malicious:	false
Reputation:	low
Preview:	/*!. IMPORTANT NOTE:. * This file is licensed only for use in providing the iCloud. * service or any part thereof, and is subject to the iCloud. * Terms and Conditions. You may not port this file to another. * platform without Apple's written consent.. . Portions of this Apple Software may utilize copyrighted material under open source licenses.. * Please see the file at https://www.icloud.com/system/icloud.com/2426Hotfix45/en-us/acknowledgements.txt for licensing information.. */.!function(e){const t="object"==typeof globalThis&&globalThis\|\|"object"==typeof window&&window\|\|"object"==typeof self&&self;try{const{performance:o,Promise:n,MessageChannel:s,requestAnimationFrame:r}=t;if(!(o&&o.mark&&n&&s&&r))return;const a=t=>o.mark("chunk-"+e+"-"+t);let c=!1,f=!1,i=n.resolve();a("exec-start");for(let e=0;e<5;e++)i=i.then();i.then(()=>{a("exec-sync-end")});if("undefined"!=typeof window){let e=()=>{c&&!f&&(a("after-paint"),f=!0)},t=new s;t.port1.onmessage=e,t.port2.pos

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 14308
Category:	downloaded
Size (bytes):	2809
Entropy (8bit):	7.921703590334621
Encrypted:	false
SSDEEP:	48:XAg7S/YBIpqwDnRzxS3KMGgZV2fQstSCV2Ejh5xl7FgYRj+h4bl7DZEGhpSHWOKf:HmLRzxS3KMGgZVcQstSAtXPHqSlpTS2H
MD5:	CC08AAC4F0D6DD248ACEE4134239C5F2
SHA1:	E30391324506FDDC9F25D370694A283E21BA4456
SHA-256:	3C2F5F5FC600967308DE93DDB14C49F7DC9484D3A86EBC1658BA5796245B5F64
SHA-512:	508B2AD5FDBFEC8D71B78F757538ABA8C61109B4322BFD95DC137DCF72421CD754CDA9C34F32D90DF4029942DCAFEBA5F7B7BCF86FEF0971EB9A74B84E289B8D
Malicious:	false
Reputation:	low
URL:	http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css
Preview:	...........[...~._..a vO:..Dq..n.<.....-.v......Iw.v...C.XI.H......%......p8..{..W...[Q4uSE%.gR.E^.O.y..u=h...s.>...)....i.$.-.1....]..IL..8.H.O._.h...--.F....=??.Q.p.....P..O?~..?....u..'u...u..d..f....$.v...[...sQe1..t..g....m..Q....W..K..>=.__...KQ.6.....i.M...<..5....u.E.7...Y....I.fCnn...W.hC.E..0.4N.&96m.}...;J..1+.....eT..~..N....yC."o..F.O.U..w.^..U..n.4/..g...ON.<%.\|Rm.......<C......>.1.!<,....l?.@V..:.....~4.H#..9._..... ....wf.....zJ.t.fi..:\.}.%N....\|...j"..).]....`N....<...!..\|{..N.}.......;.K.}R.....t.....e........\.7.:D.i...S.(.,.LV.E.....}Bl....!=.>.......u.m...v.A.5...Ko.....2zH`WG:k....:.....!Y.'.$..$....s.L..........[.......`HK.<.......v'...../.....:.VE..\W..$...`.}VD..O.+zl..A..1d....fB..M.Q...d.}sv....U....OO.nr..C..v.]...I.86.V..iy...gx....8..T.u...-[p.c...5ed...o;wL.....C\.q....3t.QC...Y...t.a.g6.]..P'...J=7k.u.5.nmKMR.?......Sc`Cn..s?....Z...o..<....nL......#.]...#l..]....4......)#bq..C...dy.3.n

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (451), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	5412
Entropy (8bit):	5.241802432598849
Encrypted:	false
SSDEEP:	48:GN5aupAKLgGVi/13YjDIVv9Hf9rJwPCdfIGVgJGgdi5eEGgdi5exWxP74rbDr:GN0uqK8Yi/1Fv9/fwPagGVgA2T2hUWr
MD5:	1D5715EF2CD6CA5FA7B4C35C27E39E39
SHA1:	3FCF20542A7B740B98FAD9DF97FDCE586992CA88
SHA-256:	48C2F89FEC59C95C4D5CFCBD34B27283464973BE6957E27838B7F50B4659FF8F
SHA-512:	2FE4BD2EB73786B956292C7F0A9D4F7A81FD745966E4FA5BF4E9D55928194F2B45EB9D508D9E675DF6CB356EDA7736E60645F22DCE2DD527E8025CE4E8A5B994
Malicious:	false
Reputation:	low
URL:	http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z
Preview:	<!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//en" "http://www.w3.org/TR/html4/loose.dtd">.. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">.. <head>.. <meta charset="utf-8"/>.. <base href="http://www.mailcontrol.com">.. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"/>.. .. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css" type="text/css">.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css" type="text/css">.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification.css" type="text/css">.. [if IE ]>.. <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css" type="text/css">.. <script src="http://www.mailcont

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3775
Entropy (8bit):	7.933892218866822
Encrypted:	false
SSDEEP:	96:pgn79kpWHHul8WtsiREv3vhputZaWWmYCfRbmgM7soc:pfp8Ol8UEPvhputZqCftmP7c
MD5:	326D20EADAD1A744B0AD8BDDDE18F987
SHA1:	7C29E96615B8444F9C9D8D3E2B2BFA0FDAD84EB8
SHA-256:	27A062E1F7C1F84BD52495DB51E4DE6E8FC9D95396B9EA40A454F158992F61BB
SHA-512:	E01FCA8E789198E884C570E3BF4810CE2B1FC38E727DAF01278C89139614F94678D2C25AD20E85349AC5F563E8FA72DA98D65DBC935FEFDA864BFD5FB6553637
Malicious:	false
Reputation:	low
URL:	https://www.icloud.com/system/icloud.com/2426Hotfix45/721bdfc3241b42114d62842854461ae7.png
Preview:	.PNG........IHDR...P...P............IDATx^.1K#A..3.u....La+h!..~.I.O`..KX..Z[J.BH..p.wEP..Ab..R.E.Y!k....If......K..?..b...dV.2..UJEb\b....@.I.. ..#.q."y.HDb.....G..?rM..R......8.R^..5V..iY.......h..+.........Y.d....z..z....A.p.....3.$S.Y.l.....S.n.H.B@.$W.1..0sK.puWH...I..H?;...t....{.t1.3l........3..]yVb.x.Y..>$K$$^...i'..!...^U...H7U.(N...!6J.zs..6...&.}u2N,...2y.(.l.0.\|R..GD.c..........^.....s l97..4..h..... !_..d..f.....NK.....C...8....'.._}l..c.o........>DH ENl..^.5..........1c.v....:.i..n.H+..(....5U+....<......%B.....B .)...Z.JB.. >.F!@.!8......a...3s?...wo.{.....8X.k....s.Yk.u.N...]...AP.?U......._}.60y.F..pM_\|....7ux...V..]....U2....]f....+.#...._UP...b..bR.`f(...%;...9..>...m]....d\|.......o..o.0...X..]=Qw`....,.D.,+..A.-=.../.......<R....rWX>D.j.:....^4..'....C.xg..6QL{.qk...E8_.....'.......:.N.."...n....ydx..L.}......Q6..\..H.;-.U.s..w.xi...../.e...3..@.F....:.9...../.Zs..00.$.@B3. ..V.A......p.C.....9.%......@P....A...'...J..+b....

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	22382
Entropy (8bit):	1.8139780344520928
Encrypted:	false
SSDEEP:	24:nvgQF2ky2bvnlPVdGFGFjn8za2XXcO9++f42AapCaku0Lunpi3kMFPWzlJa4B4LT:3dSmkZ6NJvrulIsW5ty4pDKoz+aR
MD5:	310FD67D702063937E39C17B2060067F
SHA1:	503B0C1CD35674B8E58B6B35431F381F1417A1A5
SHA-256:	2EE7CA9B189DF54D7CCDD064D75D0143A8229BAE9BDB69F37105E59F433C0A8B
SHA-512:	D523F0CAA326B7842CB2A0D13D95E2D4CF432FC7A6B12FA503B7175AA188A848C9AFF631685BFA2D2D3609B7FCC6AB398FD9CC95ECAE436FFA9EA2D55550E616
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .........@@.... .(B..F...(....... ..... ................................................................................................................z...t...$.......S......./...............................................................4...........................t....................................................................................................h..................._.........................................K...........................................................I...............................................................................................................................................................................................*.......................)..................................................................P..................m...............................................5...'..."...o...,...6.................................................../.........................................

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64945), with no line terminators
Category:	downloaded
Size (bytes):	463209
Entropy (8bit):	5.320088808554314
Encrypted:	false
SSDEEP:	1536:HPlCYNJOZaxsKHLL198xnlilrIIYILIUITKrZBVBed0OAxKpKPP5FF9jtBz169VE:HNCYNJOZaxYlgrGwT/3WVyR
MD5:	DB405577DE4424694CA74273D3152FBF
SHA1:	047BEC9DDEFB341647715B03CB19AD2C1CE0AD89
SHA-256:	7AAB7C073B4C2638B8D13B82D0E99351E1495E4DD9DCC3A629B620B8583EF848
SHA-512:	8ED20D9168138C5C3DD940C3A68E59AC47CA756F70475CF652707C3CA5B4ECC3AB0711047AD1E3CF34872DBD4D6E313FE753956F2ABD1215C78A5375C8A13484
Malicious:	false
Reputation:	low
URL:	https://appleid.cdn-apple.com/appleauth/static/cssj/431834531/widget/auth/app-sk7.css
Preview:	[dir=ltr],[dir=rtl]{unicode-bidi:-webkit-isolate;unicode-bidi:-moz-isolate;unicode-bidi:-ms-isolate;unicode-bidi:isolate}bdo[dir=ltr],bdo[dir=rtl]{unicode-bidi:bidi-override;unicode-bidi:-webkit-isolate-override;unicode-bidi:-moz-isolate-override;unicode-bidi:-ms-isolate-override;unicode-bidi:isolate-override}html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}abbr,blockquote,body,button,dd,dl,dt,fieldset,figure,form,h1,h2,h3,h4,h5,h6,hgroup,input,legend,li,ol,p,pre,ul{margin:0;padding:0}address,caption,code,figcaption,pre,th{font-size:1em;font-weight:400;font-style:normal}fieldset,iframe{border:0}caption,th{text-align:left}table{border-collapse:collapse;border-spacing:0}details,main,summary{display:block}audio,canvas,progress,video{vertical-align:baseline}button{background:none;border:0;box-sizing:content-box;color:inherit;cursor:pointer;font:inherit;line-height:inherit;overflow:visible;vertical-align:inherit}button:disabled{cursor:default}:focus{outline:2px solid #0071e3;out

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 220536, version 1.0
Category:	downloaded
Size (bytes):	220536
Entropy (8bit):	7.99894522755539
Encrypted:	true
SSDEEP:	3072:2CVJbxBgG+v9LhLHCl1w6xw5WRGJWXyCk3sXEAPV9v8LMEXJOxH81AYRtCjbR2q:2CVJbcGuphjQ1w6NRb144/LvEJVNtQ2q
MD5:	059D2EDEB663A16DE959975D5ED21DB8
SHA1:	3674A0E6FBC086CF109A1B192EF5016D328FDFA5
SHA-256:	3231B77EE2775DADBAA76DE85F95763976AFF1091F63A67FA553D727A6EDB933
SHA-512:	FC26A8FB8B2EE58FE21FB45A1812F6CCCCFC5F8ED55B4ACD49657C9E4DE33FBFE0171C01A7A8FD13FC1E4090CC5D003C760054029F76AF6004A0DD3462112CEC
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v3/sf-pro-text_regular.woff2
Preview:	wOF2......]x..........]............................D..f.`...B..l..b.....\..H.6.$..r..x.. ?meta. ..8. ..k[8^...D.OK..Q.....)s..n..R...L#09..Mq..}.. ..z...z..E. ....u...............Z....{.....[.I...Y...RKl......4J.a"0.Y^.e...z......V/n2...j..g;...A..d..j..@....w..e...q2......U.qT.c....q.m.#...z.s@... =..X.Y x^b.a.....6M...y3........x....R33.25.H......TZ.z.e..z".kQ....%b.M....0.b.y.oG9Z.V.]g.......X....:...N..J.?.O......,.....3O.. .>.3....a.{.a..T.......M4Zy..K....t..L7XL.G..".^3\....zH.x...d..UD..m~WKS7._.....v#.rq.P..k.-j].C..E.R7s...S.....f.o............'..'.....q..}G..<.8:pO5.k.^3......[P.8.B.s...0a..F.C3a\.$.0f!..!../<....ke.........Z..?..G.D..Q.....S........<..N.]1d........Q_.2.M.._..2..Q[Nm:59E.N&..B......\|"....T..e.}1....>rg....~.~.#Y....A.....x.Fz",}.../.Os...FW...8.A...SzEm........Mu..5..........H7.....v.@Ijw&_@..K\...d.w.'..oQ...M...nc4M.r....".V.......k.9...c.U...(.Z..~..b.6}.K.n..n...a...Q.......0q.P......4S..f2K..`.~/.i....

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 145 x 35, 8-bit/color RGBA, interlaced
Category:	dropped
Size (bytes):	4344
Entropy (8bit):	7.940745446890522
Encrypted:	false
SSDEEP:	96:6to98W1PrmaT6yvofu3TTYTYAbq2qLZXFMfnwwr3Xu2USgPEUneKz:6qGWlrmaJSu3TTaYsq2+XM3M3MULz
MD5:	22E1C1E59B39AAC2F6940CCD293018FD
SHA1:	80C1C0B64A5F5E24D1758AD6052904E840373611
SHA-256:	E8327C3DB89A35D3F9902126BFB4400C5AF64E30C70201724153377DC83B4638
SHA-512:	D5D45DF287074C8BE5619C35AC7AA40C416BE8FD93A52A04C2601EF9FBF76AC1471C7A0924DF2E120EEC467073F039E3EB81D8BB4C5EEFFDE88C7A58E4B28A95
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......#.............gAMA......a.....IDATx..[.t.E....&i..Z...?.IMr.e. {...RPP.B.[u.v.].t9.... .n..E.X..K.[<.Z..V..mA#.O..M..VWBK..ir...>..;_.{s..n...s.3.....;..3......4..Roq8...m\|.H[iqY.]6OXq.......U.\P^..t6.+..W..3..a.\\[{.....2..f.[.r.c.0.).z..h.>WV...>.Yy)...p........p....p...K...e..p.om......W...&.........v^QY.^..89P.....]..z;ZL........T.j..d.....y.h.By...q.2..............?2....UJ.[k.c.l.`........#..J.C.6S..Hg;.^.4......>).f+.O.T\......+..3.\|8\3...q....c.`c..>..e.#...9........l...R..ue.v../.h..}.Rs.t._&.^.x5~.m..m_.\.Tw0.`.>..'3..;p`.i....e......d...-j...p......3d...Ny......F...kG.%R..WX...?M..X.G..nb~A........6....}Ge..\.2.h..XRB..3....l.(\...$..M...c0.z:Z..<...K-.z..w..'..W.?.7.......1..M..m%.UR^o.......]}..)+...K.8...p.O.d`.s.7.N...@CP]]..W.b.`.u.D...N.b...L...G.s=.Y.A..t^^UoK.a.a.N1.f;63.mylN.jO.1..'f..).....j.,.....z:.....Ux.cJ..p.. .%.qd}W[..L3,......:..;.y..==.M..t0....s.v.......'.s` ~.v..!.t...<.(MJ......a.......w,.....

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 07:41:44.890460968 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 21, 2024 07:41:46.086973906 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.087348938 CEST	49738	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.091747999 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.091876984 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.092108011 CEST	80	49738	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.092139959 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.092163086 CEST	49738	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.096995115 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947169065 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947194099 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947206974 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947227001 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947241068 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:46.947278976 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:46.947319984 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:47.136701107 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.136826038 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.136941910 CEST	49742	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.137038946 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.137140036 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.137245893 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.141768932 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.141782999 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.141803026 CEST	80	49742	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.141814947 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.141858101 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.141906977 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.141930103 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.141988039 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.141988039 CEST	49742	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.141993046 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.142035961 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.142086983 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143717051 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143769026 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143822908 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143872023 CEST	49742	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143944025 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.143973112 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.148549080 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.148559093 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.148713112 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.148721933 CEST	80	49742	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.148730993 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.148797989 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935652971 CEST	80	49742	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935676098 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935688019 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935709000 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935722113 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935733080 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.935733080 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.935766935 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.942039013 CEST	49742	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.944098949 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.944113016 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.944127083 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.944138050 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.944174051 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.944200993 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.947357893 CEST	80	49742	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.947412014 CEST	49742	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.948724031 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.952193975 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.953955889 CEST	80	49740	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.954015970 CEST	49740	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.957515955 CEST	80	49744	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.957568884 CEST	49744	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.962774992 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962836027 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962888956 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.962894917 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962917089 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962930918 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962944031 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962956905 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.962968111 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962980986 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.962984085 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.963001013 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.963012934 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.963025093 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.963047981 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.965857029 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965868950 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965887070 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965899944 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965912104 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965920925 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.965924978 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965938091 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.965946913 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.965991020 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.967813015 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.967871904 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.967883110 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.967896938 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.967916965 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.967948914 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.974742889 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.980024099 CEST	80	49743	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.980084896 CEST	49743	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.984319925 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.984566927 CEST	49748	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.989414930 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.989483118 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.989547968 CEST	80	49748	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.989597082 CEST	49748	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.989856958 CEST	49748	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.990042925 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:47.994749069 CEST	80	49748	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:47.994910002 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.067089081 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.067183018 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.067194939 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.067261934 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.067262888 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.135799885 CEST	49745	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.140743017 CEST	80	49745	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.706511021 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:48.706568003 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:48.706640005 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:48.706979036 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:48.707005978 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:48.790851116 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790863991 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790884972 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790895939 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790911913 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790923119 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.790991068 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.791053057 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.792232990 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.797245026 CEST	80	49747	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.798055887 CEST	49747	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.821331024 CEST	80	49748	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.824001074 CEST	49748	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.836940050 CEST	80	49748	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.837318897 CEST	49748	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.966659069 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966680050 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966691971 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966703892 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966718912 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966728926 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.966759920 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.966847897 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.967782021 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.973014116 CEST	80	49741	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.973881006 CEST	49741	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.978259087 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:48.981076002 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.983129025 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:48.985873938 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:48.988938093 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:48.996911049 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:49.001710892 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.229500055 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:41:49.282040119 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:41:49.341362953 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:49.341427088 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:49.341505051 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:49.345488071 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:49.345510960 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:49.578107119 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:49.578803062 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:49.578820944 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:49.579865932 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:49.579925060 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:49.580966949 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:49.581042051 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:49.625053883 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:49.625066996 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:49.673444033 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:41:49.804380894 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804392099 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804403067 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804423094 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804435015 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804446936 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804461002 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.804461002 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:49.804500103 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:49.806026936 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:49.811085939 CEST	80	49752	85.115.52.220	192.168.2.4
Oct 21, 2024 07:41:49.811252117 CEST	49752	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:41:50.192847967 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.192913055 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.196417093 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.196422100 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.196717024 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.238482952 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.239051104 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.283410072 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.482594013 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.482692003 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.482887983 CEST	49753	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.482918978 CEST	443	49753	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.530447960 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.530497074 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:50.530791044 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.531068087 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:50.531085014 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.364984035 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.365053892 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.367161989 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.367172003 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.367476940 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.368917942 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.411447048 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.610488892 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.610555887 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.610619068 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.611481905 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.611500025 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:51.611510038 CEST	49754	443	192.168.2.4	184.28.90.27
Oct 21, 2024 07:41:51.611515999 CEST	443	49754	184.28.90.27	192.168.2.4
Oct 21, 2024 07:41:59.392487049 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 21, 2024 07:41:59.397521973 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 21, 2024 07:41:59.397584915 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 21, 2024 07:41:59.584244013 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:59.584317923 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:41:59.584404945 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:00.846323967 CEST	49749	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:00.846342087 CEST	443	49749	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:03.087888956 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:03.092895031 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452608109 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452737093 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452749014 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452799082 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452811003 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452838898 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:03.452912092 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:03.452914000 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:03.453000069 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:03.665361881 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:03.670295954 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:03.670373917 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:03.670537949 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:03.675338984 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478447914 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478557110 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478568077 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478579998 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478590012 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478595018 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478605986 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.478616953 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.478677988 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.478677988 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.479635954 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.484699011 CEST	80	49761	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.484798908 CEST	49761	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.487262011 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:04.489684105 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.492062092 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:04.494504929 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.494594097 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.494724035 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:04.499481916 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:04.739195108 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:04.781481981 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:05.289036989 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289098978 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289110899 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289119959 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289139032 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289149046 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289160013 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.289163113 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:05.289221048 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:05.289357901 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:05.309262991 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:05.314604044 CEST	80	49762	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:05.314675093 CEST	49762	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:16.540891886 CEST	49763	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:16.545732021 CEST	80	49763	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:16.545855045 CEST	49763	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:16.552983999 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:16.557777882 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:16.876074076 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:16.918710947 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:18.290102959 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.290132046 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:18.290240049 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.291901112 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.291917086 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:18.301621914 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:18.301632881 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:18.301964998 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:18.302278042 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:18.302294016 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:18.303921938 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.303930998 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:18.304053068 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.304431915 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:18.304445028 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:18.317959070 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:18.317974091 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:18.318101883 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:18.319801092 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:18.319818020 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.157788992 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.207974911 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.384918928 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.412513971 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.416230917 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.439975977 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.457550049 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.459645987 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.461983919 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.461990118 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.462090015 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.462101936 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.462493896 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.462507963 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.462553978 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.463593006 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.463598013 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.463705063 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.463709116 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.464050055 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.464111090 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.464397907 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.464425087 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.464461088 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.464792967 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.464839935 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.464847088 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.464901924 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.502157927 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.502166986 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.504522085 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.504622936 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.504961014 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.505234957 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.505517960 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.505613089 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.507940054 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.508048058 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.508929968 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.508943081 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.548583984 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.548593998 CEST	443	49775	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.548597097 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.548597097 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.548609972 CEST	443	49774	17.248.209.69	192.168.2.4
Oct 21, 2024 07:42:19.548621893 CEST	443	49776	17.248.209.42	192.168.2.4
Oct 21, 2024 07:42:19.548630953 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.593347073 CEST	49775	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.593636036 CEST	49774	443	192.168.2.4	17.248.209.69
Oct 21, 2024 07:42:19.593636036 CEST	49776	443	192.168.2.4	17.248.209.42
Oct 21, 2024 07:42:19.897713900 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.897742987 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.897782087 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.897790909 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.897803068 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.897857904 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.898211956 CEST	49771	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.898222923 CEST	443	49771	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.899614096 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.899640083 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:19.899708986 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.901428938 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:19.901441097 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:20.993318081 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.011176109 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:21.011190891 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.011642933 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.012236118 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:21.012307882 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.012588978 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:21.059401989 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.398695946 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.398719072 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.398782969 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:21.398828983 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:21.399276018 CEST	49779	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:21.399286985 CEST	443	49779	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:22.239840031 CEST	80	49763	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:22.282497883 CEST	49763	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:22.344398022 CEST	80	49763	85.115.52.220	192.168.2.4
Oct 21, 2024 07:42:22.344453096 CEST	49763	80	192.168.2.4	85.115.52.220
Oct 21, 2024 07:42:27.497864008 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:27.497904062 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:27.498032093 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:27.498436928 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:27.498450994 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.591264009 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.591620922 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:28.591653109 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.592161894 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.592251062 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:28.593157053 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.593215942 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:28.594949961 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:28.595041990 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.595403910 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:28.595423937 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:28.644866943 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:29.253357887 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:29.253392935 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:29.253468037 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:29.253842115 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:29.253854036 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.077560902 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.077586889 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:30.077665091 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.078218937 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.078233957 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:30.109344006 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.109929085 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.109939098 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.110667944 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.110769987 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.111701012 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.111759901 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.112831116 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.112912893 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.113220930 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.113226891 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.113342047 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.113373041 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.513931990 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.514008999 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.514072895 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.515450001 CEST	49808	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:30.515472889 CEST	443	49808	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:30.530653954 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:30.530683041 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:30.530771017 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:30.530993938 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:30.531009912 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:30.847078085 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:30.847142935 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.853080034 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.853091002 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:30.853364944 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:30.863457918 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:30.911405087 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.099723101 CEST	49738	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:31.104528904 CEST	80	49738	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:31.116774082 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.116796017 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.116810083 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.116892099 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.116906881 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.116959095 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.237060070 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.237083912 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.237131119 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.237140894 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.237185955 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.237209082 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.355292082 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.355325937 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.355376005 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.355391026 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.355433941 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.375581026 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.379770041 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.379786015 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.380152941 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.380222082 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.380881071 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.380928040 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.381503105 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.381567001 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.381817102 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.381824970 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.431883097 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.474064112 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.474092960 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.474149942 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.474157095 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.474200010 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.593024015 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.593050957 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.593182087 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.593193054 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.593235970 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.711847067 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.711868048 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.711966038 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.711975098 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.712018013 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.717423916 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.717508078 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.717586994 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.770510912 CEST	49810	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.770525932 CEST	443	49810	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.839106083 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.839123964 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.839181900 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.839193106 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.839226961 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.839243889 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.949076891 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.949150085 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.949290991 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.949567080 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.949575901 CEST	443	49803	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.949588060 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.949616909 CEST	49803	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.954287052 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.954324007 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.954386950 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.954570055 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:31.954582930 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:31.957921028 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.957941055 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.957989931 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.958005905 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:31.958035946 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:31.958053112 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.109754086 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.109785080 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.109833956 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.109843969 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.109884024 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.109895945 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.341195107 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.341217995 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.341279030 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.341288090 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.341351032 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.342365026 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.342384100 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.342430115 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.342438936 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.342477083 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.435412884 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.435437918 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.435494900 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.435504913 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.435544014 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.435558081 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554238081 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554255009 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554325104 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554335117 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554380894 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554508924 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554569006 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554575920 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554586887 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554615021 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554661036 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554676056 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554687977 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.554697037 CEST	49809	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.554702997 CEST	443	49809	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.601191044 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.601221085 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.601227999 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.601242065 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.601332903 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.601377010 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.601676941 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.601690054 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.602040052 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.602060080 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.613295078 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.613312006 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.613522053 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.613698959 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.613712072 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.615066051 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.615072966 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.615343094 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.616372108 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.616399050 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.616489887 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.616614103 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.616627932 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:32.616772890 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:32.616785049 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.052217960 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.052515030 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.052532911 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.052926064 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.053394079 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.053459883 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.053561926 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.099396944 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.356065035 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.366897106 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.373786926 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.373802900 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.376894951 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.376899958 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.377715111 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.377727032 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.378464937 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.379442930 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.379451990 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.379888058 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.379904032 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.380917072 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.380922079 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.382004976 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.382965088 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.382992983 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.384257078 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.384264946 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.390204906 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.391155005 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.391171932 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.392307997 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.392313004 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.486808062 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.486824036 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.486884117 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.486886978 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.487051964 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.488936901 CEST	49815	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:33.488954067 CEST	443	49815	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:33.509083986 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509111881 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509198904 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.509212017 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509263992 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.509268045 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509279013 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509335995 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.509823084 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.509830952 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.509846926 CEST	49816	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.509850979 CEST	443	49816	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.512842894 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.513427019 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.513499975 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.517926931 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.517954111 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.518023968 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.518317938 CEST	49819	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.518321991 CEST	443	49819	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.522974968 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.522988081 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.524131060 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:33.524152040 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:33.524247885 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:33.524491072 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:33.524502993 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:33.527244091 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.527494907 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.527529955 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.527575016 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.527585983 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.527612925 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.527915001 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.527929068 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.527996063 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.528028965 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.528075933 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.528081894 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.528136015 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.528640985 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.528649092 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.528692007 CEST	49820	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.528697014 CEST	443	49820	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.530738115 CEST	49817	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.530750990 CEST	443	49817	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.536863089 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.536880016 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.537058115 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.537645102 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.537657022 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.538654089 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.538710117 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.538830996 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.538837910 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.538892984 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.539124966 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.539124966 CEST	49818	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.539139986 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.539150000 CEST	443	49818	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.540024042 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.540038109 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.540327072 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.540559053 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.540570021 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.543623924 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.543647051 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:33.543934107 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.544080973 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:33.544105053 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.291109085 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.294594049 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.304220915 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.308046103 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.320827961 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.341171026 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.341947079 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.342613935 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.342637062 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.343874931 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.343879938 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.344654083 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.344660044 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.345211983 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.345216036 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.345828056 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.345845938 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.346576929 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.346581936 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.347209930 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.347213030 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.347970009 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.347974062 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.348617077 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.348644018 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.348980904 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.348984957 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.478832960 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.478946924 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.478997946 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.479207993 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.479207993 CEST	49829	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.479227066 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.479235888 CEST	443	49829	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.482312918 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.482368946 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.482448101 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.482616901 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.482635975 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484230995 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484452963 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484571934 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.484597921 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.484603882 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484611988 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484638929 CEST	49828	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.484646082 CEST	443	49828	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484946012 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.484996080 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.485032082 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.485032082 CEST	49824	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.485048056 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.485057116 CEST	443	49824	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.485351086 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.485780954 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.485829115 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.486157894 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.486170053 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.486188889 CEST	49826	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.486195087 CEST	443	49826	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.487942934 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.487994909 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.488049030 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.488205910 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.488220930 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.488426924 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.488554001 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.488600016 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.488817930 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.488822937 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.488833904 CEST	49827	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.488840103 CEST	443	49827	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.489331961 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.489357948 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.489409924 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.489686966 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.489701986 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.490408897 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.490420103 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.490495920 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.490818024 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.490829945 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.491132975 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.491147041 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.491205931 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.491331100 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:34.491343021 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:34.597928047 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.598136902 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.598146915 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.598481894 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.598546028 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.599096060 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.599148989 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.599323988 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.599375963 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.599477053 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.599483967 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.648679018 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.941910028 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.941977024 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.942034006 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.950160027 CEST	49825	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.950190067 CEST	443	49825	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.951261997 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.951312065 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:34.951371908 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.951684952 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:34.951698065 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:35.232506037 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.233652115 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.233675957 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.235919952 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.235924959 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.240752935 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.241517067 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.241539955 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.242598057 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.242602110 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.257544994 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.258339882 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.258377075 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.259315014 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.259325027 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.261430979 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.261992931 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.262006044 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.262720108 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.262725115 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.264334917 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.265010118 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.265041113 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.268523932 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.268533945 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.368065119 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.368130922 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.368184090 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.368796110 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.368814945 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.368824005 CEST	49831	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.368829012 CEST	443	49831	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.373868942 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.374047041 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.374103069 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.375730038 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.375756979 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.375829935 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.376074076 CEST	49832	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.376087904 CEST	443	49832	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.379409075 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.379425049 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.381597996 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.381697893 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.381762028 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.381947994 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.381963968 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.401602030 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402194023 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402251959 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.402309895 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.402332067 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402347088 CEST	49834	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.402354956 CEST	443	49834	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402416945 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402723074 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.402770996 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.403804064 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.403820038 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.403839111 CEST	49835	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.403844118 CEST	443	49835	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.410060883 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.410090923 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.410142899 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.411557913 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.411590099 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.411639929 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.412009001 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.412023067 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.412098885 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.412116051 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.413088083 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.413480997 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.413537979 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.413712978 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.413712978 CEST	49833	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.413736105 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.413747072 CEST	443	49833	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.418505907 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.418525934 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:35.418584108 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.418940067 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:35.418948889 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.042658091 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.042928934 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:36.042947054 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.043267012 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.043817997 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:36.043889046 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.044027090 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:36.091412067 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.137583971 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.138077021 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.138104916 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.138575077 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.138581038 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.152846098 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.153218031 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.153237104 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.153613091 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.153618097 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.159543991 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.159842014 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.159873962 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.160453081 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.160459042 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.179966927 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.180423021 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.180439949 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.180942059 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.180946112 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.183958054 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.184542894 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.184565067 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.184871912 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.184878111 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.276087999 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.276182890 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.276281118 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.276417971 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.276434898 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.276447058 CEST	49839	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.276453018 CEST	443	49839	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.279369116 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.279414892 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.279500008 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.279668093 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.279684067 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.292332888 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.292644024 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.292695045 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.292721987 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.292738914 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.292748928 CEST	49838	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.292753935 CEST	443	49838	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.294930935 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.294954062 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.295130968 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.295366049 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.295377016 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.295420885 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.295876026 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.295974970 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.296001911 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.296014071 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.296022892 CEST	49841	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.296029091 CEST	443	49841	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.298547983 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.298584938 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.298669100 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.298827887 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.298842907 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.319174051 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.319449902 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.319586992 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.325413942 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.325483084 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.325551987 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.390599012 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.390657902 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.390710115 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:36.760266066 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.760292053 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.760303974 CEST	49842	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.760309935 CEST	443	49842	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.761162043 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.761162043 CEST	49840	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.761184931 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.761194944 CEST	443	49840	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.812347889 CEST	49837	443	192.168.2.4	17.248.209.70
Oct 21, 2024 07:42:36.812381029 CEST	443	49837	17.248.209.70	192.168.2.4
Oct 21, 2024 07:42:36.850286961 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.850337982 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.850410938 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.851464987 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.851494074 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.851557016 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.852550030 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.852566004 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:36.852871895 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:36.852888107 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.030774117 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.035080910 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.035100937 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.036628962 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.036638021 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.039107084 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.039566994 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.039583921 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.040335894 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.040340900 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.045273066 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.046266079 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.046279907 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.048024893 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.048029900 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.051518917 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.051536083 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.051657915 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.052325010 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.052335978 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.169895887 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.170161963 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.170233965 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.170494080 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.170531034 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.170542002 CEST	49843	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.170548916 CEST	443	49843	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176362038 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.176390886 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176479101 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.176477909 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176642895 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.176654100 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176824093 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176913023 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.176974058 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.176986933 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.176997900 CEST	49844	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.177002907 CEST	443	49844	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.179752111 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.179759979 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.179929018 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.180160999 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.180171013 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.182090044 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.182542086 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.182600975 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.182640076 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.182652950 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.182684898 CEST	49845	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.182691097 CEST	443	49845	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.187912941 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.187942982 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.188009024 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.188215971 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.188229084 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.590020895 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.591057062 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.591078043 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.592099905 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.592104912 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.629779100 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.630973101 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.630985975 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.631911993 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.631916046 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.723764896 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.723853111 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.723906040 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.724442005 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.724448919 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.724478006 CEST	49846	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.724483013 CEST	443	49846	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.730956078 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.730992079 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.731060028 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.731297016 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.731308937 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.771497965 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.771564960 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.771617889 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.773125887 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.773138046 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.773145914 CEST	49847	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.773150921 CEST	443	49847	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.776707888 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.776727915 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.776801109 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.776943922 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.776954889 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.899111986 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.899386883 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.899400949 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.899696112 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.900052071 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.900105953 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.900358915 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.900396109 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:37.900419950 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:37.941672087 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.941896915 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.942193031 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.942210913 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.942684889 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.942702055 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.942707062 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.942733049 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.943027020 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.943043947 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.943681955 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.944025040 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.944060087 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:37.944439888 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:37.944453955 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.076527119 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.076689005 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.076750040 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.076883078 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.076905966 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.076919079 CEST	49850	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.076925993 CEST	443	49850	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.078444958 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.078493118 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.078558922 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.079601049 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.079601049 CEST	49851	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.079612017 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.079621077 CEST	443	49851	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.080384970 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.080415010 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.080554008 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.080883026 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.080899000 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.081793070 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.081815958 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.081826925 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.081959009 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.082125902 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.082137108 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.082576036 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.082637072 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.082683086 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.082703114 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.082715034 CEST	49849	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.082722902 CEST	443	49849	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.084661961 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.084708929 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.084770918 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.084974051 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.084994078 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.240483999 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:38.240571976 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:38.240629911 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:38.241372108 CEST	49848	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:38.241383076 CEST	443	49848	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:38.288445950 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:38.288482904 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:38.288604975 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:38.289102077 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:38.289115906 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:38.476126909 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.476582050 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.476599932 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.477024078 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.477027893 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.530203104 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.530699015 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.530724049 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.531287909 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.531291962 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.611928940 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.612011909 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.612055063 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.612462044 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.612473965 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.612483025 CEST	49853	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.612488031 CEST	443	49853	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.615952015 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.615979910 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.616115093 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.616496086 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.616506100 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.666867018 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.666928053 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.666976929 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.667191982 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.667202950 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.667212009 CEST	49854	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.667216063 CEST	443	49854	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.670166016 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.670191050 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.670258999 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.670603991 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.670619011 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.843681097 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.844234943 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.850963116 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.854672909 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.854686022 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.855321884 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.855334044 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.858449936 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.858495951 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.859121084 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.859146118 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.860239029 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.860260963 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.860629082 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.860634089 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.986654043 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.986846924 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.986931086 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.986989021 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.987001896 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.987010002 CEST	49856	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.987014055 CEST	443	49856	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.989800930 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.989831924 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.990019083 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.990169048 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.990184069 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.991940022 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.992532015 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.992607117 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.993175983 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.993222952 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.993244886 CEST	49857	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.993253946 CEST	443	49857	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.994671106 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.994884968 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.994949102 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.995007992 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.995019913 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.995032072 CEST	49855	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.995035887 CEST	443	49855	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.999206066 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.999217033 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:38.999277115 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.999406099 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:38.999414921 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.000513077 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.000534058 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.000606060 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.000797033 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.000812054 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.145740986 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.145967007 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:39.145978928 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.146274090 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.147067070 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:39.147135019 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.147389889 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:39.195400953 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.374099970 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.374587059 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.374604940 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.375210047 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.375215054 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.433922052 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.434437037 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.434463024 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.435075045 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.435079098 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.499345064 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.499407053 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.500750065 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:39.501086950 CEST	49858	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:39.501111984 CEST	443	49858	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:39.512820959 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.512996912 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.513170004 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.513210058 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.513210058 CEST	49859	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.513220072 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.513226986 CEST	443	49859	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.518127918 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.518170118 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.522438049 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.522438049 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.522480011 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.573754072 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.574084044 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.574176073 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.574177027 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.574275970 CEST	49860	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.574285984 CEST	443	49860	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.576819897 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.576844931 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.577008963 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.577116013 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.577131033 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.746516943 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.747045040 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.747081041 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.747766972 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.747781992 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.752935886 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.753290892 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.753308058 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.753748894 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.753753901 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.761077881 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.761771917 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.761773109 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.761806965 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.761818886 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.883394003 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.883430958 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.883584023 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.883764029 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.883784056 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.883817911 CEST	49861	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.883824110 CEST	443	49861	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.886504889 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.886531115 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.886846066 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.886929989 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.886938095 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.888624907 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.889281988 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.889378071 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.889378071 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.889422894 CEST	49863	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.889429092 CEST	443	49863	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.891828060 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.891855955 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.892015934 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.892116070 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.892137051 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.900180101 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.900332928 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.900599957 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.900599957 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.900801897 CEST	49862	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.900825024 CEST	443	49862	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.902740955 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.902762890 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:39.902940989 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.903033018 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:39.903038979 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.294707060 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.295690060 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.295690060 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.295701981 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.295717001 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.360546112 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.363003969 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.363027096 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.363526106 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.363531113 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.435897112 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.436187029 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.436299086 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.436299086 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.436299086 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.442082882 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.442091942 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.442249060 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.442420006 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.442433119 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.501832008 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.502233028 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.502302885 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.503406048 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.503406048 CEST	49865	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.503417015 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.503424883 CEST	443	49865	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.509574890 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.509584904 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.509648085 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.509804010 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.509815931 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.635569096 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.636051893 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.636075020 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.636516094 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.636521101 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.640712976 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.646142006 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.646161079 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.646553040 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.646559954 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.665201902 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.665677071 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.665698051 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.666136026 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.666141987 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.750178099 CEST	49864	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.750201941 CEST	443	49864	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.771965981 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.772207022 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.772284985 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.772326946 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.772326946 CEST	49866	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.772337914 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.772346020 CEST	443	49866	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.775403976 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.775429964 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.775537968 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.775979042 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.775994062 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.777812958 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.777986050 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.778126955 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.778152943 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.778152943 CEST	49867	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.778166056 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.778170109 CEST	443	49867	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.780482054 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.780543089 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.780631065 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.781435966 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.781469107 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.803602934 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.803756952 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.803827047 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.803874969 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.803893089 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.803898096 CEST	49868	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.803904057 CEST	443	49868	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.806683064 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.806713104 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:40.806782007 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.806934118 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:40.806950092 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.212579966 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.250251055 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.254149914 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.303446054 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.420902967 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.420908928 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.421068907 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.421080112 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.421483040 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.421488047 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.421576977 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.421581030 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.519969940 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.525228977 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.525250912 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.526025057 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.526031971 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.535784006 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.542627096 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.542651892 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.543143034 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.543148994 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.552651882 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.552707911 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.552772999 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.552973032 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.552978039 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.552987099 CEST	49870	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.552990913 CEST	443	49870	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.555608988 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.555628061 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.555694103 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.555866957 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.555880070 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.557759047 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.558187962 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.558240891 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.558269978 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.558274031 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.558284998 CEST	49869	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.558288097 CEST	443	49869	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.559376955 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.559706926 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.559720993 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.560177088 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.560182095 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.560538054 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.560564041 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.560621023 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.560772896 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.560785055 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.657269001 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.657318115 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.657514095 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.658579111 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.658598900 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.658610106 CEST	49871	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.658616066 CEST	443	49871	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.660865068 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.660907030 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.661149025 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.661283016 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.661297083 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.676611900 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.676668882 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.676745892 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.676943064 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.676959991 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.676974058 CEST	49872	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.676980972 CEST	443	49872	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.679797888 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.679817915 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.679877996 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.680037022 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.680051088 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.697369099 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.697824955 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.697875977 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.697921038 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.697928905 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.697937012 CEST	49873	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.697941065 CEST	443	49873	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.700186014 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.700195074 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:41.700277090 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.700468063 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:41.700479984 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.302706003 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.303170919 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.303188086 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.304219007 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.304224014 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.312685966 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.313352108 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.313370943 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.313940048 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.313945055 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.428296089 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.428735971 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.428750992 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.429214001 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.429219007 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.446055889 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.446260929 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.446314096 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.446386099 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.446386099 CEST	49874	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.446396112 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.446404934 CEST	443	49874	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.447422981 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.447536945 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.447623968 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.447851896 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.447851896 CEST	49875	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.447864056 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.447869062 CEST	443	49875	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.448939085 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.449757099 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.449774027 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.450246096 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.450251102 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.451649904 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.451664925 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.451745033 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.451890945 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.451899052 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.453052998 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.453073978 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.453161955 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.453264952 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.453279018 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.465043068 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.465451002 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.465466976 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.466037989 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.466043949 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.572573900 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.572707891 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.572777987 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.572854042 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.572868109 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.572876930 CEST	49876	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.572882891 CEST	443	49876	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.575995922 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.576030970 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.576318026 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.576536894 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.576550007 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.589328051 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.589667082 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.589729071 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.602725983 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.602880001 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.603168011 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.606817007 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.606837034 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.606857061 CEST	49877	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.606863022 CEST	443	49877	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.632312059 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.632312059 CEST	49878	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.632319927 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.632328987 CEST	443	49878	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.635423899 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635453939 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.635586023 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635617018 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.635632992 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635744095 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635767937 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635776997 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:42.635911942 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:42.635926008 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.201334953 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.201852083 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.201864004 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.202430010 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.202434063 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.230731010 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.231224060 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.231247902 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.231662035 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.231668949 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.336431026 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.336565018 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.336642981 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.336765051 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.336774111 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.336786985 CEST	49879	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.336791992 CEST	443	49879	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.339117050 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.339517117 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.339535952 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.339567900 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.339581013 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.339641094 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.339740992 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.339752913 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.340086937 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.340092897 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.387686968 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.387761116 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.387847900 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.387995005 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.387995005 CEST	49880	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.388012886 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.388022900 CEST	443	49880	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.392061949 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.392095089 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.392178059 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.392537117 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.392561913 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.401258945 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.401657104 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.401674986 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.402179956 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.402185917 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.406004906 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.407821894 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.407860041 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.408529043 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.408539057 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.476466894 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.476562977 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.476735115 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.477844954 CEST	49881	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.477858067 CEST	443	49881	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.481427908 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.481451988 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.481632948 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.481842041 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.481853962 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.539503098 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.542232037 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.542293072 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.544482946 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.546988964 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.547056913 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.574826002 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.574826002 CEST	49882	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.574877977 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.574888945 CEST	443	49882	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.930721998 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.930749893 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.930764914 CEST	49883	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.930772066 CEST	443	49883	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.974371910 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.974402905 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.974509954 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.975024939 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.975043058 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.975410938 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.975418091 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.975498915 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.975682020 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:43.975693941 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:43.992109060 CEST	49726	80	192.168.2.4	199.232.214.172
Oct 21, 2024 07:42:43.997226954 CEST	80	49726	199.232.214.172	192.168.2.4
Oct 21, 2024 07:42:43.997282982 CEST	49726	80	192.168.2.4	199.232.214.172
Oct 21, 2024 07:42:44.106064081 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.106683969 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.106699944 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.107178926 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.107182980 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.148513079 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.149080038 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.149101019 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.149632931 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.149643898 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.254487991 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.254913092 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.254997015 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.255319118 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.255326986 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.255342007 CEST	49884	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.255347013 CEST	443	49884	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.259252071 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.259305000 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.259401083 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.259514093 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.259531975 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.264081001 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.264590979 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.264605999 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.265110016 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.265115976 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.285018921 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.285094976 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.285195112 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.291687012 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.291687012 CEST	49885	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.291708946 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.291714907 CEST	443	49885	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.301650047 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.301667929 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.301753998 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.302225113 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.302237034 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.403697968 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.403835058 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.403944969 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.404033899 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.404048920 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.404097080 CEST	49886	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.404103994 CEST	443	49886	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.409308910 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.409352064 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.409502983 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.409724951 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.409739971 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.750232935 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.750710011 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.753767967 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.753793955 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.754301071 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.754307032 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.754736900 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.754755974 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.755275965 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.755280972 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.889969110 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.890203953 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.890294075 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.890325069 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.890336990 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.890373945 CEST	49887	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.890379906 CEST	443	49887	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.892916918 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.893121958 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.893373966 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.893975973 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.893980026 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.893995047 CEST	49888	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.893999100 CEST	443	49888	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.896744013 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.896801949 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.896867990 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.897547007 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.897581100 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.897773027 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.897798061 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:44.897901058 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.898041964 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:44.898058891 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.002868891 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.005122900 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.005156994 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.005774021 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.005779982 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.075069904 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.075545073 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.075557947 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.076025009 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.076030016 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.139909029 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.140307903 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.140388966 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.140422106 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.140438080 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.140503883 CEST	49890	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.140512943 CEST	443	49890	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.145565033 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.145622969 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.145699024 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.146049976 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.146064043 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.182972908 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.183428049 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.183449030 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.183878899 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.183885098 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.226985931 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.227166891 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.227264881 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.227355957 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.227370977 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.227381945 CEST	49891	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.227392912 CEST	443	49891	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.230283022 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.230349064 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.230484009 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.230665922 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.230684042 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.321818113 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.321928024 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.321976900 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.330104113 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.330118895 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.330130100 CEST	49892	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.330136061 CEST	443	49892	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.333801985 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.333836079 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.333939075 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.335820913 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.335834026 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.651732922 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.652215004 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.652245998 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.652786016 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.652805090 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.656181097 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.656528950 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.656563997 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.656965971 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.656975031 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.785811901 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.785959005 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.786036968 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.786128998 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.786149979 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.786175013 CEST	49893	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.786183119 CEST	443	49893	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.788955927 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.789002895 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.789300919 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.789483070 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.789506912 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.793046951 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.793288946 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.793350935 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.793401003 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.793420076 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.793431997 CEST	49894	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.793440104 CEST	443	49894	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.795766115 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.795797110 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.795870066 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.796025038 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.796040058 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.916506052 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.916992903 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.917016983 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.917467117 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.917471886 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.983426094 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.985677004 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.985712051 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:45.986246109 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:45.986251116 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.056796074 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.056977987 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.057028055 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.057445049 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.057461023 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.057471037 CEST	49895	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.057476044 CEST	443	49895	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.063132048 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.063150883 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.063241005 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.063916922 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.063927889 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.076896906 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.077528954 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.077549934 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.078413010 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.078418970 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.125323057 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.125436068 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.125489950 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.125588894 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.125607014 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.125616074 CEST	49896	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.125622034 CEST	443	49896	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.129028082 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.129064083 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.129159927 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.129434109 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.129446030 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.211503029 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.211596966 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.211669922 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.262927055 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.262948990 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.262959957 CEST	49897	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.262974977 CEST	443	49897	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.269731045 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.269788980 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.270153046 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.274727106 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.274744034 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.452193975 CEST	49738	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:46.457978010 CEST	80	49738	85.115.56.150	192.168.2.4
Oct 21, 2024 07:42:46.458041906 CEST	49738	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:42:46.536417007 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.536915064 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.536950111 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.537395000 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.537400007 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.547755957 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.548171043 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.548186064 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.548620939 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.548625946 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.674859047 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.675120115 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.675184011 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.685216904 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.685302973 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.685365915 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.695349932 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.695403099 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.695440054 CEST	49900	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.695449114 CEST	443	49900	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.697505951 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.697516918 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.697530985 CEST	49901	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.697535038 CEST	443	49901	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.700939894 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.700963974 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.701147079 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.702085018 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.702126980 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.702197075 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.702472925 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.702486992 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.702569962 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.702583075 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.815013885 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.815578938 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.815591097 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.816028118 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.816032887 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.897816896 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.898515940 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.898550987 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.899059057 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.899065018 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.949440956 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.949570894 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.949630022 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.949898958 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.949911118 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.949919939 CEST	49902	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.949924946 CEST	443	49902	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.953788042 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.953800917 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:46.953866959 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.954188108 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:46.954200983 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.016716003 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.017214060 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.017246008 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.017849922 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.017854929 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.040947914 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.041127920 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.041183949 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.059706926 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.059706926 CEST	49903	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.059763908 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.059779882 CEST	443	49903	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.065716982 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.065735102 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.065824986 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.066044092 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.066057920 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153397083 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153420925 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153479099 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.153500080 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153512955 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153558969 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.153830051 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.153846025 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.153855085 CEST	49904	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.153861046 CEST	443	49904	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.157257080 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.157300949 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.157588005 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.157768965 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.157782078 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.476023912 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.477140903 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.477164030 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.478558064 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.478564024 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.494978905 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.496304989 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.496329069 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.497113943 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.497118950 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.616631985 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.616777897 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.616854906 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.617167950 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.617182970 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.617196083 CEST	49907	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.617202044 CEST	443	49907	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.621402979 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.621484995 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.621555090 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.621692896 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.621711969 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.635612011 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.635708094 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.635844946 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.636142969 CEST	49906	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.636149883 CEST	443	49906	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.642560005 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.642580032 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.642661095 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.643399000 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.643409967 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.704332113 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.706347942 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.706365108 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.707319975 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.707324982 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.834186077 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.834697008 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.834712029 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.835393906 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.835397959 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.845014095 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.845036983 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.845093012 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.845127106 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.845170021 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.845602989 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.845609903 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.845621109 CEST	49915	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.845626116 CEST	443	49915	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.851592064 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.851636887 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.851721048 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.851969957 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.851983070 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.910365105 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.911448956 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.911470890 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:47.912657976 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:47.912663937 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.177315950 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.177370071 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.177424908 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.177434921 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.177514076 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.177531004 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.177591085 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.178005934 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178057909 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178117037 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.178117990 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.178126097 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178133011 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178134918 CEST	49916	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.178138971 CEST	443	49916	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178210020 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.178262949 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.183079958 CEST	49917	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.183092117 CEST	443	49917	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.248883009 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.248898983 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.249161005 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.250742912 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.250761032 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.250885963 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.252509117 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.252521992 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.252975941 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.252988100 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.390006065 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.390547991 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.390569925 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.391406059 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.391410112 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.395433903 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.395900965 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.395915031 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.396295071 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.396298885 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.528080940 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.528151989 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.528222084 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.529689074 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.529706001 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.529716015 CEST	49918	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.529721975 CEST	443	49918	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.530599117 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.530719042 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.530810118 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.531310081 CEST	49919	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.531320095 CEST	443	49919	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.536037922 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.536067963 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.536137104 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.536817074 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.536859989 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.536923885 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.537050009 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.537064075 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.538402081 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.538415909 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.623112917 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.623780012 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.623804092 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.624545097 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.624561071 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.760968924 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.761043072 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:48.761091948 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:48.953129053 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:48.953183889 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:48.953288078 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:48.964052916 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:48.964085102 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:48.997358084 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.012726068 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.048401117 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.058991909 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.107863903 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.107863903 CEST	49920	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.107897997 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.107909918 CEST	443	49920	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.127969980 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.127981901 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.133646011 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.133652925 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.134927988 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.134934902 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.135786057 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.135792017 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.192667007 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.192697048 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.192909956 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.193393946 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.193408012 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.267096996 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.267268896 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.267334938 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.267527103 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.267544031 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.267560005 CEST	49927	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.267566919 CEST	443	49927	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.269751072 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.269820929 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.269898891 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.270792007 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.270798922 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.270853996 CEST	49926	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.270858049 CEST	443	49926	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.276019096 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.276058912 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.276897907 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.277678013 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.277694941 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.279227018 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.279244900 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.279381037 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.279608965 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.279619932 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.287681103 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.288470984 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.288491011 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.289374113 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.289378881 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.305203915 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.305578947 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.305608034 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.306101084 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.306106091 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.424200058 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.424282074 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.424328089 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.444674015 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.444839001 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.444885015 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:49.805488110 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:49.845176935 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:49.931058884 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:49.973256111 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.003523111 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:50.003539085 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:50.004044056 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:50.004743099 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:50.004812002 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:50.011363029 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.011399031 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.011414051 CEST	49929	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.011420965 CEST	443	49929	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.013674021 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.013674021 CEST	49928	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.013694048 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.013703108 CEST	443	49928	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.030786037 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.030791998 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.040672064 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.040676117 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.041496992 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.045403957 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.045427084 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.046315908 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:42:50.046492100 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.046498060 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.047194004 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.048408985 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.048433065 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.049087048 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.049093962 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.050585985 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.050606012 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.050669909 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.052695036 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.052706003 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.054925919 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.054958105 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.055190086 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.055308104 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.055320978 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.170059919 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.170109034 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.170291901 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.170394897 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.170440912 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.170469999 CEST	49931	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.170489073 CEST	443	49931	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.173631907 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.173677921 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.173768044 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.173996925 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.174010038 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.182450056 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.182557106 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.182684898 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.182734013 CEST	49934	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.182774067 CEST	443	49934	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.184921980 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.185091972 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.185379028 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.185405016 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.185414076 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.185450077 CEST	49935	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.185453892 CEST	443	49935	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.186939001 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.186960936 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.187030077 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.187208891 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.187222004 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.189492941 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.189513922 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.189579010 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.189723969 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.189738035 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.791963100 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.796327114 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.835216045 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.850400925 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.938987970 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.943399906 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.945508957 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:50.989826918 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.989850044 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:50.989849091 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.962297916 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.962337017 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.962848902 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.962855101 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.963115931 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.963143110 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.963515043 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.963519096 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.963769913 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.963784933 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.964222908 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.964229107 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.964611053 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.964624882 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.964988947 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.964993954 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.968358994 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.968373060 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:51.968739986 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:51.968753099 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094654083 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094698906 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094746113 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094774008 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094810009 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.094815016 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.094842911 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.094856977 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.095141888 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.095143080 CEST	49936	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.095154047 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.095161915 CEST	443	49936	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.096745014 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.096843958 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.096901894 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.097167015 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.097207069 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.097278118 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.097281933 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.097332001 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.098041058 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.098066092 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.098083019 CEST	49937	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.098090887 CEST	443	49937	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.099917889 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.099927902 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.099940062 CEST	49938	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.099945068 CEST	443	49938	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.101252079 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.101264000 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.101274967 CEST	49940	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.101279974 CEST	443	49940	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.104099989 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.104177952 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.104285955 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.111054897 CEST	49939	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.111068010 CEST	443	49939	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.112080097 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.112091064 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.112160921 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.112948895 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.112962008 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.113987923 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.113995075 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.114058018 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.114181995 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.114195108 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.114752054 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.114811897 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.114883900 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.115077019 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.115096092 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.115859032 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.115886927 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.115933895 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.116141081 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.116177082 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.116233110 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.116261005 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.116275072 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.116430044 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.116444111 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.853148937 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.853698015 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.853718042 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.854144096 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.854149103 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.863879919 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.864212990 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.864228010 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.864624977 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.864630938 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.871483088 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.871794939 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.871809959 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.872312069 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.872318983 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.877405882 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.877718925 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.877741098 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.878190041 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.878196001 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.883701086 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.884221077 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.884253979 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.884578943 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.884586096 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.987526894 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.987608910 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.987761021 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.987860918 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.987875938 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.987888098 CEST	49945	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.987894058 CEST	443	49945	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.990622997 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.990645885 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:52.990803957 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.990947008 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:52.990967035 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.000864029 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.000905991 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.000946999 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.000967026 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.001003027 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.001080990 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.001085997 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.001116991 CEST	49946	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.001121044 CEST	443	49946	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.003249884 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.003278017 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.003421068 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.003556967 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.003567934 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.008783102 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.009182930 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.009318113 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.009318113 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.009318113 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.011213064 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.011255026 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.011467934 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.011467934 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.011499882 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.017014980 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.017132044 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.017307997 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.017683983 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.017683983 CEST	49949	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.017700911 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.017709970 CEST	443	49949	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.020157099 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.020184994 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.020250082 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.020378113 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.020386934 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.022078991 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.022598982 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.022664070 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.022747993 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.022766113 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.022778988 CEST	49948	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.022788048 CEST	443	49948	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.025111914 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.025121927 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.025348902 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.025650978 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.025660038 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.052315950 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.052326918 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.052432060 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.052973032 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.052984953 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.310600996 CEST	49947	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.310625076 CEST	443	49947	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.740216017 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.760329962 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.762130976 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.778100967 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.783210039 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.816361904 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.831192017 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.834152937 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850101948 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850101948 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850109100 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.850127935 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.850642920 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850647926 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.850876093 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850879908 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.850887060 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.850891113 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.851140022 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.851160049 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.851236105 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.851239920 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.851500988 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.851531029 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.851660967 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.851665974 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.851979017 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.851984978 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.920207024 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.920449972 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.920458078 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.920783997 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.921190023 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.921245098 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.921324968 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.921401024 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:53.921405077 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:53.980703115 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.980870008 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.980926991 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.981003046 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.981024981 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.981034040 CEST	49961	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.981040001 CEST	443	49961	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.983603001 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.983633041 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.983819008 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.984535933 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984563112 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984707117 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984759092 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984776020 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984800100 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.984802008 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.984808922 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984827042 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.984843016 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.984884977 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984922886 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.984977961 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.985296965 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.985308886 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.985315084 CEST	49958	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.985320091 CEST	443	49958	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.986186981 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.986212015 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.986227036 CEST	49960	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.986234903 CEST	443	49960	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.987951040 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.988019943 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.988177061 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.988429070 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.988559961 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.988610029 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.988693953 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.988701105 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.988712072 CEST	49962	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.988720894 CEST	443	49962	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.989522934 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.989567041 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.989799976 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990513086 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990520954 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.990658045 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990658045 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990673065 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.990742922 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990782022 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990794897 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.990876913 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990890026 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.990895987 CEST	49959	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.990901947 CEST	443	49959	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.991003036 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.991013050 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.991128922 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.991144896 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.993001938 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.993021965 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:53.993247032 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.993380070 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:53.993393898 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.272419930 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:54.272480965 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:54.272532940 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:54.273328066 CEST	49963	443	192.168.2.4	17.248.209.68
Oct 21, 2024 07:42:54.273338079 CEST	443	49963	17.248.209.68	192.168.2.4
Oct 21, 2024 07:42:54.305397987 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:54.305449009 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:54.305517912 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:54.306049109 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:54.306066036 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:54.741451979 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.742074966 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.742109060 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.742510080 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.742516041 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.748492956 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.749084949 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.749109030 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.749937057 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.749942064 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.751291990 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.753837109 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.753853083 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.754452944 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.754457951 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.759186983 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.759673119 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.759685040 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.760327101 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.760332108 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.771025896 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.771455050 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.771472931 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.772001028 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.772006035 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.876585007 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.876612902 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.876658916 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.876665115 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.876703978 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.877177000 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.877198935 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.877211094 CEST	49965	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.877218008 CEST	443	49965	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.880665064 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.880683899 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.880740881 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.880901098 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.880909920 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.888010979 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.888106108 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.888159037 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.888278961 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.888289928 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.888300896 CEST	49966	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.888305902 CEST	443	49966	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.889843941 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.890005112 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.890157938 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.890227079 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.890275955 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.890275955 CEST	49967	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.890288115 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.890296936 CEST	443	49967	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.892110109 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.892143011 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.892338037 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.892693043 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.892704010 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.892818928 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.892846107 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.892901897 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.893138885 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.893150091 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.902412891 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.902527094 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.902570963 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.902757883 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.902762890 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.902771950 CEST	49964	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.902776957 CEST	443	49964	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.905697107 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.905709028 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.905777931 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.906214952 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.906225920 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.912909031 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.912996054 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.913050890 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.913168907 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.913176060 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.913183928 CEST	49968	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.913187981 CEST	443	49968	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.915210962 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.915227890 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:54.915484905 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.915612936 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:54.915626049 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.139605045 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.142491102 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:55.142528057 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.142868042 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.143296003 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:55.143362045 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.143454075 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:55.187431097 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.485888958 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.485943079 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.486186028 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:55.486804962 CEST	49970	443	192.168.2.4	17.248.209.73
Oct 21, 2024 07:42:55.486829996 CEST	443	49970	17.248.209.73	192.168.2.4
Oct 21, 2024 07:42:55.658467054 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.659053087 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.659077883 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.661020994 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.661027908 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.663639069 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.663738966 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.664119005 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.664148092 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.664781094 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.664781094 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.664789915 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.664803028 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.664907932 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.665299892 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.665307045 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.665843010 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.665843010 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.665860891 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.665867090 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.674536943 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.674885035 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.674906015 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.675771952 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.675780058 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.802809000 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.802968025 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.803549051 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.803628922 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.803659916 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.803864956 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.803908110 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.803908110 CEST	49973	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.803925037 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.803934097 CEST	443	49973	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.804812908 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.804812908 CEST	49972	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.804830074 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.804840088 CEST	443	49972	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.806643963 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.806655884 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.806803942 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.806849957 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.806905031 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.807758093 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.807795048 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.807821035 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.807823896 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.807859898 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.807877064 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.807985067 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.808639050 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.808650970 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.808680058 CEST	49971	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.808685064 CEST	443	49971	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.808820009 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.808820009 CEST	49975	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.808831930 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.808840990 CEST	443	49975	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.809092045 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.809109926 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.809464931 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.810411930 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.810411930 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.810425997 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.810441017 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.812179089 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.812222004 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.812283993 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.812772989 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.812791109 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.813440084 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.813682079 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.813730955 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.813774109 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.813805103 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.813894033 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.813899040 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.813915968 CEST	49974	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.813916922 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.813920975 CEST	443	49974	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.814147949 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.814160109 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.816075087 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.816101074 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:55.818312883 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.818533897 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:55.818548918 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.562210083 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.563529968 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.563539982 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.564409018 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.564414024 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.570235014 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.570755959 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.570792913 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.571460962 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.571466923 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.577586889 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.578375101 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.578408957 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.578787088 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.578792095 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.580992937 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.581437111 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.581458092 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.582107067 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.582112074 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.582235098 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.582633972 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.582647085 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.583112001 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.583117008 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.697802067 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.698040009 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.698095083 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.698292971 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.698299885 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.698312044 CEST	49981	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.698317051 CEST	443	49981	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.701237917 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.701252937 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.701309919 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.701838970 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.701852083 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.707655907 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.707707882 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.707756042 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.707770109 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.707811117 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.707937956 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.707958937 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.707967997 CEST	49980	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.707973957 CEST	443	49980	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.710717916 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.710740089 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.710803032 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.710921049 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.710932970 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.713754892 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.713975906 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.714027882 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.714070082 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.714092016 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.714102030 CEST	49979	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.714107037 CEST	443	49979	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.719742060 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.719767094 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.719821930 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.719935894 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.719948053 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722043037 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722209930 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722258091 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.722269058 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722704887 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722778082 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.722873926 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.722873926 CEST	49978	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.722886086 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722893953 CEST	443	49978	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.722901106 CEST	49977	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.722904921 CEST	443	49977	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.728883028 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.728899002 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.728979111 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.729227066 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.729239941 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.731214046 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.731220961 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:56.731295109 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.731735945 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:56.731745958 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.460244894 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.460717916 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.460756063 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.461153030 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.461158037 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.463321924 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.463669062 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.463696003 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.464059114 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.464063883 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.480314970 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.480665922 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.480684042 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.481084108 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.481090069 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.492110014 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.492443085 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.492479086 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.492834091 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.492839098 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.501296043 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.501601934 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.501616001 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.501981020 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.501986027 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.595587015 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.595674992 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.595742941 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.595968962 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.595993996 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.596009970 CEST	49983	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.596016884 CEST	443	49983	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.599057913 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.599087000 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.599155903 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.599354982 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.599370003 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.600917101 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.600944042 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.600982904 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.601003885 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.601090908 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.601185083 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.601197958 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.601211071 CEST	49982	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.601214886 CEST	443	49982	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.603578091 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.603594065 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.603643894 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.603774071 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.603790998 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.621794939 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.621881008 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.621938944 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.622231007 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.622242928 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.622251034 CEST	49985	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.622256041 CEST	443	49985	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.625191927 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.625201941 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.625300884 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.625756025 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.625766039 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.640990973 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.641330957 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.641388893 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.641391039 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.641454935 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.641505003 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.641510010 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.641542912 CEST	49986	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.641547918 CEST	443	49986	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644161940 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644222021 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644377947 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644416094 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644486904 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644546032 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644562960 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644597054 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644599915 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644608021 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644644976 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644669056 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644681931 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644682884 CEST	49984	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.644690990 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.644696951 CEST	443	49984	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.646950006 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.646980047 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:57.647039890 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.647209883 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:57.647222996 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.360850096 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.361471891 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.361501932 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.362034082 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.362046003 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.364582062 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.365165949 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.365199089 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.365597963 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.365602970 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.373672009 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.374104023 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.374124050 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.374826908 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.374833107 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.397439957 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.397871017 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.397906065 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.398359060 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.398367882 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.426517010 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.427083015 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.427114964 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.427766085 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.427772999 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.503424883 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.503456116 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.503501892 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.503707886 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.503709078 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.503809929 CEST	49989	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.503827095 CEST	443	49989	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.506097078 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.506140947 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.506263018 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.506342888 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.506357908 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.507555008 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.507610083 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.507774115 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.507774115 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.507913113 CEST	49990	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.507925987 CEST	443	49990	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.509864092 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.509881020 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.510047913 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.510129929 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.510139942 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.513153076 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.513230085 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.513540030 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.513540030 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.513622046 CEST	49988	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.513634920 CEST	443	49988	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.515463114 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.515496016 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.515681982 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.515743971 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.515757084 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.534070969 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.534162045 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.534370899 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.534370899 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.534668922 CEST	49991	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.534686089 CEST	443	49991	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.536834002 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.536870003 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.536967993 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.537101984 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.537117958 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.566646099 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.566821098 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.566999912 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.566999912 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.567058086 CEST	49992	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.567069054 CEST	443	49992	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.569370031 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.569407940 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:58.569513083 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.569600105 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:58.569607973 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.265767097 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.266944885 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.266944885 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.266973019 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.266983032 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.287746906 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.288486004 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.288486004 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.288502932 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.288510084 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.290556908 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.291227102 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.291227102 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.291258097 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.291269064 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.320379019 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.321357012 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.321357012 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.321384907 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.321396112 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.348316908 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.349205971 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.349205971 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.349232912 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.349241972 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.404494047 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.404520988 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.404573917 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.404603958 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.404727936 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.404871941 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.404871941 CEST	49993	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.404894114 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.404902935 CEST	443	49993	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.407680988 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.407716036 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.407908916 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.407908916 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.407938957 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.430042028 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.430249929 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.430363894 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.430363894 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.430437088 CEST	49994	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.430443048 CEST	443	49994	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.432657957 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.432701111 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.432931900 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.432931900 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.432966948 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.434201002 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.434252977 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.434309959 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.434442043 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.434442043 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.434539080 CEST	49995	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.434551954 CEST	443	49995	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.436361074 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.436407089 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.436558008 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.436645985 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.436661959 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.463917971 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.464119911 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.464205027 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.464205027 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.464238882 CEST	49996	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.464251995 CEST	443	49996	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.466159105 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.466202974 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.466372013 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.466450930 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.466459036 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.487746000 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.487885952 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.488034964 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.488034964 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.488054037 CEST	49997	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.488064051 CEST	443	49997	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.490328074 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.490362883 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.490418911 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.490540981 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:42:59.490551949 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:42:59.824239016 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:59.824305058 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:42:59.824362040 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:43:00.162012100 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.162552118 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.162580967 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.163074970 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.163079977 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.185229063 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.185724020 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.185751915 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.186279058 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.186285973 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.203039885 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.203414917 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.203445911 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.203972101 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.203978062 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.244255066 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.244735956 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.244757891 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.245238066 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.245243073 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.248771906 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.249140978 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.249155045 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.249602079 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.249605894 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.298275948 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.298336983 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.298396111 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.298610926 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.298623085 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.298631907 CEST	49998	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.298638105 CEST	443	49998	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.301290989 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.301327944 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.301398039 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.301556110 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.301570892 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.319556952 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.319614887 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.319705009 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.319757938 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.319772959 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.319782972 CEST	50000	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.319787979 CEST	443	50000	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.322266102 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.322293043 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.322350979 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.322572947 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.322587967 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.343151093 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.343188047 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.343234062 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.343235016 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.343403101 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.344636917 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.344649076 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.344754934 CEST	49999	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.344760895 CEST	443	49999	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.351120949 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.351171970 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.351408958 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.351545095 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.351562023 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.384000063 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.384077072 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.384193897 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.384248018 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.384248018 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.384390116 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.384407043 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.384418964 CEST	50001	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.384423971 CEST	443	50001	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.385691881 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.385750055 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.385806084 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.385962009 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.385962009 CEST	50002	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.385967970 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.385979891 CEST	443	50002	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.389144897 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389166117 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.389224052 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389302969 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389322042 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.389466047 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389527082 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389540911 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.389765024 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:00.389779091 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:00.854712963 CEST	49930	443	192.168.2.4	216.58.206.68
Oct 21, 2024 07:43:00.854747057 CEST	443	49930	216.58.206.68	192.168.2.4
Oct 21, 2024 07:43:01.052841902 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.053670883 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.053702116 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.054048061 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.054054976 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.061131001 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.062040091 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.062040091 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.062063932 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.062078953 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.100270987 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.101186991 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.101186991 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.101227045 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.101238966 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.139060020 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.139904976 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.139904976 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.139926910 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.139935970 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.143615007 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.144066095 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.144107103 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.144388914 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.144402981 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.196500063 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.196923971 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.197082996 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.197197914 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.197197914 CEST	50004	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.197216034 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.197226048 CEST	443	50004	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.199934959 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.199979067 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.200177908 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.200474977 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.200486898 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.201850891 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.202369928 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.202491999 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.202544928 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.202567101 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.202578068 CEST	50003	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.202584028 CEST	443	50003	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.204648018 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.204698086 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.204946041 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.205060959 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.205079079 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.236403942 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.236557961 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.236641884 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.236778975 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.236778975 CEST	50005	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.236799955 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.236810923 CEST	443	50005	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.239417076 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.239429951 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.239491940 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.239609957 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.239624977 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.273684978 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.273735046 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.273788929 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.274017096 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.274017096 CEST	50007	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.274029016 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.274038076 CEST	443	50007	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.276150942 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.276180983 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.276273966 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.276374102 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.276386023 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.294931889 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.295217991 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.295336962 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.295375109 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.295401096 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.295430899 CEST	50006	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.295438051 CEST	443	50006	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.298557997 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.298583031 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.298831940 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.298831940 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.298856974 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.878753901 CEST	49737	80	192.168.2.4	85.115.56.150
Oct 21, 2024 07:43:01.883588076 CEST	80	49737	85.115.56.150	192.168.2.4
Oct 21, 2024 07:43:01.959237099 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.959810019 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.959839106 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.961007118 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.961013079 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.980560064 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.981075048 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.981101036 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.984226942 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.984231949 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.991343975 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.992034912 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.992058039 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:01.992439985 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:01.992445946 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.047452927 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.048311949 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.048333883 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.050203085 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.050252914 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.050257921 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.050570011 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.050582886 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.050992012 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.050998926 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.101912975 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.101948977 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.102014065 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.102147102 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.102303982 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.102360010 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.102360010 CEST	50009	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.102380991 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.102390051 CEST	443	50009	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.105361938 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.105410099 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.105501890 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.105730057 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.105741978 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.125228882 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.125382900 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.125507116 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.125507116 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.125679016 CEST	50008	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.125691891 CEST	443	50008	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128134012 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128153086 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128232002 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128293037 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128308058 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128420115 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128441095 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128469944 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128498077 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128498077 CEST	50010	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.128511906 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.128521919 CEST	443	50010	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.130918980 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.130954981 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.131047964 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.131252050 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.131263971 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.185429096 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.185622931 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.185775042 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.185775042 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.185863018 CEST	50012	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.185873985 CEST	443	50012	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.187938929 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.187957048 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.188388109 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.188483953 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.188494921 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.190193892 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.190247059 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.190485954 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.190485954 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.190608025 CEST	50011	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.190619946 CEST	443	50011	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.192548990 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.192576885 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.192796946 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.192861080 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.192878008 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.857201099 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.857805014 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.857836962 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.858464956 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.858470917 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.882591009 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.883212090 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.883232117 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.883786917 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.883793116 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.903738022 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.904309034 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.904325962 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.904997110 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.905003071 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.936871052 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.937369108 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.937385082 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.937979937 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.937985897 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.956974983 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.957714081 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.957725048 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.958359003 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.958369017 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.994281054 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.994306087 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.994359016 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.994380951 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.994438887 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.994652033 CEST	50013	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.994664907 CEST	443	50013	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.998200893 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.998222113 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:02.998282909 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.998447895 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:02.998464108 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.024393082 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.024424076 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.024468899 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.024481058 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.024548054 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.024736881 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.024736881 CEST	50015	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.024755001 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.024764061 CEST	443	50015	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.027736902 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.027760983 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.027894020 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.028031111 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.028040886 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.046154022 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.046184063 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.046226978 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.046236992 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.046278000 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.046437979 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.046447992 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.046458006 CEST	50014	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.046463966 CEST	443	50014	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.049648046 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.049694061 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.049757957 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.049938917 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.049962044 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.071193933 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.071481943 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.071535110 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.071544886 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.071578979 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.071799040 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.071799040 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.071875095 CEST	50017	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.071881056 CEST	443	50017	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.074558973 CEST	50021	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.074593067 CEST	443	50021	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.074686050 CEST	50021	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.075936079 CEST	50021	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.075948000 CEST	443	50021	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.101525068 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.101701975 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.101808071 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.101891994 CEST	50016	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.101907969 CEST	443	50016	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.104839087 CEST	50022	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.104849100 CEST	443	50022	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.104939938 CEST	50022	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.105055094 CEST	50022	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.105067015 CEST	443	50022	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.751312017 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.751796961 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.751811981 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.752326012 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.752331972 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.788981915 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.789541006 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.789556026 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.790086985 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.790092945 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.799808979 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.800673962 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.800673962 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.800710917 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.800717115 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.852303028 CEST	443	50022	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.853219986 CEST	443	50021	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.853259087 CEST	50022	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.853285074 CEST	443	50022	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.853413105 CEST	50022	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.853418112 CEST	443	50022	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.853621006 CEST	50021	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.853631020 CEST	443	50021	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.853993893 CEST	50021	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.854000092 CEST	443	50021	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.889035940 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.889187098 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.889353991 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.889353991 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.889377117 CEST	50018	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.889386892 CEST	443	50018	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.892296076 CEST	50023	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.892345905 CEST	443	50023	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.892491102 CEST	50023	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.892618895 CEST	50023	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.892641068 CEST	443	50023	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.927072048 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.927103043 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.927212000 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.927261114 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.927440882 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.927442074 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.927858114 CEST	50019	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.927875042 CEST	443	50019	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.930193901 CEST	50024	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.930218935 CEST	443	50024	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.930438995 CEST	50024	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.930527925 CEST	50024	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.930537939 CEST	443	50024	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.935668945 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.935761929 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.935801983 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.935947895 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.935947895 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.936041117 CEST	50020	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.936064005 CEST	443	50020	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.938338995 CEST	50025	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.938379049 CEST	443	50025	13.107.253.45	192.168.2.4
Oct 21, 2024 07:43:03.938524961 CEST	50025	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.938613892 CEST	50025	443	192.168.2.4	13.107.253.45
Oct 21, 2024 07:43:03.938633919 CEST	443	50025	13.107.253.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 21, 2024 07:41:44.247276068 CEST	53	62052	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:44.618657112 CEST	53	59848	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:45.938711882 CEST	53	49634	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:46.069669008 CEST	55815	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:46.070065975 CEST	55580	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:46.086123943 CEST	53	55815	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:46.086464882 CEST	53	55580	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:46.968698025 CEST	59092	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:46.968837976 CEST	58000	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:46.990791082 CEST	53	58000	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:47.135984898 CEST	53	59092	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:47.962415934 CEST	55346	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:47.962747097 CEST	50254	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:47.969919920 CEST	53	55346	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:47.983544111 CEST	53	50254	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:48.698154926 CEST	49675	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:48.698342085 CEST	61154	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:41:48.704999924 CEST	53	49675	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:48.705544949 CEST	53	61154	1.1.1.1	192.168.2.4
Oct 21, 2024 07:41:53.828746080 CEST	138	138	192.168.2.4	192.168.2.255
Oct 21, 2024 07:42:02.855537891 CEST	53	54216	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.273690939 CEST	61574	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.273982048 CEST	50063	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.280477047 CEST	54782	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.280733109 CEST	53	61574	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.280782938 CEST	53	50063	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.289371014 CEST	53	54782	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.289411068 CEST	57102	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.297065973 CEST	53	57102	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.305475950 CEST	58841	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.305625916 CEST	52364	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:18.313695908 CEST	53	52364	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:18.315310001 CEST	53	58841	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:22.457904100 CEST	53	59665	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:27.486563921 CEST	58730	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:27.486563921 CEST	58160	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:27.496186018 CEST	53	58160	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:27.496819019 CEST	53	58730	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:29.242806911 CEST	57839	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:29.243004084 CEST	56627	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:29.250094891 CEST	53	57839	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:29.250332117 CEST	53	56627	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:30.521332979 CEST	49454	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:30.521487951 CEST	55861	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:30.530086994 CEST	53	49454	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:30.530098915 CEST	53	55861	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:33.503994942 CEST	53853	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:33.504848003 CEST	62155	53	192.168.2.4	1.1.1.1
Oct 21, 2024 07:42:33.514074087 CEST	53	53853	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:33.523428917 CEST	53	62155	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:44.123042107 CEST	53	52312	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:45.439889908 CEST	53	62199	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:52.562351942 CEST	53	53494	1.1.1.1	192.168.2.4
Oct 21, 2024 07:42:52.566404104 CEST	53	64952	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 21, 2024 07:41:46.069669008 CEST	192.168.2.4	1.1.1.1	0x4164	Standard query (0)	hybrid-web.global.blackspider.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:46.070065975 CEST	192.168.2.4	1.1.1.1	0x1c1c	Standard query (0)	hybrid-web.global.blackspider.com	65	IN (0x0001)	false
Oct 21, 2024 07:41:46.968698025 CEST	192.168.2.4	1.1.1.1	0xa8e3	Standard query (0)	www.mailcontrol.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:46.968837976 CEST	192.168.2.4	1.1.1.1	0x2b93	Standard query (0)	www.mailcontrol.com	65	IN (0x0001)	false
Oct 21, 2024 07:41:47.962415934 CEST	192.168.2.4	1.1.1.1	0x2ccf	Standard query (0)	www.mailcontrol.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:47.962747097 CEST	192.168.2.4	1.1.1.1	0x633d	Standard query (0)	www.mailcontrol.com	65	IN (0x0001)	false
Oct 21, 2024 07:41:48.698154926 CEST	192.168.2.4	1.1.1.1	0x380d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:48.698342085 CEST	192.168.2.4	1.1.1.1	0x979e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:18.273690939 CEST	192.168.2.4	1.1.1.1	0x2600	Standard query (0)	setup.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.273982048 CEST	192.168.2.4	1.1.1.1	0xb2c3	Standard query (0)	setup.icloud.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:18.280477047 CEST	192.168.2.4	1.1.1.1	0xa4b2	Standard query (0)	ckdatabasews.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289411068 CEST	192.168.2.4	1.1.1.1	0x85f0	Standard query (0)	ckdatabasews.icloud.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:18.305475950 CEST	192.168.2.4	1.1.1.1	0xaa4f	Standard query (0)	cvws.icloud-content.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.305625916 CEST	192.168.2.4	1.1.1.1	0xd08a	Standard query (0)	cvws.icloud-content.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:27.486563921 CEST	192.168.2.4	1.1.1.1	0x7a2	Standard query (0)	p110-calendarws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.486563921 CEST	192.168.2.4	1.1.1.1	0x6690	Standard query (0)	p110-calendarws.icloud.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:29.242806911 CEST	192.168.2.4	1.1.1.1	0xd5d1	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.243004084 CEST	192.168.2.4	1.1.1.1	0x32ab	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:30.521332979 CEST	192.168.2.4	1.1.1.1	0xeb0b	Standard query (0)	feedbackws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.521487951 CEST	192.168.2.4	1.1.1.1	0xc519	Standard query (0)	feedbackws.icloud.com	65	IN (0x0001)	false
Oct 21, 2024 07:42:33.503994942 CEST	192.168.2.4	1.1.1.1	0x68f1	Standard query (0)	p110-calendarws.icloud.com	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:33.504848003 CEST	192.168.2.4	1.1.1.1	0xcb4e	Standard query (0)	p110-calendarws.icloud.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 21, 2024 07:41:46.086123943 CEST	1.1.1.1	192.168.2.4	0x4164	No error (0)	hybrid-web.global.blackspider.com		85.115.56.150	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:47.135984898 CEST	1.1.1.1	192.168.2.4	0xa8e3	No error (0)	www.mailcontrol.com	cluster-aa.mailcontrol.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:41:47.135984898 CEST	1.1.1.1	192.168.2.4	0xa8e3	No error (0)	cluster-aa.mailcontrol.com		85.115.52.220	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:47.969919920 CEST	1.1.1.1	192.168.2.4	0x2ccf	No error (0)	www.mailcontrol.com	cluster-aa.mailcontrol.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:41:47.969919920 CEST	1.1.1.1	192.168.2.4	0x2ccf	No error (0)	cluster-aa.mailcontrol.com		85.115.52.220	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:48.704999924 CEST	1.1.1.1	192.168.2.4	0x380d	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:41:48.705544949 CEST	1.1.1.1	192.168.2.4	0x979e	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 21, 2024 07:42:00.910708904 CEST	1.1.1.1	192.168.2.4	0x170	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:00.910708904 CEST	1.1.1.1	192.168.2.4	0x170	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.165340900 CEST	1.1.1.1	192.168.2.4	0xb3ae	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.165340900 CEST	1.1.1.1	192.168.2.4	0xb3ae	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280733109 CEST	1.1.1.1	192.168.2.4	0x2600	No error (0)	setup.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.280782938 CEST	1.1.1.1	192.168.2.4	0xb2c3	No error (0)	setup.icloud.com	setup.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.69	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.283997059 CEST	1.1.1.1	192.168.2.4	0x144b	No error (0)	gateway.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.icloud.com	ckdatabasews.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.66	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.289371014 CEST	1.1.1.1	192.168.2.4	0xa4b2	No error (0)	ckdatabasews.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.297065973 CEST	1.1.1.1	192.168.2.4	0x85f0	No error (0)	ckdatabasews.icloud.com	ckdatabasews.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.313695908 CEST	1.1.1.1	192.168.2.4	0xd08a	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.icloud-content.com	cvws.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.apple-dns.net		17.248.209.42	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.apple-dns.net		17.248.209.38	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.apple-dns.net		17.248.209.41	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.apple-dns.net		17.248.209.39	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:18.315310001 CEST	1.1.1.1	192.168.2.4	0xaa4f	No error (0)	cvws.apple-dns.net		17.248.209.34	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496186018 CEST	1.1.1.1	192.168.2.4	0x6690	No error (0)	p110-calendarws.icloud.com	calendarws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	p110-calendarws.icloud.com	calendarws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:27.496819019 CEST	1.1.1.1	192.168.2.4	0x7a2	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.74	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.66	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250094891 CEST	1.1.1.1	192.168.2.4	0xd5d1	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.67	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:29.250332117 CEST	1.1.1.1	192.168.2.4	0x32ab	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:30.076890945 CEST	1.1.1.1	192.168.2.4	0xe806	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:30.076890945 CEST	1.1.1.1	192.168.2.4	0xe806	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:30.076890945 CEST	1.1.1.1	192.168.2.4	0xe806	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.64	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.71	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.69	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530086994 CEST	1.1.1.1	192.168.2.4	0xeb0b	No error (0)	feedbackws.fe2.apple-dns.net		17.248.209.65	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:30.530098915 CEST	1.1.1.1	192.168.2.4	0xc519	No error (0)	feedbackws.icloud.com	feedbackws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:33.514074087 CEST	1.1.1.1	192.168.2.4	0x68f1	No error (0)	p110-calendarws.icloud.com	calendarws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:33.514074087 CEST	1.1.1.1	192.168.2.4	0x68f1	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.70	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:33.514074087 CEST	1.1.1.1	192.168.2.4	0x68f1	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.73	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:33.514074087 CEST	1.1.1.1	192.168.2.4	0x68f1	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.72	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:33.514074087 CEST	1.1.1.1	192.168.2.4	0x68f1	No error (0)	calendarws.fe2.apple-dns.net		17.248.209.68	A (IP address)	IN (0x0001)	false
Oct 21, 2024 07:42:33.523428917 CEST	1.1.1.1	192.168.2.4	0xcb4e	No error (0)	p110-calendarws.icloud.com	calendarws.fe2.apple-dns.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:57.560909986 CEST	1.1.1.1	192.168.2.4	0x897e	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	s-part-0032.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 21, 2024 07:42:57.560909986 CEST	1.1.1.1	192.168.2.4	0x897e	No error (0)	s-part-0032.t-0009.t-msedge.net		13.107.246.60	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

https:

setup.icloud.com

p110-calendarws.icloud.com

feedbackws.icloud.com

otelrules.azureedge.net

hybrid-web.global.blackspider.com

www.mailcontrol.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	85.115.56.150	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:46.092139959 CEST	755	OUT	GET /urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z HTTP/1.1 Host: hybrid-web.global.blackspider.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:46.947169065 CEST	1236	IN	HTTP/1.1 403 User Confirmation X-Bst-Request-Id: kLtzWj:4kr:1969556 Content-Type: text/html; charset=utf-8 Pragma: No-cache Cache-Control: No-cache Content-Length: 5412 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 70 75 62 6c 69 63 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 65 6e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 20 20 20 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 69 6c 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 [TRUNCATED] Data Ascii: <!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//en" "http://www.w3.org/TR/html4/loose.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="utf-8"/> <base href="http://www.mailcontrol.com"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"/> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification.css" type="text/css"> ...[if IE ]> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css" type="text/css"> <script src="http://www.mailcontrol.com/http [TRUNCATED]
Oct 21, 2024 07:41:46.947194099 CEST	1236	IN	Data Raw: 5d 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 20 36 5d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: ]--> ...[if IE 6]> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-ie6.min.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-re
Oct 21, 2024 07:41:46.947206974 CEST	1236	IN	Data Raw: 73 65 74 31 22 20 69 64 3d 22 6e 6f 74 69 66 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 6f 74 69 66 79 2d 74 69 74 6c 65 2d 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: set1" id="notify"> <div class="notify-title-box"> <img id="title_icon" src="http://www.mailcontrol.com/http-resources/notification-pages/icons60/warning.png" height="60_" width="60_" class="" />
Oct 21, 2024 07:41:46.947227001 CEST	1236	IN	Data Raw: 6e 2e 68 72 65 66 3d 27 68 74 74 70 3a 2f 2f 68 79 62 72 69 64 2d 77 65 62 2e 67 6c 6f 62 61 6c 2e 62 6c 61 63 6b 73 70 69 64 65 72 2e 63 6f 6d 2f 75 72 6c 77 72 61 70 2f 3f 71 3d 41 58 69 63 46 63 7a 4c 61 6f 4e 41 47 45 44 68 5f 79 47 36 37 61 Data Ascii: n.href='http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfI
Oct 21, 2024 07:41:46.947241068 CEST	645	IN	Data Raw: 20 20 20 20 20 3c 73 70 61 6e 20 69 64 3d 22 66 6f 6f 74 65 72 2d 74 65 78 74 22 20 63 6c 61 73 73 3d 22 22 20 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: <span id="footer-text" class="" ></span> <div class="clear-float"></div> </div> <div class="clear-float"></div> </div> </d
Oct 21, 2024 07:41:48.978259087 CEST	717	OUT	GET /favicon.ico HTTP/1.1 Host: hybrid-web.global.blackspider.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:49.229500055 CEST	692	IN	HTTP/1.1 403 Forbidden X-Bst-Request-Id: kLtzWj:4kr:1969557 X-Bst-Info: ch=req,t=1729489309,h=45b,p=1_2526,r=_internal_MustAuthRule_,v=7.11.56 Content-Type: text/html; charset=utf-8 Pragma: No-cache Cache-Control: No-cache Content-Length: 440 Data Raw: 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 72 65 70 6f 72 74 61 62 6c 65 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 68 61 73 20 72 65 66 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 55 52 4c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 0a 20 20 20 20 61 20 70 61 67 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 6e 6f 74 69 66 79 69 6e 67 20 79 6f 75 20 6f 66 20 74 68 69 73 20 65 76 65 6e 74 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0a 20 20 20 20 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 68 79 62 72 69 64 2d 77 65 62 2e 67 6c 6f 62 61 6c 2e 62 6c 61 63 6b 73 70 69 64 65 72 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6e 61 6d 65 3a 20 62 6c 6f 63 6b [TRUNCATED] Data Ascii: <html> <head> <title>Unreportable error</title> </head> <body> <p>The proxy has refused to serve the following URL but does not have a page configured for notifying you of this event. Please contact your administrator. <p>URL: http://hybrid-web.global.blackspider.com/favicon.ico</p> <p>Notification name: blocktransparentroamingtemplate</p> <p>Matched on rule '_internal_MustAuthRule_'</p> </body></html>
Oct 21, 2024 07:42:03.087888956 CEST	1145	OUT	GET /urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=scan HTTP/1.1 Host: hybrid-web.global.blackspider.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:42:03.452608109 CEST	1236	IN	HTTP/1.1 403 User Confirmation X-Bst-Request-Id: kLtzWj:4kr:1969584 X-Bst-Info: t=1729489323,h=45b,p=25757_588:2_12145,c=2358,c=100199,rc=2323,v=7.11.56 Content-Type: text/html; charset=utf-8 Pragma: No-cache Cache-Control: No-cache Content-Length: 4894 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 70 75 62 6c 69 63 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 65 6e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0d 0a 20 20 20 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 69 6c 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 [TRUNCATED] Data Ascii: <!DOCTYPE html public "-//W3C//DTD HTML 4.0 Transitional//en" "http://www.w3.org/TR/html4/loose.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <meta charset="utf-8"/> <base href="http://www.mailcontrol.com"> <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=0"/> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/bootstrap-responsive.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification.css" type="text/css"> ...[if IE ]> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/notification-pages/notification-ie.css" type="text/css"> <scri
Oct 21, 2024 07:42:03.452737093 CEST	212	IN	Data Raw: 70 74 20 73 72 63 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 69 6c 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 2f 68 74 74 70 2d 72 65 73 6f 75 72 63 65 73 2f 68 65 61 64 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 5b 65 Data Ascii: pt src="http://www.mailcontrol.com/http-resources/head.js"></script> <![endif]--> ...[if IE 6]> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css
Oct 21, 2024 07:42:03.452749014 CEST	1236	IN	Data Raw: 2f 62 6f 6f 74 73 74 72 61 70 2d 69 65 36 2e 6d 69 6e 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d Data Ascii: /bootstrap-ie6.min.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resources/bootstrap/css/ie.css" type="text/css"> <link rel="stylesheet" href="http://www.mailcontrol.com/http-resou
Oct 21, 2024 07:42:03.452799082 CEST	1236	IN	Data Raw: 77 77 77 2e 6d 61 69 6c 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 2f 68 74 74 70 2d 72 65 73 6f 75 72 63 65 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 70 61 67 65 73 2f 69 63 6f 6e 73 36 30 2f 73 75 63 63 65 73 73 2e 70 6e 67 22 20 68 65 69 67 68 74 3d Data Ascii: www.mailcontrol.com/http-resources/notification-pages/icons60/success.png" height="60_" width="60_" class="" /> <span id="notify-title" class="" >URL Verified</span> <div id="titleBlink"></div>
Oct 21, 2024 07:42:03.452811003 CEST	424	IN	Data Raw: 34 64 36 6a 69 30 55 6f 36 54 71 79 6a 7a 50 4b 4f 4f 38 65 47 72 66 67 77 55 52 6e 6e 54 31 31 51 6f 7a 62 58 70 70 66 49 69 50 65 31 7a 36 35 4e 39 6c 6c 55 48 76 4e 47 6a 49 71 76 49 6f 7a 68 50 64 6c 68 50 74 55 31 52 34 4f 41 39 79 75 4d 34 Data Ascii: 4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=allow'" class="btn">Continue to Site</button></div></div></di
Oct 21, 2024 07:42:03.452912092 CEST	813	IN	Data Raw: 77 77 2e 6d 61 69 6c 63 6f 6e 74 72 6f 6c 2e 63 6f 6d 2f 68 74 74 70 2d 72 65 73 6f 75 72 63 65 73 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 70 61 67 65 73 2f 32 30 32 30 2f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 70 61 67 65 5f 6c 6f 67 6f 5f 31 Data Ascii: ww.mailcontrol.com/http-resources/notification-pages/2020/notification_page_logo_145x35.png" height="35" width="145" id="bottom-logo" class=""/> <span id="footer-text" class="" ></span> <
Oct 21, 2024 07:42:04.487262011 CEST	748	OUT	GET /favicon.ico HTTP/1.1 Host: hybrid-web.global.blackspider.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=scan Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:42:04.739195108 CEST	692	IN	HTTP/1.1 403 Forbidden X-Bst-Request-Id: kLtzWj:4kr:1969586 X-Bst-Info: ch=req,t=1729489324,h=45b,p=1_2526,r=_internal_MustAuthRule_,v=7.11.56 Content-Type: text/html; charset=utf-8 Pragma: No-cache Cache-Control: No-cache Content-Length: 440 Data Raw: 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 55 6e 72 65 70 6f 72 74 61 62 6c 65 20 65 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 70 3e 54 68 65 20 70 72 6f 78 79 20 68 61 73 20 72 65 66 75 73 65 64 20 74 6f 20 73 65 72 76 65 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 55 52 4c 20 62 75 74 20 64 6f 65 73 20 6e 6f 74 20 68 61 76 65 0a 20 20 20 20 61 20 70 61 67 65 20 63 6f 6e 66 69 67 75 72 65 64 20 66 6f 72 20 6e 6f 74 69 66 79 69 6e 67 20 79 6f 75 20 6f 66 20 74 68 69 73 20 65 76 65 6e 74 2e 20 50 6c 65 61 73 65 20 63 6f 6e 74 61 63 74 20 79 6f 75 72 20 61 64 6d 69 6e 69 73 74 72 61 74 6f 72 2e 0a 20 20 20 20 3c 70 3e 55 52 4c 3a 20 68 74 74 70 3a 2f 2f 68 79 62 72 69 64 2d 77 65 62 2e 67 6c 6f 62 61 6c 2e 62 6c 61 63 6b 73 70 69 64 65 72 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 3c 2f 70 3e 0a 20 20 20 20 3c 70 3e 4e 6f 74 69 66 69 63 61 74 69 6f 6e 20 6e 61 6d 65 3a 20 62 6c 6f 63 6b [TRUNCATED] Data Ascii: <html> <head> <title>Unreportable error</title> </head> <body> <p>The proxy has refused to serve the following URL but does not have a page configured for notifying you of this event. Please contact your administrator. <p>URL: http://hybrid-web.global.blackspider.com/favicon.ico</p> <p>Notification name: blocktransparentroamingtemplate</p> <p>Matched on rule '_internal_MustAuthRule_'</p> </body></html>
Oct 21, 2024 07:42:16.552983999 CEST	1177	OUT	GET /urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=allow HTTP/1.1 Host: hybrid-web.global.blackspider.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=scan Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:42:16.876074076 CEST	360	IN	HTTP/1.1 302 Found X-Bst-Request-Id: kLtzWj:4kr:1969593 Content-length: 0 X-Bst-Info: t=1729489336,h=45b,p=25757_588:2_12145,c=2358,c=100199,rc=2323,v=7.11.56 Location: https://www.icloud.com/calendar/event/#t=2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC&p=p110&reply=accept Pragma: No-cache Cache-Control: No-cache
Oct 21, 2024 07:43:01.878753901 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143717051 CEST	381	OUT	GET /http-resources/bootstrap/css/bootstrap.css HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:47.962774992 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:47 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=288000, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Content-Length: 14581 Connection: close Content-Type: text/css Content-L Data Raw: Data Ascii:
Oct 21, 2024 07:41:47.962836027 CEST	212	IN	Data Raw: 6e 67 75 61 67 65 3a 20 65 6e 0d 0a 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 7d 6b 93 1b 37 92 e0 77 fd 8a 3a 39 36 6c cb 24 5d 4f 3e da 31 8e 99 9d 9b bb 9d 88 dd f9 72 fb cd 33 17 51 64 15 9b b5 2a b2 e8 62 51 2d d9 b1 ff fd f0 2e 20 91 40 81 ec Data Ascii: nguage: en}k7w:96l$]O>1r3Qd*bQ-. @eI=D"HoM]7\<GE7C<(4f~h8%J5y?==-J[ue)
Oct 21, 2024 07:41:47.962894917 CEST	1236	IN	Data Raw: ff ac 2f cd e3 89 90 2e 4f 55 b4 bd 36 ed 10 91 ca 0f 51 d9 b6 ac 9e b6 7b 57 47 cd 89 fd fb a9 eb db 2a fa e3 c0 b9 8b b6 1f a2 3f 1e ab 8e 61 fe 71 5f 0e 0b 42 ef fb 57 af ca 7e 68 76 6d 3d 7b 55 5e 9a 8a fc 55 d5 43 d9 b4 97 d9 ab 7d f3 b8 2b Data Ascii: /.OU6Q{WG?aq_BW~hvm={U^UC}+C=)y:e~yT;rnvoxktW$:9(zJ_%#S7\|;}^IQ<{-+&T_(S}~e_0B?
Oct 21, 2024 07:41:47.962917089 CEST	1236	IN	Data Raw: 90 81 40 45 b3 fe 17 9c a4 61 32 36 c9 22 5f 6f b2 65 b2 dc 64 26 35 52 40 3e af e2 34 ce 08 b5 cc 41 cc b0 bd eb 74 b1 59 ad 57 69 96 6d 0a 9b 3f 5a 9a 16 45 96 6c e2 a5 87 3f d3 62 e7 0b d1 24 40 8c 16 24 8c f3 78 e3 66 cf b4 f0 c5 82 ea 14 a5 Data Ascii: @Ea26"_oed&5R@>4AtYWim?ZEl?b$@$xf8gya{Ad&psg#F{esGJTdh>y$I,^dr9[%wHq9e\Hze"Y0]ipb3Hz,2.1K01{n#XH2
Oct 21, 2024 07:41:47.962930918 CEST	1236	IN	Data Raw: 59 60 0a 9b 2d 9d 47 6c 88 ef 82 bb e2 3a ef b8 b9 cb 64 dd c8 e4 46 c4 5f b7 2a f6 41 46 06 a0 31 10 c8 a2 dd b1 82 c4 6d 71 70 1d f7 ee 2b c8 e6 84 4d 27 05 2e fa 91 51 c9 d8 c8 2a f1 fc eb aa 61 1b 2b f3 31 9c c3 19 99 24 f7 dd 12 a1 cb d0 4c Data Ascii: Y`-Gl:dF_AF1mqp+M'.Qa+1$L)%mz bBie+ST}FBZrO6Ve!;'APY=0ewwo{+41^.]&+yV!oeb!@hMQlXX_=D~={8v:ik\JbMci
Oct 21, 2024 07:41:47.962944031 CEST	1236	IN	Data Raw: ab ed a4 ca 1a 60 6e 95 95 60 6e 09 04 2a 2d 00 f7 a8 ad d6 1b b6 da 56 fb 7d 5c 61 76 45 eb 2a ad 4f 1e fa fa e7 6b d3 d7 d5 43 73 7a 57 b6 4d 05 f7 77 10 00 bd bb ac e2 30 23 57 d7 c5 be d8 4e 32 83 6f 39 39 c1 bc 8c b9 f5 a6 de 64 69 5a 4d ea Data Ascii: `n`n-V}\avEOkCszWMw0#WN2o99diZM~lWzcFQ!%4d=u\|P(V#sl][LbM`[}x\.^==t3vk+pZS5bNaJaA* )y%N[BL7
Oct 21, 2024 07:41:47.962968111 CEST	848	IN	Data Raw: 5b ff 2d a8 b3 dd e8 93 5d 3d 6e 22 d1 1f bf 1d 84 30 f8 66 94 06 03 ea e2 53 73 88 66 79 20 11 29 73 e8 10 fd f2 c9 79 5a bb 7c 62 f6 eb 96 68 4f 88 7a f9 40 9d 6d c7 95 ec 32 f4 cd 59 72 4f 59 3e 0d 07 ce e3 37 5d 55 7d ab 9b cc 49 d0 83 eb 24 Data Ascii: [-]=n"0fSsfy )syZ\|bhOz@m2YrOY>7]U}I$h?cAhJDE0rp%D2#R$"yHqGbDA$^iXyHa\{H,;X3:LOA7aM\|JaD\|:RiidijI(X&y`S&E`S
Oct 21, 2024 07:41:47.962980986 CEST	1236	IN	Data Raw: 03 47 ee 27 9a 2b 2c 0c 8a 4b 1f 2c 6e f6 3e 0f 51 18 19 80 3d e1 5c 09 f3 02 3b 95 05 08 4e c9 49 98 17 1c 77 aa ad c2 c2 40 bd 2d 77 35 9d e9 e7 e3 0b d3 5e 4b 03 87 58 b3 1b ae 7d 80 a5 81 78 f5 69 d7 78 bc aa 98 0f 69 7d b1 52 9e 69 8c cc 5b Data Ascii: G'+,K,n>Q=\;NIw@-w5^KX}xixi}Ri[.0LXvpph8C07E5M(CW.PjdOWuD*oX\|01P,]?.a\0q /1@^cK[O yVo^+Y#9Mb
Oct 21, 2024 07:41:47.963001013 CEST	1236	IN	Data Raw: b8 55 2a e7 36 7a db bc 64 77 c1 e0 94 e8 37 a8 2f 72 0b ef 49 ae b0 f4 87 a9 52 38 35 25 f8 9d 5f df 93 5f be e7 5c 9d a9 c3 ac 1c 8d 1f f7 39 d7 3b 1f cc 79 c6 7b 4d cf 78 ae 49 64 ab e4 3d 06 5e 18 c7 d2 ee c3 af e8 53 b9 92 a0 16 3c 38 be 61 Data Ascii: U*6zdw7/rIR85%__\9;y{MxId=^S<8a_K\zJx~W4sX;L"\ >t'pX)-L"/uy]uZRuB<@]$RKqfW+-,rI:.uv:x#BA
Oct 21, 2024 07:41:47.963012934 CEST	424	IN	Data Raw: 25 89 f8 06 cc 04 ff 3a 6d 25 c6 d1 86 8d c5 72 93 c5 69 69 b1 e9 e6 c9 55 cd 26 4f cb d4 b4 11 f2 7d 62 07 46 b1 dd ae 8a ad 8b b1 22 29 b3 22 b9 d5 48 2c d3 5d be 4c 67 12 fd 05 8c 04 a7 28 8c 84 a0 7a 97 91 08 64 cd 65 24 02 d1 dd 46 22 8c c0 Data Ascii: %:m%riiU&O}bF")"H,]Lg(zde$F"]F#gUF2n$mzB~B\|d=}\|*u;,NMU.fo5vWLT2E P7PpdV-gdg\|$_q-8X
Oct 21, 2024 07:41:47.967813015 CEST	1236	IN	Data Raw: 02 70 24 6b b6 69 e5 68 d3 ca 6a d3 78 60 39 51 d5 78 40 6a 56 95 39 aa ca f0 aa e8 31 e7 44 4d ea 24 d4 ac 28 71 54 64 9c a2 52 05 39 7b 62 ae f1 98 52 f3 45 3f 45 67 7c bc 6f fc 74 d3 3b 7d 18 9a f5 24 df 08 14 1a 63 24 5a f9 5d 04 9a 6c 80 1b Data Ascii: p$kihjx`9Qx@jV91DM$(qTdR9{bRE?Eg\|ot;}$c$Z]l'C[pc)kF2ECxoO=Lo^C&]oV{l>K8o3Y11J{/oxw^7<SztMJrBJnb(\y;)`CQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143769026 CEST	392	OUT	GET /http-resources/bootstrap/css/bootstrap-responsive.css HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:47.944098949 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:47 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=288000, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Content-Length: 2809 Connection: close Content-Type: text/css Content-La Data Raw: Data Ascii:
Oct 21, 2024 07:41:47.944113016 CEST	1236	IN	Data Raw: 67 75 61 67 65 3a 20 65 6e 0d 0a 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5b df 8f dc b6 11 7e f7 5f c1 9c 61 20 76 4f 3a 92 a2 44 71 8d 18 6e d3 3c 04 08 fa d0 f6 2d c8 83 76 a5 bb 15 ac 95 04 49 77 b7 76 90 ff bd 43 fd 58 49 e4 48 bb e7 0d da 14 Data Ascii: guage: en[~_a vO:Dqn<-vIwvCXIH%p8{W[Q4uSE%gRE^Oy.u=hs>)i$-1]IL8HO_h--F=??Qp.PO?~?u'uudf$v[sQe1
Oct 21, 2024 07:41:47.944127083 CEST	1236	IN	Data Raw: 21 03 03 20 0d 00 33 cd 0c e6 00 cf 37 ad f4 e7 00 ae 4c 23 85 01 e0 a6 91 9e 91 88 03 d3 48 6e 66 6a cb 97 c6 2c a6 36 16 f7 f7 75 d2 9c d6 63 16 1e 32 10 36 92 a1 48 8a 70 52 0c 19 08 6a 21 15 06 f4 65 68 01 43 14 c8 02 0b 28 31 a0 f0 ed e9 04 Data Ascii: ! 37L#Hnfj,6uc26HpRj!ehC(1Sl\|d<Hk60'_HJH3G\|\pQ1f;USBaEnn>#rU4 O=pfQd&.xeRJx$D
Oct 21, 2024 07:41:47.944138050 CEST	350	IN	Data Raw: a6 95 18 fa 4a e6 63 0d 7b b4 b4 64 cd 62 7b fb 83 b7 23 f3 dc 36 b9 69 bc d0 c6 43 68 12 81 4e 20 2f aa 43 94 ad 9a 2b ce 98 2b ce 98 2b 16 cd 9d fb 1d 96 e7 2f fa 8f af 8c b8 6e 75 37 fb e2 69 7c eb b6 bc c6 1d ae 1f c9 be d5 ff 9a b7 3f e8 80 Data Ascii: Jc{db{#6iChN /C+++/nu7i\|?t976;.&T99\?_tn:![x!j,H&Sn=@9k02f{V^F[k8fvjhOt\'7_:1#6-5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143822908 CEST	389	OUT	GET /http-resources/notification-pages/notification.css HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:47.965857029 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:47 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=288000, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Content-Length: 5183 Connection: close Content-Type: text/css Content-La Data Raw: Data Ascii:
Oct 21, 2024 07:41:47.965868950 CEST	224	IN	Data Raw: 67 75 61 67 65 3a 20 65 6e 0d 0a 0d 0a 1f 8b 08 00 00 00 00 00 00 03 d5 1c 6b 73 db b8 f1 b3 f4 2b d0 b8 99 c4 39 51 a6 28 c9 0f 69 ae 53 3b 71 5a 4f 73 ce 4d 9c cc b4 d3 b9 f1 50 22 68 b1 a1 48 0d 49 c5 71 34 fe ef dd c5 83 04 40 90 96 1b c5 d7 Data Ascii: guage: enks+9Q(iS;qZOsMP"hHIq4@X,b_d,e!(q4Y2pSrvgipG6]B[:NAN}gaN/nrE~#NN(ZDs\5}#e^A%7NLCU2NAu8]Q
Oct 21, 2024 07:41:47.965887070 CEST	1236	IN	Data Raw: 24 a9 f8 17 f9 53 b4 5c a5 59 e1 27 05 0e 37 d7 63 74 cb 2e 7f 5d a4 0d 5d 72 65 f3 34 4e b3 09 d9 1b 8e f1 3b 25 07 af c8 9e 77 82 df ce 94 bc 3a 90 6b 47 a6 4c 06 e3 d5 57 20 b4 03 30 37 34 a1 99 5f d0 80 00 6d 8b a2 58 4d 0e 0e 6e 6f 6f fb 0c Data Ascii: $S\Y'7ct.]]re4N;%w:kGLW 074_mXMnoo(}&xDE nZ'L\|v2%zL9qP?s$E9eK![\"{70_(e%L$qRk7R-%eCluL%FqAAFWYz7X7c0L
Oct 21, 2024 07:41:47.965899944 CEST	1236	IN	Data Raw: 2f 9f c6 e6 43 f0 49 1f ed 43 54 74 b7 93 dd e8 37 6c 8b a0 d9 57 d8 12 43 ab 7f d0 82 63 17 3e 01 47 5f f3 09 f8 54 76 9f 00 5c 5f d0 ce 92 fb 08 00 a7 b7 9c 81 99 94 0e 1e 93 1e 09 61 ae 05 cd d1 f8 0b 68 8f ab 3a 32 46 41 82 33 8b ca 08 6d 3e Data Ascii: /CICTt7lWCc>G_Tv\_ah:2FA3m>Y!BJw*{$3`MIBAyOou_SI'[9qdep5y5h{\?{qhENt,c]SM#"Vu[Y&
Oct 21, 2024 07:41:47.965912104 CEST	424	IN	Data Raw: 92 ee 16 40 78 4e b5 34 e5 40 37 f2 95 7b 5a d4 4f 28 0e a2 f8 5b bb a5 4b 63 48 ea 0c 05 1b 27 28 ba 41 9b 20 4a 7a 84 fd 3b a3 37 51 ce 6e 17 ed 1e f7 98 95 5e 26 4f 3d 89 56 bf cf b8 31 4e 6a 37 da a0 de c1 ee 73 61 d8 75 cc b8 3f cf 7b da 3d Data Ascii: @xN4@7{ZO([KcH'(A Jz;7Qn^&O=V1Nj7sau?{=>2sjfr=sXu6A0K07fhVv[q{t2Dj\|?QCDOY$OE2kQ%QecLd2%s6/apAHqq+jIC
Oct 21, 2024 07:41:47.965924978 CEST	1236	IN	Data Raw: 13 5d 81 d9 54 18 0d c3 93 30 24 3b d9 77 e5 36 6e 57 61 62 52 91 4f a5 c7 e1 09 df f6 1f 41 c6 f7 a6 64 91 52 7b 4a 16 e9 de ff 91 34 3f c8 bd 1f ce bc 96 c4 f0 93 d1 d0 96 5b 7e 2a 22 1e 48 4f b7 90 b1 03 25 c6 f1 1b 4a 8c cf 54 53 62 64 6a 58 Data Ascii: ]T0$;w6nWabROAdR{J4?[~"HO%JTSbdjX:<;{}~z8A`:xj'e:6]tPft4'#]:L^j)5hUy!tdch0sf5<})6aI<LV&4t;
Oct 21, 2024 07:41:47.965938091 CEST	840	IN	Data Raw: ff bf 76 51 38 8e 5b f8 8d 5a 85 ae 57 af 0c 6c f1 2c cd 92 5f f4 ee dc 9a b7 56 05 0b 6a 4f 27 34 3c 86 a6 c4 c0 ea ce 5f 7b 84 a1 59 57 b0 88 8b cd 03 ac 3d 70 cb 9d 40 3d 10 52 79 81 b5 8e 66 e5 d2 5c 1c 58 47 f2 5d ba 85 34 bb 81 a4 f2 03 1b Data Ascii: vQ8[ZWl,_VjO'4<_{YW=p@=Ryf\XG]4'ntcP4Gh)`{/-3%bj%RGpdYlOW}i:P,<MMWw<\|,CAt$#BBZ4g*TipvT'xVa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143872023 CEST	366	OUT	GET /http-resources/notification-pages/empty.js HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:47.935652971 CEST	1213	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:47 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=288000, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: application/javascript Content-Language: en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143944025 CEST	438	OUT	GET /http-resources/notification-pages/icons60/warning.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:48.966659069 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:48 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 5139 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 Data Ascii: PNGIHDR<<:r
Oct 21, 2024 07:41:48.966680050 CEST	1236	IN	Data Raw: 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e Data Ascii: tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
Oct 21, 2024 07:41:48.966691971 CEST	1236	IN	Data Raw: a3 b6 b6 16 3e 9f ef 33 d4 e4 ee 1b 56 a5 77 ef de 6d 65 36 da d4 d4 b4 ae ac ac 8c 33 fa ee f1 57 d1 db 3f 88 2b 31 17 32 5d 31 94 95 84 d1 70 cb 57 40 83 82 ce ce 4e 1c 3a 74 a8 87 fa 54 43 2c cb 37 a2 97 be 8f 1c d1 ba c2 c2 42 38 1c 76 b4 1e Data Ascii: >3Vwme63W?+12]1pW@N:tTC,7B8v\|gQ:<3}8ztUVKO?t.V!-3wa"M:D Mtt222@]js1<r.~7 jPR7k\|3{f`{~:WTTs
Oct 21, 2024 07:41:48.966703892 CEST	1236	IN	Data Raw: ab 1d f9 39 0e 38 6c 16 d3 6e b9 50 c7 39 d3 6a 52 a8 ae b2 48 74 86 99 08 c0 9a 62 d6 73 29 69 a9 2c 48 60 78 78 04 1d a7 0e f3 35 30 91 67 ef 78 ec b1 c7 dc 57 1d 30 bd 24 48 5e f3 9f 19 bb 0c ec 3b 07 7e 8c b1 b1 71 ac 09 8c 52 e7 9c 73 8c 72 Data Ascii: 98lnP9jRHtbs)i,H`xx50gxW0$H^;~qRsr)L)^$F%I&8hTEpW0E)h=sD&9z:c-.v]gTLmp$"1;oLO;v_5JI\|yRJrex=9V
Oct 21, 2024 07:41:48.966718912 CEST	848	IN	Data Raw: ef 69 6e 6e 76 5a 48 9d e4 e9 09 9c f8 ef 9d 58 5f a2 2e 58 f5 d6 8c a5 39 2e 3a 48 9a e4 2b 4c 08 a0 10 bd 4e 60 49 fd ba 22 2e 3c fc 6a 19 ce 0e 67 43 75 fa e1 09 6d c2 4b bd b7 e0 7f 4e a6 91 06 53 8a 99 20 4f 2e 27 38 e0 a4 4c 49 09 bb 26 ce Data Ascii: innvZHX_.X9.:H+LN`I".<jgCumKNS O.'8LI&u/~&`t2b%}7^TTuuk(N}ip>$5.\]I`E\|)FBKK"}-cb(E/d"r2[T~G6#''aka38A
Oct 21, 2024 07:41:48.966728926 CEST	550	IN	Data Raw: 63 22 d2 8f 53 67 7f 8e 30 a5 e4 1e 8b 91 ec cc 67 42 9a 07 cc 60 61 21 f0 a5 59 4b 7e c0 76 af 24 2d de 02 97 04 c3 ac 2f 31 0a 8d 57 28 34 f6 53 52 e7 6f fc 2a fc 6b be c8 bf ec 63 72 f1 e2 45 86 a9 6f 25 86 7f d5 77 7e 10 b5 d5 15 88 c5 65 c4 Data Ascii: c"Sg0gB`a!YK~v$-/1W(4SRo*kcrEo%w~e\NTmrweLFzydDIZ)\Jew%1S,ve]u_WnlG}F~>M6mpo4!lwM$MJWaK-`S{{;?bWW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.143973112 CEST	457	OUT	GET /http-resources/notification-pages/2020/notification_page_logo_145x35.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:47.935676098 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:47 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 4344 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 23 08 06 00 00 01 e3 dd d8 cb Data Ascii: PNGIHDR#
Oct 21, 2024 07:41:47.935688019 CEST	1236	IN	Data Raw: 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 10 af 49 44 41 54 78 01 ed 5b 0d 74 9d 45 99 9e 99 ef 26 69 da a4 15 5a 94 b6 e4 a7 3f b9 49 4d 72 d3 90 65 8b 20 7b e2 11 95 52 50 50 ba 42 bb 5b 75 11 76 dd 5d 16 74 39 dd 1f 0f b5 20 a2 6e Data Ascii: gAMAaIDATx[tE&iZ?IMre {RPPB[uv]t9 nEXK[<ZVmA#OMVWBKir>;_{sns3;34Roq8m\|H[iqY]6OXqU\P^t6+.W3a\\[{2f[rc0.)zh
Oct 21, 2024 07:41:47.935709000 CEST	1236	IN	Data Raw: 41 5a 9b 36 42 b0 19 c6 be 90 b0 36 06 e1 0b ca 23 e5 71 cf 6b 0b c2 98 7e eb cc bc dc 86 86 86 58 a6 72 58 f8 d7 61 5d be 3f bd 8c d5 2c 1e 30 c1 e4 87 d3 f0 1e f0 0e b7 ec 56 93 d2 f0 22 6f 71 d1 b4 43 cf 3e 3b 44 b8 6d 37 48 c3 29 c5 b5 3f 68 Data Ascii: AZ6B6#qk~XrXa]?,0V"oqC>;Dm7H)?h,m;X0Z0+risF;rLfJ +:HY7R`~;xT>5DyL'x#dV8s>#&&\|wI4^qLG8:rn<wv{-3/_7t(Pz)#
Oct 21, 2024 07:41:47.935722113 CEST	1236	IN	Data Raw: e6 ce 09 6f 89 d4 6a a6 56 f2 7f 2f 29 70 5e c6 49 3a e1 8f b6 44 e7 89 4d 1d 4a 5f 8e 47 57 c3 5d 6d 8d e6 15 7a b0 08 dc 1f 72 d1 92 48 55 5c a8 12 1c 34 63 9e e7 75 2c ab a9 e8 de ba 75 ab 1b a4 1b 2b cd f7 4e 27 06 e2 b5 9e 70 e7 e3 12 e2 2c Data Ascii: ojV/)p^I:DMJ_GW]mzrHU\4cu,u+N'p,^7o6,pu+eXiC=#NK=vOO^ln[0)-b`gWm*'676N/exW?rJJYuoSb)m]>$3#u;,Jakl{GY5mM?8
Oct 21, 2024 07:41:47.935733080 CEST	603	IN	Data Raw: a4 2c 72 2f be 4d 0b ee e9 9e 26 0e 56 fa 71 c8 f6 43 4c a3 fc 22 c8 0d af 71 12 57 89 84 05 03 be 37 fd b6 55 38 c0 bd dc 82 9c 8c b2 0a 96 f9 7d d2 fc ae 0d ef ff a1 5c c2 ec 39 61 8d 97 4c b4 9e 71 95 68 a2 95 58 ba f9 b3 0b aa 8e f6 0d 34 22 Data Ascii: ,r/M&VqCL"qW7U8}\9aLqhX4"_ez8H/z<}\O022; Uj`_v;.zOC>xW!tlsc2X&T&xt5}A[K@qa<j81<Y-J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49748	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.989856958 CEST	314	OUT	GET /http-resources/notification-pages/empty.js HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:48.821331024 CEST	1213	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:48 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=288000, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: application/javascript Content-Language: en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:47.990042925 CEST	344	OUT	GET /http-resources/notification-pages/2020/notification_page_logo_145x35.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:48.790851116 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:48 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 4344 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 91 00 00 00 23 08 06 00 00 01 e3 dd d8 cb Data Ascii: PNGIHDR#
Oct 21, 2024 07:41:48.790863991 CEST	1236	IN	Data Raw: 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 10 af 49 44 41 54 78 01 ed 5b 0d 74 9d 45 99 9e 99 ef 26 69 da a4 15 5a 94 b6 e4 a7 3f b9 49 4d 72 d3 90 65 8b 20 7b e2 11 95 52 50 50 ba 42 bb 5b 75 11 76 dd 5d 16 74 39 dd 1f 0f b5 20 a2 6e Data Ascii: gAMAaIDATx[tE&iZ?IMre {RPPB[uv]t9 nEXK[<ZVmA#OMVWBKir>;_{sns3;34Roq8m\|H[iqY]6OXqU\P^t6+.W3a\\[{2f[rc0.)zh
Oct 21, 2024 07:41:48.790884972 CEST	424	IN	Data Raw: 41 5a 9b 36 42 b0 19 c6 be 90 b0 36 06 e1 0b ca 23 e5 71 cf 6b 0b c2 98 7e eb cc bc dc 86 86 86 58 a6 72 58 f8 d7 61 5d be 3f bd 8c d5 2c 1e 30 c1 e4 87 d3 f0 1e f0 0e b7 ec 56 93 d2 f0 22 6f 71 d1 b4 43 cf 3e 3b 44 b8 6d 37 48 c3 29 c5 b5 3f 68 Data Ascii: AZ6B6#qk~XrXa]?,0V"oqC>;Dm7H)?h,m;X0Z0+risF;rLfJ +:HY7R`~;xT>5DyL'x#dV8s>#&&\|wI4^qLG8:rn<wv{-3/_7t(Pz)#
Oct 21, 2024 07:41:48.790895939 CEST	1236	IN	Data Raw: 13 3b e7 84 70 12 68 5d da 3f dc 3a 14 89 44 66 58 9a 60 ec 69 fd 49 23 9c 04 f1 7c f0 72 5e ef 45 ca 14 4b b1 33 70 8a 9a ca e1 8b 04 53 cf 31 ed 28 b5 bc ab bd c9 a4 a1 4d df 44 e7 ff 0a f7 50 1f 07 a1 11 14 24 33 44 f7 1e 69 8b 85 3c c1 58 4a Data Ascii: ;ph]?:DfX`iI#\|r^EK3pS1(MDP$3Di<XJg\cHac;3wIqy#O:r!w%P;Sch{Bk~sKK]7~$eZc`fpNI?+DV8L4\|;cgD~hK!1GF\+-,1[
Oct 21, 2024 07:41:48.790911913 CEST	1236	IN	Data Raw: 46 73 f5 c7 0a 71 cb 75 cd be fd ad 71 ab 40 50 82 18 19 90 b9 39 95 d3 d5 ac 99 f4 51 62 01 37 17 49 bc 8b f0 5c ef 09 28 6a 0f 3b 6f 19 0a c6 46 81 a4 3c 83 d9 f3 90 52 f2 2f 60 89 d6 10 5f 52 5e 7d 9f 3b 3c 88 37 af be 02 69 74 e4 31 bc 07 7d Data Ascii: Fsquq@P9Qb7I\(j;oF<R/`_R^};<7it1}Iq:QE\|of?Kf@sWHXc5VT&I'j]MB{$eN2HyL-V0xB-m;t6QDWr-.;-G
Oct 21, 2024 07:41:48.790923119 CEST	179	IN	Data Raw: 40 dc 93 a1 8e ad 28 93 87 3e 5e 97 ec a7 6f c1 81 7b 66 66 6e e1 ec 74 4b d3 15 6d da 42 be 20 8e 8f 61 2a f4 25 64 a0 ab c0 cb c7 51 07 bf 1e e2 a9 0a 28 71 90 df 11 f3 e1 15 27 50 82 ee f5 f9 ef 69 6f fe 62 48 a9 0a 2a f3 48 0b fa 12 4c 85 b1 Data Ascii: @(>^o{ffntKmB a%dQ(q'PiobHHLN<fH`KR~afTKfN?&@>(gJ +?zIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:41:48.996911049 CEST	325	OUT	GET /http-resources/notification-pages/icons60/warning.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:41:49.804380894 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:41:49 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 5139 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 Data Ascii: PNGIHDR<<:r
Oct 21, 2024 07:41:49.804392099 CEST	224	IN	Data Raw: 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e Data Ascii: tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
Oct 21, 2024 07:41:49.804403067 CEST	1236	IN	Data Raw: 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 Data Ascii: "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xa
Oct 21, 2024 07:41:49.804423094 CEST	1236	IN	Data Raw: 66 60 bf 7b c3 00 7e ea a9 a7 1a 98 3a 57 54 54 f0 f0 73 ec ad 9f 21 c7 da 8f 42 9f 85 c0 16 c0 e3 49 83 64 71 c0 43 cc b3 f3 42 bf 0d d9 f6 11 9c 6c f9 25 dd f3 70 07 66 b1 58 be 4d bf 53 76 dd 03 a6 4e b2 24 e3 b9 c6 c6 46 2b f3 be 97 23 fd 38 Data Ascii: f`{~:WTTs!BIdqCBl%pfXMSvN$F+#8sujs$_fSiP5#h99>K{AzEb7N^tJFA nbG,.J]<i^z"x/y/~zZ*k7H(--9`~?3K+4Jd#GMXFG<
Oct 21, 2024 07:41:49.804435015 CEST	424	IN	Data Raw: af 7c 1f 79 52 1f 4a 72 65 78 3d b6 39 c7 a3 0a 56 19 cb 26 68 5d 75 97 02 ac db b0 ce ac 26 00 1b c0 91 d4 4b c6 72 ad ff 12 da 4e 74 20 21 c7 29 3f cf c6 cd 37 df ec a5 6e 6d bb 2a 80 b7 6f df 6e a1 91 7d ee f6 db 6f 97 18 1b 97 fa cf a2 a7 a7 Data Ascii: \|yRJrex=9V&h]u&KrNt !)?7nm*on}o>&lQTa2?Cf$8LN}6CxW?\f"_Cl;vi.rvuNpST[`9/`=9])G}4Fuy3+"Z`
Oct 21, 2024 07:41:49.804446936 CEST	1236	IN	Data Raw: ce 52 41 36 81 ae 0a 8c e1 dd d6 7d 7c c0 d8 4c 8d c2 e4 3a ea c3 5f fd 4e 80 09 2c 4b df 9e dd b2 65 8b 0d 4a 0c 53 34 65 eb 6c f9 31 6e ca eb 83 5b ee 85 16 ed 87 26 4f e8 2c 1a 53 22 93 5d c3 43 eb 60 8d 38 bc 94 a8 f3 18 4e 2c 66 5a 35 98 56 Data Ascii: RA6}\|L:_N,KeJS4el1n[&O,S"]C`8N,fZ5V2E#l{0_5TcqCGUR9Xu3hbznF)lva\|\|Uv=II8dPcPP'@#]A]%'/lr>Lu+\|{3]
Oct 21, 2024 07:41:49.804461002 CEST	750	IN	Data Raw: 93 d8 36 4d 5f 5f df c6 95 00 67 d9 c8 26 64 42 e8 a4 74 2d 2d bb 00 93 d3 fd a0 30 09 23 4b 34 40 2f dd 29 69 ae 73 06 70 49 9a b7 c9 d7 5c 38 83 0d 79 33 b8 38 21 c1 2e 3a 9d e1 a4 58 6c d3 cd 60 fe 2e a8 b6 68 b3 d0 b4 6b 6a c7 26 2e 12 07 4b Data Ascii: 6M__g&dBt--0#K4@/)ispI\8y38!.:Xl`.hkj&.K#f,zx%NIzRntjrLVnhb(XIYhbm1UZgWmfQ,`~dea/c"Sg0gB`a!YK~v$-/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:42:03.670537949 CEST	438	OUT	GET /http-resources/notification-pages/icons60/success.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://hybrid-web.global.blackspider.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:42:04.478447914 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:04 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 6553 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 Data Ascii: PNGIHDR<<:r
Oct 21, 2024 07:42:04.478557110 CEST	1236	IN	Data Raw: 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e Data Ascii: tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
Oct 21, 2024 07:42:04.478568077 CEST	1236	IN	Data Raw: 2b 2d 9a a6 7d bb ac ac ec 13 0b 16 2c 40 49 49 09 d8 8c 77 ed fd 1d 8e ee eb 13 5f ad ae 77 e3 f3 d7 dc 26 a0 43 a1 10 ba bb bb 59 06 09 fc d9 f3 cf 3f ff a5 8a 8a 0a 7f 06 d0 e9 64 2a b4 31 05 f6 23 01 cb 89 0e d3 35 2d 6d db b6 6d 09 41 de 44 Data Ascii: +-},@IIw_w&CY?d*1#5-mmAD}@5J-b&c_b;3C0(+(0zzz9WX+;;-(OyA#4f5+\|4,NSAo19_JuFNPO+kxx}}}
Oct 21, 2024 07:42:04.478579998 CEST	636	IN	Data Raw: 9c 78 cd 26 2c b4 cc ad 30 e7 29 9a 4e 89 62 f9 b8 6c 81 5b ad 4d c0 5a 26 ad 08 68 24 80 85 56 f9 06 34 e1 a6 91 98 00 29 4e a0 6c f6 96 18 86 84 78 8c be 13 b7 c3 e5 cc 25 1f 16 25 bd 31 45 bb b3 af 87 49 c3 41 02 cc 63 60 9e 51 d3 90 11 23 68 Data Ascii: x&,0)Nbl[MZ&h$V4)Nlx%%1EIAc`Q#h'0eadkHN,%a-J<]oDkW4.ecS<H4iV\hnBr!+>K[>S,Wf,S`%L\|/"BqaM@R<)FT]&4,
Oct 21, 2024 07:42:04.478590012 CEST	1236	IN	Data Raw: 6f 32 ea 4d a5 a0 33 cd 38 f1 5a 3e a5 e1 d3 b4 9a d0 28 4f 9c 01 4a 73 66 0c db 77 3f 8f b8 aa e0 1b d7 3e 2d 82 50 3a 2c 0b c3 7e 6f db cd 88 44 ba d1 3c ff 4a d8 ec b4 5c 34 ac 45 cc 64 78 58 44 69 3d e4 42 7e 7e be 78 8f c7 ec 70 38 8e 4c b7 Data Ascii: o2M38Z>(OJsfw?>-P:,~oD<J\4EdxXDi=B~~xp8L3$CVsdd@\Fb_-PLk0,iU7bx7n!sl fD=X(-/)=/LZ6e0gs6w:s%AAIS]IBhU$3>^;y6
Oct 21, 2024 07:42:04.478595018 CEST	1236	IN	Data Raw: 64 3d f4 dc b7 a8 14 24 d8 f3 ea 51 5e 9d 0b 9b 53 12 91 9c d7 dd bc ec 1b 9c 38 8e ce e1 f7 84 19 b3 df 86 09 56 68 98 5a 77 78 31 96 37 ad 14 56 c3 8f 66 1c 76 fb 96 69 4c 79 ee 41 2b b5 57 22 49 af 9e 3c 79 b2 95 04 0d f3 2e 44 7e 8d 89 48 77 Data Ascii: d=$Q^S8VhZwx17VfviLyA+W"I<y.D~Hw5-kPSW"aO>AYfeImeM6XE{}q''P"H\|3[^H769?\<59&[!9EXjTG!YR
Oct 21, 2024 07:42:04.478605986 CEST	940	IN	Data Raw: d1 33 0e 96 9d 4d 5a ca 74 5d 7d f5 d5 c7 76 ec d8 31 32 39 39 79 2d 9f fb 68 58 d4 8c bc 72 1b 8e bf 33 29 4a 45 cd 36 9e 56 77 9b 96 49 33 24 95 a5 9a 28 58 12 91 38 6a 8a ca cd 1d 5e 80 12 75 25 9a 2e 58 4c b0 ab c4 3a 97 2b 3c 43 d7 ef 7c fc Data Ascii: 3MZt]}v1299y-hXr3)JE6VwI3$(X8j^u%.XL:+<C\|}W\*xaS[q"Zx,'x2XG/W]:f,YKZoS%\x!}vS!bSQH~S8f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49762	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:42:04.494724035 CEST	325	OUT	GET /http-resources/notification-pages/icons60/success.png HTTP/1.1 Host: www.mailcontrol.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 21, 2024 07:42:05.289036989 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:05 GMT Server: Forcepoint Last-Modified: Tue, 30 Jul 2024 08:37:44 GMT Accept-Ranges: bytes Content-Length: 6553 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer Strict-Transport-Security: max-age=2678400 Content-Security-Policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' www.datadoghq-browser-agent.com browser-http-intake.logs.datadoghq.com .odd.blackspider.com: .dev-rd.websense.net: .websense.net: .mailcontrol.com: .forcepoint.net:; script-src 'self' 'unsafe-inline' 'unsafe-eval' .walkme.com; style-src 'self' 'unsafe-inline' .walkme.com; frame-src 'self' .websense.com: .walkme.com s3.walkmeusercontent.com; font-src 'self' data: .walkme.com; img-src 'self' data: .walkme.com s3.walkmeusercontent.com d2qhvajt3imc89.cloudfront.net media-exp1.licdn.com .forcepoint.com; connect-src 'self' .walkme.com; worker-src 'self' blob: .walkme.com; object-src 'self' .walkme.com; frame-ancestors 'self' .forcepointone.com:*; Cache-Control: public, max-age=129600, must-revalidate X-FRAME-OPTIONS: SAMEORIGIN Connection: close Content-Type: image/png Content-Language: en Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 3c 08 06 00 00 00 3a fc d9 72 Data Ascii: PNGIHDR<<:r
Oct 21, 2024 07:42:05.289098978 CEST	1236	IN	Data Raw: 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e Data Ascii: tEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xml
Oct 21, 2024 07:42:05.289110899 CEST	1236	IN	Data Raw: 2b 2d 9a a6 7d bb ac ac ec 13 0b 16 2c 40 49 49 09 d8 8c 77 ed fd 1d 8e ee eb 13 5f ad ae 77 e3 f3 d7 dc 26 a0 43 a1 10 ba bb bb 59 06 09 fc d9 f3 cf 3f ff a5 8a 8a 0a 7f 06 d0 e9 64 2a b4 31 05 f6 23 01 cb 89 0e d3 35 2d 6d db b6 6d 09 41 de 44 Data Ascii: +-},@IIw_w&CY?d*1#5-mmAD}@5J-b&c_b;3C0(+(0zzz9WX+;;-(OyA#4f5+\|4,NSAo19_JuFNPO+kxx}}}
Oct 21, 2024 07:42:05.289119959 CEST	1236	IN	Data Raw: 9c 78 cd 26 2c b4 cc ad 30 e7 29 9a 4e 89 62 f9 b8 6c 81 5b ad 4d c0 5a 26 ad 08 68 24 80 85 56 f9 06 34 e1 a6 91 98 00 29 4e a0 6c f6 96 18 86 84 78 8c be 13 b7 c3 e5 cc 25 1f 16 25 bd 31 45 bb b3 af 87 49 c3 41 02 cc 63 60 9e 51 d3 90 11 23 68 Data Ascii: x&,0)Nbl[MZ&h$V4)Nlx%%1EIAc`Q#h'0eadkHN,%a-J<]oDkW4.ecS<H4iV\hnBr!+>K[>S,Wf,S`%L\|/"BqaM@R<)FT]&4,
Oct 21, 2024 07:42:05.289139032 CEST	848	IN	Data Raw: c5 5f 7f 63 0f 3c ca 39 b8 b5 e5 07 a7 c1 8a 1a 90 3a 09 45 63 d8 f4 f3 af 21 1c ea c4 aa 86 4b 51 55 4b b0 59 54 2b 1b f4 5d 01 ac 12 a8 0f de 89 6e b1 ee e5 ba d9 ad 2e 44 c3 e2 66 d1 1f 5b 63 61 61 e1 1b d3 ec 58 ce ae e1 fb ef bf ff 38 0d fc Data Ascii: _c<9:Ec!KQUKYT+]n.Df[caaX8 o-]p!d3C=Hbm9i_S@ u~%Y/w"WV\$5VxQY];-XLEDh+">8c=z7ygN3_www_^^EK+>X3]vZ<
Oct 21, 2024 07:42:05.289149046 CEST	1236	IN	Data Raw: ab aa 21 a0 39 45 e5 97 c8 58 bc 82 96 6a 54 bf b3 a6 47 02 21 f1 b4 82 f7 b8 59 0c aa 52 1e de f6 5d 8a a8 c7 b0 6c d9 3c 94 93 19 cb 76 aa 9c c2 83 38 e9 3b 84 e3 de dd e8 f7 1d a1 14 15 10 6e c0 95 14 83 86 09 34 4a a2 52 34 2f 0e 5d 84 0b 57 Data Ascii: !9EXjTG!YR]l<v8;n4JR4/]W]zFpMM>)-H~UM;/b\|riZc`0w<N1.J7I}MZsQUZ,GgueK7^~=-j9Y\|7XWWe
Oct 21, 2024 07:42:05.289160013 CEST	728	IN	Data Raw: 53 eb 51 e8 a8 c6 ba cf dc 48 7e e6 14 fb 53 ad 87 0e 91 e5 9b df a1 f4 f7 38 ff 66 eb d6 ad 1f bf c3 a5 77 6d d8 f0 55 f2 b5 a7 2e bd ec 32 5b 7d 7d 3d d5 d0 1e 6c f9 c5 13 38 fa 41 1f 02 9e a3 08 66 77 a5 80 d9 8f 73 a2 f3 51 ac d2 c2 7f 51 3e Data Ascii: SQH~S8fwmU.2[}}=l8AfwsQQ>>wOZilOOnD9I,[w\muPS@cGo77y/]j8vk]1,\\|FqVoK\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	85.115.52.220	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:42:22.239840031 CEST	212	IN	HTTP/1.0 408 Request Time-out Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49738	85.115.56.150	80	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 21, 2024 07:42:31.099723101 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49753	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:41:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 05:41:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39832 Date: Mon, 21 Oct 2024 05:41:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49754	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:41:51 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-21 05:41:51 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=39822 Date: Mon, 21 Oct 2024 05:41:51 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-21 05:41:51 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49771	17.248.209.70	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:19 UTC	692	OUT	POST /setup/ws/1/validate?clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:19 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:19 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1415 Connection: close X-Responding-Instance: setupservice:46901101:pv53p69ic-qujp03082302:8001:2426B654:a2ab3064ebcf Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 69 via: xrail:pv54p00ic-qujn12151701.me.com:8301:24R504:grp42,631194250daa17e24277dea86cf30319:0af30f70d6cb20ca7677f764daa05281:defra2 X-Apple-Request-UUID: 1ed7a4c2-b2bd-4b4c-9d7d-412f76ff84cf access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 144
2024-10-21 05:42:19 UTC	1415	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 43 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 54 58 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"CST","region":"TX"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49779	17.248.209.70	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:21 UTC	692	OUT	POST /setup/ws/1/validate?clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: setup.icloud.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:21 UTC	808	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:21 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1415 Connection: close X-Responding-Instance: setupservice:36200201:mr51p62ic-qukt05070101:8001:2426B654:a2ab3064ebcf Cache-Control: no-cache, no-store, private Access-Control-Allow-Origin: https://www.icloud.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 62 via: xrail:mr47p00ic-qujn02081502.me.com:8301:24R504:grp21,631194250daa17e24277dea86cf30319:7313003a687c813652df3ecbe9eadf17:defra2 X-Apple-Request-UUID: 1def9503-bfa6-432e-82d6-c6a63ad15aaa access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 139
2024-10-21 05:42:21 UTC	1415	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 66 61 6c 73 65 2c 22 72 65 71 75 65 73 74 49 6e 66 6f 22 3a 5b 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 43 53 54 22 2c 22 72 65 67 69 6f 6e 22 3a 22 54 58 22 7d 5d 2c 22 63 6f 6e 66 69 67 42 61 67 22 3a 7b 22 75 72 6c 73 22 3a 7b 22 61 63 63 6f 75 6e 74 43 72 65 61 74 65 55 49 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 6c 65 69 64 2e 61 70 70 6c 65 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 61 63 63 6f 75 6e 74 2f 3f 77 69 64 67 65 74 4b 65 79 3d 64 33 39 62 61 39 39 31 36 62 37 32 35 31 30 35 35 62 32 32 63 37 66 39 31 30 65 32 65 61 37 39 36 65 65 36 35 65 39 38 62 32 64 64 65 63 65 61 38 66 35 64 64 65 38 64 39 64 31 61 38 31 35 64 23 21 63 72 65 61 74 65 22 2c 22 61 63 63 6f 75 6e 74 Data Ascii: {"success":false,"requestInfo":[{"country":"US","timeZone":"CST","region":"TX"}],"configBag":{"urls":{"accountCreateUI":"https://appleid.apple.com/widget/account/?widgetKey=d39ba9916b7251055b22c7f910e2ea796ee65e98b2ddecea8f5dde8d9d1a815d#!create","account

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49803	17.248.209.73	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:28 UTC	855	OUT	POST /ca/invitereply/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: p110-calendarws.icloud.com Connection: keep-alive Content-Length: 48 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:28 UTC	48	OUT	Data Raw: 7b 22 69 6e 76 69 74 65 65 53 74 61 74 75 73 22 3a 22 41 43 43 45 50 54 45 44 22 2c 22 70 72 69 76 61 74 65 43 6f 6d 6d 65 6e 74 22 3a 22 22 7d Data Ascii: {"inviteeStatus":"ACCEPTED","privateComment":""}
2024-10-21 05:42:31 UTC	710	IN	HTTP/1.1 500 Internal Server Error Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:31 GMT Content-Length: 0 Connection: close X-Responding-Instance: caldavj:3:p110-caldavj-547585544b-6bmzd:8080:2427B558:6e2c334fa8cd X-Apple-API-Version: v1 Access-Control-Allow-Origin: https://www.icloud.com Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 110 via: xrail:icloud-xrail-group81-ext-74ff6cf9d6-lq65w:8301:24R504:grp81,631194250daa17e24277dea86cf30319:ac684c5489c1255fad95f7444acbb98f:defra2 X-Apple-Request-UUID: af32e5fa-c83c-4d7c-87ba-ff28a83c1ee8 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 3103

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49808	17.248.209.68	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:30 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 6047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:30 UTC	6047	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 68 74 74 70 53 74 61 74 75 73 43 6f 64 65 22 3a 34 32 31 2c 22 75 70 64 61 74 65 53 6f 75 72 63 65 22 3a 22 76 61 6c 69 64 61 74 65 55 73 65 72 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 32 31 20 32 30 32 34 20 30 31 3a 34 32 3a 32 30 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 39 34 38 39 33 34 30 31 30 37 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 73 74 61 74 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 2e 75 70 64 61 74 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 2c 22 69 73 53 65 73 73 69 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 Data Ascii: {"stats":[{"httpStatusCode":421,"updateSource":"validateUser","time":"Mon Oct 21 2024 01:42:20 GMT-0400 (Eastern Daylight Time) (1729489340107)","timezone":"Eastern Daylight Time","statName":"cloudos2.updateConfiguration","isSessionAuthenticated":false,"a
2024-10-21 05:42:30 UTC	832	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:30 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p66-feedbackws-7d5c9dc7c7-nsb4s:prod-p66-feedbackws-7d5c9dc7c7-nsb4s:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 66 via: xrail:mr47p00ic-qujn04081701.me.com:8301:24R504:grp23,631194250daa17e24277dea86cf30319:b74be6d14ad1df2945dfaa1aebc71417:defra2 X-Apple-Request-UUID: 15e0ca1d-361d-4ff1-832f-78c449a4861d access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 148
2024-10-21 05:42:30 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.4	49809	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:30 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:31 UTC	561	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:30 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Sat, 19 Oct 2024 17:01:38 GMT ETag: "0x8DCF05FB2860982" x-ms-request-id: 8868fbb8-301e-005d-7d56-23e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054230Z-17fbfdc98bbnhb2b0umpa641c80000000270000000003gse x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:31 UTC	15823	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <S T="1" F="0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L>
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 3c 53 20 54 3d 22 33 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d Data Ascii: <S T="3" /> </T> <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 6e 74 73 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a Data Ascii: nts" /> </C> <C T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" />
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: </S> <C T="U32" I="0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32"
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 Data Ascii: _Count"> <C> <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 Data Ascii: <L> <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3"
2024-10-21 05:42:31 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 Data Ascii: </L> <R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false
2024-10-21 05:42:32 UTC	16384	IN	Data Raw: 20 54 3d 22 42 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: T="B" /> </R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" />
2024-10-21 05:42:32 UTC	16384	IN	Data Raw: 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: O> </F> <F T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49810	17.248.209.73	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:31 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:31 UTC	723	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p118-feedbackws-64547655c6-q9bnw:prod-p118-feedbackws-64547655c6-q9bnw:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 118 via: xrail:icloud-xrail-group51-ext-b55c4646f-252zg:8301:24R504:grp51,631194250daa17e24277dea86cf30319:0681d920e7490099dda03853d1112756:defra2 X-Apple-Request-UUID: 812a0ecb-e9c7-4327-98a3-40e577e5cb0e access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 85
2024-10-21 05:42:31 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49815	17.248.209.73	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	796	OUT	GET /ca/inviterequest/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: p110-calendarws.icloud.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:33 UTC	774	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 1785 Connection: close X-Responding-Instance: caldavj:3:p110-caldavj-547585544b-rf4vg:8080:2427B558:6e2c334fa8cd X-Apple-API-Version: v1 Access-Control-Allow-Origin: https://www.icloud.com X-Robots-Tag: noindex, noarchive Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 110 via: xrail:icloud-xrail-group81-ext-74ff6cf9d6-vf6dd:8301:24R504:grp81,631194250daa17e24277dea86cf30319:36c8c28148861708790185e2e7568fcc:defra2 X-Apple-Request-UUID: 88361a77-cbb5-481b-bb02-52e9b658a5da access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 185
2024-10-21 05:42:33 UTC	1785	IN	Data Raw: 7b 22 4f 6f 6e 57 65 62 52 73 76 70 45 76 65 6e 74 44 65 74 61 69 6c 73 22 3a 7b 22 6c 6f 63 61 6c 69 7a 65 64 45 76 65 6e 74 54 69 6d 65 53 74 61 6d 70 4c 69 6e 65 31 22 3a 22 54 75 65 73 64 61 79 2c 20 4f 63 74 6f 62 65 72 20 32 32 2c 20 32 30 32 34 22 2c 22 6c 6f 63 61 6c 69 7a 65 64 45 76 65 6e 74 54 69 6d 65 53 74 61 6d 70 4c 69 6e 65 32 22 3a 22 39 3a 33 30 20 41 4d 20 2d 20 31 30 3a 33 30 20 41 4d 20 28 49 44 54 29 22 7d 2c 22 45 76 65 6e 74 22 3a 5b 7b 22 74 7a 22 3a 22 41 73 69 61 2f 4a 65 72 75 73 61 6c 65 6d 22 2c 22 69 63 6f 6e 22 3a 38 2c 22 72 65 63 75 72 72 65 6e 63 65 45 78 63 65 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 69 74 6c 65 22 3a 22 d7 99 d7 a9 d7 99 d7 91 d7 aa 20 d7 a9 d7 9b d7 a8 22 2c 22 74 7a 6e 61 6d 65 22 3a 22 49 44 54 Data Ascii: {"OonWebRsvpEventDetails":{"localizedEventTimeStampLine1":"Tuesday, October 22, 2024","localizedEventTimeStampLine2":"9:30 AM - 10:30 AM (IDT)"},"Event":[{"tz":"Asia/Jerusalem","icon":8,"recurrenceException":false,"title":" ","tzname":"IDT

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.4	49816	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:33 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 014e5f85-701e-006f-2b35-21afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054233Z-r1755647c66n5bjpba5s4mu9d000000004vg0000000026t7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:33 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.4	49819	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:33 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: 31a53d7e-801e-00a3-74f7-217cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054233Z-17fbfdc98bbgqz661ufkm7k13c000000029g0000000022tn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:33 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.4	49817	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:33 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: 77f74883-b01e-0001-1a50-2346e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054233Z-17fbfdc98bb9dlh7es9mrdw2qc00000002800000000028f6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:33 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.4	49820	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:33 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 3b262095-501e-0035-475d-23c923000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054233Z-17fbfdc98bbq2x5bzrteug30v8000000028g000000003p75 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:33 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.4	49818	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:33 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:33 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:33 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 509f9858-c01e-00a2-4459-232327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054233Z-17fbfdc98bb8xnvm6t4x6ec5m4000000029g0000000014xm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:33 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.4	49829	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 895e1389-601e-005c-16b8-20f06f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054234Z-r1755647c66nfj7t97c2qyh6zg00000001p00000000038rs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:34 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.4	49824	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:34 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: e3ea90ed-d01e-0028-6059-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054234Z-17fbfdc98bbl89flqtm21qm6rn00000002fg000000001f55 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:34 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.4	49828	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 6d910339-b01e-0021-6856-23cab7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054234Z-17fbfdc98bbgqz661ufkm7k13c00000002a0000000001x4x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:34 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.4	49827	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:34 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: a0191c6f-501e-0047-3c5d-23ce6c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054234Z-17fbfdc98bb7k7m5sdc8baghes00000002d0000000001syd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:34 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.4	49826	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:34 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: e1deb6d3-201e-006e-700b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054234Z-r1755647c66zkj29xnfn2r3bwn00000001v000000000510s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:34 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49825	17.248.209.70	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:34 UTC	595	OUT	GET /ca/inviterequest/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: p110-calendarws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:34 UTC	687	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:34 GMT Content-Length: 0 Connection: close X-Responding-Instance: caldavj:3:p110-caldavj-547585544b-w4wg7:8080:2427B558:6e2c334fa8cd X-Apple-API-Version: v1 X-Robots-Tag: noindex, noarchive Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 110 via: xrail:icloud-xrail-group81-ext-74ff6cf9d6-rpl5t:8301:24R504:grp81,631194250daa17e24277dea86cf30319:770ab62f069fb5e6b0e630cdb9b65ade:defra2 X-Apple-Request-UUID: bd6d3d2d-c854-41e6-a60d-f18eb27a678e access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 99

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49831	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:35 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 20eafa8b-401e-0067-4901-2009c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054235Z-r1755647c66cdf7jx43n17haqc00000005m000000000257m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49832	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:35 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:35 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 8659e35a-201e-005d-7d92-1fafb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054235Z-r1755647c66c9glmgg3prd89mn00000004rg000000004rv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49834	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:35 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:35 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: 6ca7d158-d01e-0014-15ac-21ed58000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054235Z-r1755647c66zkj29xnfn2r3bwn000000021g00000000101g x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:35 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49835	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:35 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:35 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:35 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 7de7ed35-901e-005b-7c14-222005000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054235Z-r1755647c66wjht63r8k9qqnrs00000003c0000000001d3w x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:35 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.4	49833	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:35 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:35 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:35 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: a48fb397-901e-008f-6356-2367a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054235Z-17fbfdc98bbgqz661ufkm7k13c00000002cg000000000bcp x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:35 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49837	17.248.209.70	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	595	OUT	GET /ca/inviterequest/2_HAYTMMZVGE3DSMZYGE3DGNJRG3K2ESSGBODNFFNTHCSF4UBGVXYB7ZZZRYUADSCCWKBKFM3JUYJYC?usertz=America%2FNew_York&lang=en-us&clientBuildNumber=2426Hotfix45&clientMasteringNumber=2426Hotfix45&clientId=a49b5d01-7c84-4678-9f96-7463c1e7f4db HTTP/1.1 Host: p110-calendarws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:36 UTC	688	IN	HTTP/1.1 421 Misdirected Request Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Length: 0 Connection: close X-Responding-Instance: caldavj:3:p110-caldavj-547585544b-s8bhn:8080:2427B558:6e2c334fa8cd X-Apple-API-Version: v1 X-Robots-Tag: noindex, noarchive Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 110 via: xrail:icloud-xrail-group81-ext-74ff6cf9d6-7k6m4:8301:24R504:grp81,631194250daa17e24277dea86cf30319:c2b6e4df6d98f4d0c2d3af7d0da0f2df:defra2 X-Apple-Request-UUID: 70ed170e-e69a-463d-aa5e-5647858d55f0 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 100

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.4	49839	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 5e1d4904-301e-0020-1550-236299000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054236Z-17fbfdc98bbcrtjhdvnfuyp28800000002m00000000004sx x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:36 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.4	49838	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: fe83e199-601e-00ab-415a-2366f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054236Z-17fbfdc98bb94gkbvedtsa5ef400000002eg000000001qdb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:36 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.4	49841	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c39ac956-e01e-001f-465d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054236Z-17fbfdc98bbk7nhquz3tfc3wbg00000002eg000000000eqh x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:36 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.4	49842	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: 1c1a6b29-f01e-0096-0e50-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054236Z-17fbfdc98bb96dqv0e332dtg6000000002900000000025yq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:36 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.4	49840	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:36 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:36 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:36 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: b1dca041-701e-0001-1ae2-20b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054236Z-r1755647c66xgpbhbunmn0p60w0000000400000000003ca5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:36 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.4	49843	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: ab91094f-501e-008f-72f7-219054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-r1755647c66xgpbhbunmn0p60w0000000400000000003cae x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:37 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.4	49844	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: e2670bef-801e-008f-375d-232c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-17fbfdc98bb96dqv0e332dtg6000000002900000000025yt x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:37 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.4	49845	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: b93710ac-501e-007b-525a-235ba2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-17fbfdc98bbg2mc9qrpn009kgs00000002m000000000094q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:37 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.4	49846	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 6949b098-b01e-0084-1a35-21d736000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-r1755647c66nfj7t97c2qyh6zg00000001hg000000005q5u x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:37 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.4	49847	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:37 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 8a7344d1-601e-0084-805a-236b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-17fbfdc98bbx4f4q0941cebmvs000000025g000000004gmu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:37 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49848	17.248.209.68	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	620	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 6226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:37 UTC	6226	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 63 61 6c 65 6e 64 61 72 2d 65 76 65 6e 74 2d 72 65 70 6c 79 22 2c 22 73 74 61 74 43 61 74 65 67 6f 72 79 22 3a 22 73 65 73 73 69 6f 6e 22 2c 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 32 31 20 32 30 32 34 20 30 31 3a 34 32 3a 32 39 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 39 34 38 39 33 34 39 38 34 30 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 73 74 61 74 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 2e 63 6c 69 63 6b 5f 68 6f 6d 65 70 61 67 65 2d 6c 69 6e 6b 22 2c 22 69 73 53 65 73 73 69 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 Data Ascii: {"stats":[{"source":"calendar-event-reply","statCategory":"session","time":"Mon Oct 21 2024 01:42:29 GMT-0400 (Eastern Daylight Time) (1729489349840)","timezone":"Eastern Daylight Time","statName":"cloudos2.click_homepage-link","isSessionAuthenticated":fa
2024-10-21 05:42:38 UTC	846	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p114-feedbackws-5dddf86664-v4dsk:prod-p114-feedbackws-5dddf86664-v4dsk:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 114 via: xrail:icloud-xrail-group53-ext-579d947cc9-l85rz:8301:24R504:grp53,631194250daa17e24277dea86cf30319:0069ae6533f170fdf542f5f712ee8a72:defra2 X-Apple-Request-UUID: 3214bb57-6d5d-4e4b-98c1-470781784387 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 87
2024-10-21 05:42:38 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.4	49851	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 58585528-701e-000d-4f7a-236de3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-r1755647c66c9glmgg3prd89mn00000004rg000000004rvn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.4	49850	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: f82a9b3d-301e-005d-05cf-20e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-r1755647c66ww2rh494kknq3r000000005mg0000000020at x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.4	49849	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:37 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:37 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 6ff76e76-001e-002b-21c5-2099f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054237Z-r1755647c66qqfh4kbna50rqv400000005p0000000001h27 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.4	49853	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:38 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: 55f0b2c4-501e-008f-5c50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054238Z-17fbfdc98bb7k7m5sdc8baghes00000002dg000000001wtr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.4	49854	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:38 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 265f42d2-801e-0047-38c8-207265000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054238Z-r1755647c66j878m0wkraqty380000000360000000004zkv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.4	49856	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:38 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: 36d132e2-e01e-0051-5c92-1f84b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054238Z-r1755647c66xn9fj09y3bhxnh400000005gg000000003qnn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.4	49857	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:38 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: 064568ba-501e-008c-7d65-23cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054238Z-17fbfdc98bbndwgn5b4pg7s8bs00000002bg000000000rdw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.4	49855	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:38 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:38 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:38 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 6dfcf22e-e01e-0051-345d-2084b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054238Z-r1755647c66ldfgxa3qp9d53us00000004t0000000003qpe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:38 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49858	17.248.209.73	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:39 UTC	711	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p115-feedbackws-94dd4b996-l5sx6:prod-p115-feedbackws-94dd4b996-l5sx6:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 115 via: xrail:st53p00ic-qujn13040102.me.com:8301:24R504:grp62,631194250daa17e24277dea86cf30319:8a2575d0dbdccd295f32a4ac2a16fdf8:defra2 X-Apple-Request-UUID: 83f78b39-f904-447d-8b11-40ef72d222a7 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 102
2024-10-21 05:42:39 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.4	49859	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: 5cd52618-301e-0033-5865-23fa9c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054239Z-17fbfdc98bblptj7fr9s141cpc00000002ag000000002pf8 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:39 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.4	49860	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: ee1aea59-301e-0052-0750-2365d6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054239Z-17fbfdc98bbkw9phumvsc7yy8w0000000280000000004bmn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:39 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.4	49861	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 8700b1e1-801e-008f-0e93-212c5d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054239Z-r1755647c66m4jttnz6nb8kzng00000003c00000000015qq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:39 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.4	49863	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:39 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: e337ee23-e01e-003c-1ecf-20c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054239Z-r1755647c66kmfl29f2su56tc400000005ng0000000011ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:39 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.4	49862	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:39 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:39 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:39 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: be98e2c6-601e-0001-2b87-21faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054239Z-r1755647c669hnl7dkxy835cqc00000002q0000000000d93 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:39 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.4	49864	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:40 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:40 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: f5c3fbe0-b01e-0002-646f-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054240Z-17fbfdc98bb4k5z6ayu7yh2rsn00000002eg000000001m32 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:40 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.4	49865	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:40 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:40 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1b8ca13b-901e-008f-4667-2067a6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054240Z-r1755647c66f2zlraraf0y5hrs00000003d0000000000aqm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:40 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.4	49866	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:40 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:40 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 62ae5dc2-001e-0079-2456-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054240Z-17fbfdc98bb9dlh7es9mrdw2qc00000002500000000037k7 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:40 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.4	49867	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:40 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:40 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:40 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: f6d2fe15-801e-007b-74f2-21e7ab000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054240Z-r1755647c66nxct5p0gnwngmx00000000420000000002ptv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:40 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.4	49868	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:40 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:40 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:40 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 7a637aca-b01e-0002-3c05-221b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054240Z-r1755647c66nfj7t97c2qyh6zg00000001p00000000038s3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:40 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.4	49870	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:41 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:41 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: b92258e0-a01e-00ab-2aab-219106000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054241Z-r1755647c668kcpcx3a1k6cqxg000000038g00000000479r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:41 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.4	49869	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:41 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:41 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 68ab0001-401e-0064-04b8-2054af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054241Z-r1755647c66ldfgxa3qp9d53us00000004vg000000001s4m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:41 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.4	49871	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:41 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:41 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:41 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 522c57e6-d01e-0065-4887-20b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054241Z-r1755647c66tmf6g4720xfpwpn00000005n00000000017zt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:41 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.4	49872	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:41 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:41 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 250cc9c1-301e-000c-4ec3-20323f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054241Z-r1755647c66d87vp2n0g7qt8bn0000000440000000001pvf x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:41 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.4	49873	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:41 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:41 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:41 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 629c9caa-001e-0079-2150-2312e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054241Z-17fbfdc98bb9dlh7es9mrdw2qc0000000290000000001p4u x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:41 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.4	49874	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:42 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:42 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 9cd877b9-501e-0016-1f56-23181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054242Z-17fbfdc98bbgpkh7048gc3vfcc00000002d0000000003p8v x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.4	49875	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:42 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:42 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: e692d532-001e-00a2-3ae7-20d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054242Z-r1755647c66sn7s9kfw6gzvyp000000004vg000000002643 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.4	49876	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:42 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:42 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: b6a35dc4-401e-008c-3156-2386c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054242Z-17fbfdc98bbl89flqtm21qm6rn00000002e0000000002g13 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.4	49877	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:42 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:42 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 95048cb8-e01e-0051-2a5a-2384b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054242Z-17fbfdc98bblvnlh5w88rcarag00000002e00000000037v5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:42 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.4	49878	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:42 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:42 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:42 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 1c3f4cdf-f01e-0096-775d-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054242Z-17fbfdc98bbgzrcvp7acfz2d3000000002eg000000001uaw x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:42 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.4	49879	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:43 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:43 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d4a2e493-801e-0048-07d3-20f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054243Z-r1755647c66vrwbmeqw88hpesn00000004k0000000001t2e x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:43 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.4	49880	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:43 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:43 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:43 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: f94d3c24-301e-001f-4850-23aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054243Z-17fbfdc98bb6q7cv86r4xdspkg00000002f0000000001550 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:43 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.4	49881	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:43 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:43 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:43 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: cc65e471-501e-008c-15b8-20cd39000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054243Z-r1755647c66qqfh4kbna50rqv400000005f0000000004zab x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:43 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.4	49882	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:43 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:43 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: f58edff3-b01e-0002-5659-231b8f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054243Z-17fbfdc98bbx648l6xmxqcmf2000000002bg00000000259h x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:43 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.4	49883	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:43 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:43 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:43 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 750d06c7-901e-0083-2d5b-20bb55000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054243Z-r1755647c66zs9x4962sbyaz1w00000003400000000000du x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:43 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.4	49884	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:44 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:44 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:44 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 55f0c68d-501e-008f-5d50-239054000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054244Z-17fbfdc98bbgzrcvp7acfz2d3000000002bg0000000036cd x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:44 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.4	49885	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:44 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:44 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: 6acd84c4-d01e-0066-15aa-20ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054244Z-r1755647c66kv68zfmyfrbcqzg000000036g000000004fgr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:44 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.4	49886	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:44 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:44 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 1c36e671-f01e-0096-085a-2310ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054244Z-17fbfdc98bb9dlh7es9mrdw2qc00000002800000000028nb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:44 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.4	49887	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:44 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:44 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:44 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: ae9ee863-001e-000b-78d3-2015a7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054244Z-r1755647c66ldfgxa3qp9d53us00000004t0000000003qu3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:44 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.4	49888	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:44 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:44 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:44 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: fc76d5e5-a01e-003d-2e6c-2398d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054244Z-17fbfdc98bb9dlh7es9mrdw2qc000000024g000000003p5a x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:44 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.4	49890	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:45 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: df53dfe1-801e-0067-2856-23fe30000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-17fbfdc98bb7k7m5sdc8baghes00000002ag00000000414f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:45 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.4	49891	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:45 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: e131a4b8-201e-005d-245d-23afb3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-17fbfdc98bbmh88pm95yr8cy5n000000019000000000247b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:45 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.4	49892	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 34547014-f01e-003f-75cc-20d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-r1755647c66m4jttnz6nb8kzng00000003d0000000000sb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:45 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.4	49893	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: ee1cea45-f01e-003f-5750-23d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-17fbfdc98bbnmnfvzuhft9x8zg000000015g000000000qwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:45 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.4	49894	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:45 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 5f99d684-e01e-003c-2d5e-21c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-r1755647c66vrwbmeqw88hpesn00000004fg000000003e5a x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:45 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.4	49895	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: ea95fade-601e-003e-6b5d-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-17fbfdc98bbgzrcvp7acfz2d3000000002gg00000000097x x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.4	49896	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:45 UTC	192	OUT	GET /rules/rule120674v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:45 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA4037B0D" x-ms-request-id: 33ac99f4-801e-0015-0d56-23f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054245Z-17fbfdc98bbvcvlzx1n0fduhm000000002kg0000000009ke x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120674" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.4	49897	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:46 UTC	192	OUT	GET /rules/rule120675v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:46 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6CF78C8" x-ms-request-id: c561987e-801e-0015-0d0b-22f97f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054246Z-r1755647c66dj7986akr8tvaw40000000410000000003eme x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 55 75 5d 5b 50 70 5d 5b 43 63 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 55 75 5d 5b 44 64 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120675" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120673" /> <SR T="2" R="([Uu][Pp][Cc][Ll][Oo][Uu][Dd])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.4	49900	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:46 UTC	192	OUT	GET /rules/rule120676v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	498	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:46 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B984BF177" x-ms-request-id: 610ea227-401e-00ac-206b-230a97000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054246Z-17fbfdc98bbkw9phumvsc7yy8w00000002a0000000002ckm x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120676" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.4	49901	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:46 UTC	192	OUT	GET /rules/rule120677v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:46 GMT Content-Type: text/xml Content-Length: 405 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:37 GMT ETag: "0x8DC582B942B6AFF" x-ms-request-id: d7699e86-701e-0050-405d-236767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054246Z-17fbfdc98bbgqz661ufkm7k13c00000002d0000000000675 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5e 5b 58 78 5d 5b 45 65 5d 5b 4e 6e 5d 24 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120677" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120675" /> <SR T="2" R="(^[Xx][Ee][Nn]$)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.4	49902	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:46 UTC	192	OUT	GET /rules/rule120678v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:46 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:46 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA642BF4" x-ms-request-id: 2f548e5b-201e-003c-5d24-2130f9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054246Z-r1755647c66wjht63r8k9qqnrs000000039000000000324z x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:46 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120678" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.4	49903	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:46 UTC	192	OUT	GET /rules/rule120679v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:46 GMT Content-Type: text/xml Content-Length: 174 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91D80E15" x-ms-request-id: 2df5d45d-601e-003e-40f7-213248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054246Z-r1755647c66gb86l6k27ha2m1c00000003a0000000002dr3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:47 UTC	174	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 37 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 54 3e 0d 0a 3c 2f 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120679" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120677" /> </S> <T> <S T="1" /> </T></R>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.4	49904	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	192	OUT	GET /rules/rule120680v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 1952 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B956B0F3D" x-ms-request-id: 4aa30514-001e-0014-5150-235151000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-r1755647c66m4jttnz6nb8kzng00000003c00000000015y4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:47 UTC	1952	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 31 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120680" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <SS T="1" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> <R T="2" R="120682" /> <F T="3"> <O T="LT"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.4	49907	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	192	OUT	GET /rules/rule120682v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 501 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:18 GMT ETag: "0x8DC582BACFDAACD" x-ms-request-id: 3ee1fb64-201e-00aa-2159-233928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-17fbfdc98bbrjvgze8aqfptnz000000002fg0000000008yu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:47 UTC	501	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 41 20 54 3d 22 31 22 20 45 3d 22 54 65 6c 65 6d 65 74 72 79 53 74 61 72 74 75 70 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 62 31 36 37 36 61 63 33 2d 37 66 65 65 2d 34 34 61 39 2d 39 61 30 65 2d 64 62 62 30 62 34 39 36 65 66 61 35 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120682" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <A T="1" E="TelemetryStartup" /> <R T="2" R="120100" /> <SS T="3" G="{b1676ac3-7fee-44a9-9a0e-dbb0b496efa5}" /> </S> <C T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.4	49906	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	192	OUT	GET /rules/rule120681v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:47 UTC	491	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 958 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:58 GMT ETag: "0x8DC582BA0A31B3B" x-ms-request-id: 3e8b3e47-701e-006f-544e-22afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-17fbfdc98bbnhb2b0umpa641c800000002ag0000000015rb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:47 UTC	958	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 38 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 38 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 33 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120681" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120608" /> <R T="2" R="120680" /> <TH T="3"> <O T="AND"> <L> <O T="EQ"> <L>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.4	49915	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	193	OUT	GET /rules/rule120602v10s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:47 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 2592 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5B890DB" x-ms-request-id: 9175aec4-101e-0028-2a56-238f64000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-17fbfdc98bbvf2fnx6t6w0g25n00000002gg000000000ga9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:47 UTC	2592	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 32 22 20 56 3d 22 31 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 41 70 70 6c 69 63 61 74 69 6f 6e 41 6e 64 4c 61 6e 67 75 61 67 65 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120602" V="10" DC="SM" EN="Office.System.SystemHealthMetadataApplicationAndLanguage" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa=

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.4	49916	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	192	OUT	GET /rules/rule120601v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:48 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 3342 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:34 GMT ETag: "0x8DC582B927E47E9" x-ms-request-id: 6d4b4f71-e01e-00aa-4a56-23ceda000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-17fbfdc98bbgqz661ufkm7k13c000000026g0000000042m5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:48 UTC	3342	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 4f 53 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120601" V="3" DC="SM" EN="Office.System.SystemHealthMetadataOS" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC" xmlns=""> <RI

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.4	49917	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:47 UTC	193	OUT	GET /rules/rule224901v11s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:47 GMT Content-Type: text/xml Content-Length: 2284 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:13 GMT ETag: "0x8DC582BCD58BEEE" x-ms-request-id: 273a8d1a-001e-0034-0d8c-21dd04000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054247Z-r1755647c66l72xfkr6ug378ks00000003q0000000002cea x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:48 UTC	2284	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 31 22 20 56 3d 22 31 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4c 69 63 65 6e 73 69 6e 67 2e 4f 66 66 69 63 65 43 6c 69 65 6e 74 4c 69 63 65 6e 73 69 6e 67 2e 44 6f 4c 69 63 65 6e 73 65 56 61 6c 69 64 61 74 69 6f 6e 22 20 41 54 54 3d 22 63 31 61 30 64 62 30 31 32 37 39 36 34 36 37 34 61 30 64 36 32 66 64 65 35 61 62 30 66 65 36 32 2d 36 65 63 34 61 63 34 35 2d 63 65 62 63 2d 34 66 38 30 2d 61 61 38 33 2d 62 36 62 39 64 33 61 38 36 65 64 37 2d 37 37 31 39 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 54 3d 22 55 70 6c 6f 61 64 2d 4d 65 64 69 75 6d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224901" V="11" DC="SM" EN="Office.Licensing.OfficeClientLicensing.DoLicenseValidation" ATT="c1a0db0127964674a0d62fde5ab0fe62-6ec4ac45-cebc-4f80-aa83-b6b9d3a86ed7-7719" SP="CriticalCensus" T="Upload-Medium"

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.4	49918	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:48 UTC	192	OUT	GET /rules/rule701201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:48 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:51 GMT ETag: "0x8DC582BE3E55B6E" x-ms-request-id: d0d0f8e5-601e-000d-298c-212618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054248Z-r1755647c66z4pt7cv1pnqayy400000004tg0000000037w9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:48 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml"

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.4	49919	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:48 UTC	192	OUT	GET /rules/rule701200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:48 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC681E17" x-ms-request-id: 9f3a3312-201e-0096-7bbe-20ace6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054248Z-r1755647c66zkj29xnfn2r3bwn000000020g000000001a9y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:48 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 58 61 6d 6c 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 58 61 6d 6c 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Xaml" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenXaml" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.4	49920	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:48 UTC	192	OUT	GET /rules/rule700201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:48 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:48 GMT Content-Type: text/xml Content-Length: 1393 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE39DFC9B" x-ms-request-id: 514e14b5-c01e-0014-51c9-20a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054248Z-r1755647c66tmf6g4720xfpwpn00000005n0000000001801 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:48 UTC	1393	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord"

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.4	49927	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:49 UTC	192	OUT	GET /rules/rule702351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:49 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE017CAD3" x-ms-request-id: a52fde13-501e-0078-6a5d-2306cf000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054249Z-17fbfdc98bbqc8zsbguzmabx6800000002c00000000009t9 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoic

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.4	49926	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:49 UTC	192	OUT	GET /rules/rule700200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:49 GMT Content-Type: text/xml Content-Length: 1356 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF66E42D" x-ms-request-id: 55d9b643-201e-003f-330b-226d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054249Z-r1755647c66nfj7t97c2qyh6zg00000001rg00000000193m x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:49 UTC	1356	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 57 6f 72 64 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 57 6f 72 64 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Word" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenWord" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.4	49929	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:49 UTC	192	OUT	GET /rules/rule701251v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:49 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:49 GMT Content-Type: text/xml Content-Length: 1395 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE12A98D" x-ms-request-id: 14811fc9-901e-0016-298e-21efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054249Z-r1755647c66sn7s9kfw6gzvyp000000004yg0000000001nw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:49 UTC	1395	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701251" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisi

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.4	49928	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:49 UTC	192	OUT	GET /rules/rule702350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:49 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:49 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE6431446" x-ms-request-id: b7bcbf2c-f01e-0071-0ae2-20431c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054249Z-r1755647c66sn7s9kfw6gzvyp000000004vg00000000266w x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:49 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 6f 69 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 6f 69 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Voice" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVoice" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.4	49931	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:50 UTC	192	OUT	GET /rules/rule701250v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:50 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:50 GMT Content-Type: text/xml Content-Length: 1358 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE022ECC5" x-ms-request-id: 11479f8e-d01e-00ad-32c9-20e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054250Z-r1755647c66qqfh4kbna50rqv400000005n0000000001h0n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:50 UTC	1358	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 32 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 56 69 73 69 6f 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 56 69 73 69 6f 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701250" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Visio" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenVisio" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.4	49934	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:50 UTC	192	OUT	GET /rules/rule700051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:50 GMT Content-Type: text/xml Content-Length: 1389 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE10A6BC1" x-ms-request-id: 44b68622-401e-0067-4450-2309c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054250Z-17fbfdc98bbvf2fnx6t6w0g25n00000002b0000000003feb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:50 UTC	1389	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.4	49935	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:50 UTC	192	OUT	GET /rules/rule700050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:50 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:50 GMT Content-Type: text/xml Content-Length: 1352 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BE9DEEE28" x-ms-request-id: 667d1099-601e-003e-17c9-203248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054250Z-r1755647c66m4jttnz6nb8kzng00000003c0000000001617 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:50 UTC	1352	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 55 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 55 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.UX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenUX" S="Medium" /> <F T="2"> <O T

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.4	49938	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:51 UTC	192	OUT	GET /rules/rule701151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:51 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE055B528" x-ms-request-id: 816a6405-301e-001f-06d8-21aa3a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054251Z-r1755647c66qqfh4kbna50rqv400000005g0000000004zfy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextA

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.4	49940	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:51 UTC	192	OUT	GET /rules/rule702201v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:56 GMT ETag: "0x8DC582BE7262739" x-ms-request-id: 2a979a5c-f01e-003f-77f7-21d19d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-r1755647c66kv68zfmyfrbcqzg00000003ag000000002t63 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702201" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTel

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.4	49936	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:51 UTC	192	OUT	GET /rules/rule702951v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE12B5C71" x-ms-request-id: e3d367a8-d01e-0028-7850-237896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-17fbfdc98bbx648l6xmxqcmf20000000028g0000000043nz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702951" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.4	49937	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:51 UTC	192	OUT	GET /rules/rule702950v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:51 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDC22447" x-ms-request-id: facc6f57-201e-006e-7356-23bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054251Z-17fbfdc98bbl89flqtm21qm6rn00000002gg000000000z1y x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 39 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 72 61 6e 73 6c 61 74 6f 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 72 61 6e 73 6c 61 74 6f 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702950" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Translator" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTranslator" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.4	49939	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:51 UTC	192	OUT	GET /rules/rule701150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE1223606" x-ms-request-id: 28cefb6f-601e-003d-6a50-236f25000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-17fbfdc98bbg2mc9qrpn009kgs00000002g0000000001y6d x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 78 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 78 74 41 6e 64 46 6f 6e 74 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Text" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTextAndFonts" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.4	49945	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:52 UTC	192	OUT	GET /rules/rule702200v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDDEB5124" x-ms-request-id: d2e4573f-901e-0067-4de3-20b5cb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-r1755647c66nfj7t97c2qyh6zg00000001kg0000000049xz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 32 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 6c 4d 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 6c 4d 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702200" V="1" DC="SM" EN="Office.Telemetry.Event.Office.TellMe" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTellMe" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.4	49946	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:52 UTC	192	OUT	GET /rules/rule700401v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:52 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDCB4853F" x-ms-request-id: 33f58e49-701e-0053-6bb3-203a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-r1755647c66dj7986akr8tvaw400000003yg000000004u2q x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:52 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 31 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700401" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.4	49947	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:52 UTC	192	OUT	GET /rules/rule700400v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB779FC3" x-ms-request-id: 2ea30268-a01e-006f-2759-2313cd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-17fbfdc98bbnpjstwqrbe0re7n000000028g000000003vgq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 34 30 30 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 54 65 6c 65 6d 65 74 72 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700400" V="2" DC="SM" EN="Office.Telemetry.Event.Office.Telemetry" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenTelemetry" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.4	49949	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:52 UTC	192	OUT	GET /rules/rule700351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BDFD43C07" x-ms-request-id: 106adab5-b01e-0001-11da-2046e2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-r1755647c668mbb8rg8s8fbge400000001s000000000114p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSys

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.4	49948	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:52 UTC	192	OUT	GET /rules/rule700350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:52 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:40 GMT ETag: "0x8DC582BDD74D2EC" x-ms-request-id: a2099384-101e-008d-760b-2292e5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054252Z-r1755647c66x46wg1q56tyyk680000000430000000002qw6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 79 73 74 65 6d 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.System" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSystem" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.4	49961	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	192	OUT	GET /rules/rule701500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:53 GMT Content-Type: text/xml Content-Length: 1364 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB6AD293" x-ms-request-id: 97ea84b8-d01e-005a-0430-217fd9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054253Z-r1755647c66c9glmgg3prd89mn00000004x0000000000pk1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1364	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 63 75 72 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSecurity" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.4	49962	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	192	OUT	GET /rules/rule702801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:53 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF58DC7E" x-ms-request-id: fca683ae-601e-0070-466b-23a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054253Z-17fbfdc98bbwfg2nvhsr4h37pn00000002d0000000002gry x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.4	49959	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	192	OUT	GET /rules/rule703900v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:53 GMT Content-Type: text/xml Content-Length: 1390 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE3002601" x-ms-request-id: d904b25e-d01e-0066-3f59-23ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054253Z-17fbfdc98bbcrtjhdvnfuyp28800000002g00000000028m3 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1390	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 22 20 53 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703900" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenServiceabilityManager" S=

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.4	49958	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	192	OUT	GET /rules/rule703901v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:53 GMT Content-Type: text/xml Content-Length: 1427 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE56F6873" x-ms-request-id: 0efe6ec1-b01e-0053-7d56-23cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054253Z-17fbfdc98bbq2x5bzrteug30v800000002f000000000056p x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 39 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 72 76 69 63 65 61 62 69 6c 69 74 79 4d 61 6e 61 67 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703901" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ServiceabilityManager.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexu

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.4	49960	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	192	OUT	GET /rules/rule701501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:53 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:53 GMT Content-Type: text/xml Content-Length: 1401 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:48 GMT ETag: "0x8DC582BE2A9D541" x-ms-request-id: 654233af-a01e-001e-0b27-2149ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054253Z-r1755647c66nfj7t97c2qyh6zg00000001qg000000001eqs x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:53 UTC	1401	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 65 63 75 72 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Security.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49963	17.248.209.68	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:53 UTC	619	OUT	POST /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive Content-Length: 998 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.icloud.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.icloud.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:53 UTC	998	OUT	Data Raw: 7b 22 73 74 61 74 73 22 3a 5b 7b 22 74 69 6d 65 22 3a 22 4d 6f 6e 20 4f 63 74 20 32 31 20 32 30 32 34 20 30 31 3a 34 32 3a 34 34 20 47 4d 54 2d 30 34 30 30 20 28 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 29 20 28 31 37 32 39 34 38 39 33 36 34 30 32 30 29 22 2c 22 74 69 6d 65 7a 6f 6e 65 22 3a 22 45 61 73 74 65 72 6e 20 44 61 79 6c 69 67 68 74 20 54 69 6d 65 22 2c 22 73 74 61 74 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 2e 61 74 74 65 6d 70 74 54 6f 53 68 6f 77 41 75 74 68 57 69 64 67 65 74 22 2c 22 69 73 53 65 73 73 69 6f 6e 41 75 74 68 65 6e 74 69 63 61 74 65 64 22 3a 66 61 6c 73 65 2c 22 61 70 70 4e 61 6d 65 22 3a 22 63 6c 6f 75 64 6f 73 32 22 2c 22 6d 61 73 74 65 72 69 6e 67 4e 75 6d 62 65 72 22 3a 22 32 34 32 36 48 6f 74 66 69 Data Ascii: {"stats":[{"time":"Mon Oct 21 2024 01:42:44 GMT-0400 (Eastern Daylight Time) (1729489364020)","timezone":"Eastern Daylight Time","statName":"cloudos2.attemptToShowAuthWidget","isSessionAuthenticated":false,"appName":"cloudos2","masteringNumber":"2426Hotfi
2024-10-21 05:42:54 UTC	834	IN	HTTP/1.1 200 OK Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: application/json; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Responding-Instance: feedbackws:prod-p111-feedbackws-77f9f79d65-b8k8c:prod-p111-feedbackws-77f9f79d65-b8k8c:8080:2426B38:nocommit access-control-allow-credentials: true access-control-allow-origin: https://www.icloud.com Cache-Control: no-cache, no-store, private Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 111 via: xrail:st53p00ic-qujn12061101.me.com:8301:24R504:grp61,631194250daa17e24277dea86cf30319:5efd6ab1db66847d6f2d5b004ab79ea2:defra2 X-Apple-Request-UUID: 7c68d016-9b57-4517-81ef-e8cff2120da3 access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 99
2024-10-21 05:42:54 UTC	12	IN	Data Raw: 32 0d 0a 7b 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 2{}0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.4	49965	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:54 UTC	192	OUT	GET /rules/rule703351v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:54 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCDD6400" x-ms-request-id: f36390f8-001e-00a2-0e96-1fd4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054254Z-r1755647c66n5bjpba5s4mu9d000000004x0000000000pzu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:54 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703351" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.4	49966	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:54 UTC	192	OUT	GET /rules/rule703501v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:59 GMT ETag: "0x8DC582BE8C605FF" x-ms-request-id: 9f7c1011-d01e-0065-1a3b-22b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054254Z-17fbfdc98bbg2mc9qrpn009kgs00000002m00000000009be x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:54 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703501" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSa

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.4	49967	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:54 UTC	192	OUT	GET /rules/rule703350v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:42 GMT ETag: "0x8DC582BDF1E2608" x-ms-request-id: 09861b75-b01e-005c-4550-234c66000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054254Z-17fbfdc98bbrjvgze8aqfptnz000000002a0000000003eh5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:54 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 33 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 63 72 69 70 74 4c 61 62 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 63 72 69 70 74 4c 61 62 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703350" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ScriptLab" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenScriptLab" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.4	49964	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:54 UTC	192	OUT	GET /rules/rule702800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: text/xml Content-Length: 1354 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE0662D7C" x-ms-request-id: f0881de6-001e-002b-6759-2399f2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054254Z-17fbfdc98bbvwcxrk0yzwg4d5800000002f0000000001f9f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:54 UTC	1354	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 44 58 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 44 58 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.SDX" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSDX" S="Medium" /> <F T="2"> <O

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.4	49968	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:54 UTC	192	OUT	GET /rules/rule703500v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:54 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:54 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:43 GMT ETag: "0x8DC582BDF497570" x-ms-request-id: 475da012-701e-0001-146c-23b110000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054254Z-17fbfdc98bblvnlh5w88rcarag00000002hg0000000015bn x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:54 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 35 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 53 61 6e 64 62 6f 78 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 53 61 6e 64 62 6f 78 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703500" V="0" DC="SM" EN="Office.Telemetry.Event.Office.Sandbox" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenSandbox" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49970	17.248.209.73	443	4940	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	356	OUT	GET /reportStats HTTP/1.1 Host: feedbackws.icloud.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-21 05:42:55 UTC	724	IN	HTTP/1.1 405 Method Not Allowed Server: AppleHttpServer/b866cf47a603 Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 20 Connection: close X-Responding-Instance: feedbackws:prod-p139-feedbackws-757bcc8df8-zppr8:prod-p139-feedbackws-757bcc8df8-zppr8:8080:2426B38:nocommit Allow: POST Strict-Transport-Security: max-age=31536000; includeSubDomains; x-apple-user-partition: 139 via: xrail:icloud-xrail-group89-ext-79ff49c795-vzphb:8301:24R504:grp89,631194250daa17e24277dea86cf30319:2e27eae0809849751a5b4c633465dae3:defra2 X-Apple-Request-UUID: 521456a1-f2ea-469d-9da0-c14b6502c33a access-control-expose-headers: X-Apple-Request-UUID,Via X-Apple-Edge-Response-Time: 98
2024-10-21 05:42:55 UTC	20	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.4	49973	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	192	OUT	GET /rules/rule701051v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:55 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:47 GMT ETag: "0x8DC582BE1CC18CD" x-ms-request-id: fc8879c6-e01e-003c-6a59-23c70b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054255Z-17fbfdc98bbgzrcvp7acfz2d3000000002dg0000000022xy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:55 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701051" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRe

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.4	49972	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	192	OUT	GET /rules/rule701800v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:01 GMT ETag: "0x8DC582BEA414B16" x-ms-request-id: b71c6767-a01e-0021-3a5a-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054255Z-17fbfdc98bbk7nhquz3tfc3wbg00000002e0000000000rt4 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:55 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 73 6f 75 72 63 65 73 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701800" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenResources" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.4	49971	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	192	OUT	GET /rules/rule701801v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:55 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2EEE03" x-ms-request-id: c39b20d8-e01e-001f-4a5d-231633000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054255Z-r1755647c66zs9x4962sbyaz1w0000000330000000000w1r x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 73 6f 75 72 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701801" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Resources.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.4	49975	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	192	OUT	GET /rules/rule702751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:55 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/xml Content-Length: 1403 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB866CDB" x-ms-request-id: 2e9d796b-b01e-00ab-5859-23dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054255Z-17fbfdc98bbrjvgze8aqfptnz000000002d0000000001hun x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:55 UTC	1403	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToken

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.4	49974	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:55 UTC	192	OUT	GET /rules/rule701050v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:55 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:55 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB256F43" x-ms-request-id: e1e0bfc6-201e-006e-0e0b-22bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054255Z-r1755647c66j878m0wkraqty380000000370000000004ygt x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:55 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 30 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 52 65 6c 65 61 73 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 52 65 6c 65 61 73 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701050" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Release" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenRelease" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.4	49981	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:56 UTC	192	OUT	GET /rules/rule703400v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:56 GMT Content-Type: text/xml Content-Length: 1388 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDBD9126E" x-ms-request-id: 90f594d0-e01e-0003-5056-230fa8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054256Z-17fbfdc98bbwfg2nvhsr4h37pn00000002fg0000000018md x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:56 UTC	1388	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 22 20 53 3d 22 4d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703400" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammableSurfaces" S="M

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.4	49980	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:56 UTC	192	OUT	GET /rules/rule703401v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:56 GMT Content-Type: text/xml Content-Length: 1425 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE6BD89A1" x-ms-request-id: 23449c74-401e-0083-0a50-23075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054256Z-17fbfdc98bbgqz661ufkm7k13c000000029g0000000022uq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:56 UTC	1425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 34 30 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 6c 65 53 75 72 66 61 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703401" V="0" DC="SM" EN="Office.Telemetry.Event.Office.ProgrammableSurfaces.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nexus

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.4	49979	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:56 UTC	192	OUT	GET /rules/rule702300v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:56 GMT Content-Type: text/xml Content-Length: 1362 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:37 GMT ETag: "0x8DC582BDC13EFEF" x-ms-request-id: efa6dde7-e01e-0071-750c-2208e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054256Z-r1755647c66zs9x4962sbyaz1w00000002xg000000004cwc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-21 05:42:56 UTC	1362	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 6a 65 63 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702300" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProject" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.4	49977	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:56 UTC	192	OUT	GET /rules/rule702750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:56 GMT Content-Type: text/xml Content-Length: 1366 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:54 GMT ETag: "0x8DC582BE5B7B174" x-ms-request-id: 728679af-d01e-007a-566c-23f38c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054256Z-17fbfdc98bb2fzn810kvcg2zng00000002cg000000003xuu x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:56 UTC	1366	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 75 62 6c 69 73 68 65 72 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 75 62 6c 69 73 68 65 72 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Publisher" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPublisher" S="Medium" /> <F T="2

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.4	49978	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:56 UTC	192	OUT	GET /rules/rule702301v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:56 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:56 GMT Content-Type: text/xml Content-Length: 1399 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE976026E" x-ms-request-id: b72677c2-a01e-0021-325d-23814c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054256Z-17fbfdc98bbwfg2nvhsr4h37pn00000002c0000000002pt5 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:56 UTC	1399	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 33 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 6a 65 63 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702301" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Project.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPr

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.4	49983	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:57 UTC	192	OUT	GET /rules/rule702500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:57 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:36 GMT ETag: "0x8DC582BDB813B3F" x-ms-request-id: b919b0a2-501e-00a0-2392-1f9d9f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054257Z-r1755647c66sn7s9kfw6gzvyp000000004r0000000004k4v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:57 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenProgrammability" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.4	49982	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:57 UTC	192	OUT	GET /rules/rule702501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:57 GMT ETag: "0x8DC582BE7C66E85" x-ms-request-id: dc073066-d01e-0065-6c50-23b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054257Z-17fbfdc98bbvcvlzx1n0fduhm000000002cg000000003qwb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 72 6f 67 72 61 6d 6d 61 62 69 6c 69 74 79 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Programmability.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.4	49985	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:57 UTC	192	OUT	GET /rules/rule700500v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:57 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:57 GMT Content-Type: text/xml Content-Length: 1368 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE51CE7B3" x-ms-request-id: 47247c95-c01e-00a1-575a-237e4a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054257Z-17fbfdc98bbvcvlzx1n0fduhm000000002c00000000046tr x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:57 UTC	1368	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 6f 77 65 72 50 6f 69 6e 74 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700500" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPowerPoint" S="Medium" /> <F T=

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.4	49984	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:57 UTC	192	OUT	GET /rules/rule700501v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:57 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:57 GMT Content-Type: text/xml Content-Length: 1405 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:58 GMT ETag: "0x8DC582BE89A8F82" x-ms-request-id: 9144373a-f01e-005d-575a-2313ba000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054257Z-17fbfdc98bbvcvlzx1n0fduhm000000002dg00000000369b x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:57 UTC	1405	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 35 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 6f 77 65 72 50 6f 69 6e 74 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700501" V="1" DC="SM" EN="Office.Telemetry.Event.Office.PowerPoint.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantToke

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.4	49986	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:57 UTC	192	OUT	GET /rules/rule702551v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:57 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:57 GMT Content-Type: text/xml Content-Length: 1415 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:39 GMT ETag: "0x8DC582BDCE9703A" x-ms-request-id: 865bbc8c-c01e-002b-3926-216e00000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054257Z-r1755647c66j878m0wkraqty3800000003ag0000000025mk x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:57 UTC	1415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702551" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.4	49988	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:58 UTC	192	OUT	GET /rules/rule702550v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:58 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:58 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:53 GMT ETag: "0x8DC582BE584C214" x-ms-request-id: 26312148-601e-003e-327a-233248000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054258Z-17fbfdc98bb94gkbvedtsa5ef400000002d0000000002czb x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:58 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 35 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702550" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Personalization" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPersonalization" S="Medium" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.4	49989	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:58 UTC	192	OUT	GET /rules/rule701351v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:58 GMT Content-Type: text/xml Content-Length: 1407 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:55 GMT ETag: "0x8DC582BE687B46A" x-ms-request-id: 5a5a6e35-401e-00a3-0b56-238b09000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054258Z-17fbfdc98bbvf2fnx6t6w0g25n00000002gg000000000gkg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:58 UTC	1407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701351" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.4	49990	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:58 UTC	192	OUT	GET /rules/rule701350v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:58 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:58 GMT Content-Type: text/xml Content-Length: 1370 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:41 GMT ETag: "0x8DC582BDE62E0AB" x-ms-request-id: 06d7a471-401e-0029-1427-219b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054258Z-r1755647c66kv68zfmyfrbcqzg00000003bg000000001td5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:58 UTC	1370	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 33 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 72 66 6f 72 6d 61 6e 63 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701350" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Performance" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPerformance" S="Medium" /> <F

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.4	49991	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:58 UTC	192	OUT	GET /rules/rule702151v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:58 GMT Content-Type: text/xml Content-Length: 1397 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:46 GMT ETag: "0x8DC582BE156D2EE" x-ms-request-id: 5fe4c9d5-d01e-008e-1959-23387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054258Z-17fbfdc98bbrjvgze8aqfptnz000000002ag000000003tsy x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:58 UTC	1397	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702151" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeo

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.4	49992	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:58 UTC	192	OUT	GET /rules/rule702150v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:58 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:58 GMT Content-Type: text/xml Content-Length: 1360 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:07 GMT ETag: "0x8DC582BEDC8193E" x-ms-request-id: 88a9635a-401e-005b-7585-219c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054258Z-r1755647c66fnxpdavnqahfp1w0000000340000000000mzq x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:58 UTC	1360	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 32 31 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 50 65 6f 70 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 50 65 6f 70 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 32 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="702150" V="1" DC="SM" EN="Office.Telemetry.Event.Office.People" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenPeople" S="Medium" /> <F T="2">

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.4	49993	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:59 UTC	192	OUT	GET /rules/rule703001v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:59 GMT Content-Type: text/xml Content-Length: 1406 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB16F27E" x-ms-request-id: 4b1eeebb-201e-0051-0fab-217340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054259Z-r1755647c66mgrw7zd8m1pn5500000000370000000004nng x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:59 UTC	1406	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703001" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTok

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.4	49994	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:59 UTC	192	OUT	GET /rules/rule703000v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:59 GMT Content-Type: text/xml Content-Length: 1369 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:49 GMT ETag: "0x8DC582BE32FE1A2" x-ms-request-id: c25cd208-b01e-0070-595d-231cc0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054259Z-17fbfdc98bbnpjstwqrbe0re7n00000002ag000000002dpg x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:59 UTC	1369	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 30 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 4d 61 63 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 4d 61 63 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703000" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Mac" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookMac" S="Medium" /> <F T

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.4	49995	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:59 UTC	192	OUT	GET /rules/rule700751v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:59 UTC	591	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:59 GMT Content-Type: text/xml Content-Length: 1414 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:44 GMT ETag: "0x8DC582BE03B051D" x-ms-request-id: d9c148d9-d01e-00ad-325d-23e942000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054259Z-17fbfdc98bbrjvgze8aqfptnz000000002eg0000000016w0 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2024-10-21 05:42:59 UTC	1414	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700751" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenan

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.4	49996	13.107.253.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-21 05:42:59 UTC	192	OUT	GET /rules/rule700750v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-21 05:42:59 UTC	584	IN	HTTP/1.1 200 OK Date: Mon, 21 Oct 2024 05:42:59 GMT Content-Type: text/xml Content-Length: 1377 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:02 GMT ETag: "0x8DC582BEAFF0125" x-ms-request-id: 9e5c5f24-f01e-001f-3156-235dc8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241021T054259Z-17fbfdc98bbcrtjhdvnfuyp28800000002kg000000000g2c x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-21 05:42:59 UTC	1377	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 37 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 4f 75 74 6c 6f 6f 6b 44 65 73 6b 74 6f 70 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700750" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Outlook.Desktop" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenOutlookDesktop" S="Medium" />

Target ID:	0
Start time:	01:41:38
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	01:41:42
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2200,i,14995416763360869801,3715102301362132616,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	01:41:44
Start date:	21/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczBaoMwHIDx_0PsutOgx6RqN-lAmNGaouig1m7JZYQY0JFqiFnFZ9vLlL3D7ltP3-XHd0fh-g3w-wNg9eKFLZrsBZ1Fr-U4ODtqJMczbLbFE4m3vh8-ev4aJtEJi4wY-k-lXxYxdb39d6jX0DlnpmeM53lGvdTjV3sbYCm0GlphsbqoweEHF_kf-5gdy5Kf6C5I65KzW2mVH2hQ-Lu6puQ1rbKsOu6TOts0hJ7eGQk55wfWxGmdJG8FKbIyyBuWs2RlIuN565VVRi-RkFIZBwD3V4A_lcRInA&Z	HTTP Parser: No favicon
Source: http://hybrid-web.global.blackspider.com/urlwrap/?q=AXicFczLaoNAGEDh_yG67aqQ5RjvKAj1EidotRBj0nFThlHQZKIyTiPm1foyoe_QfZvV2XycJwz3b4DfHwDBF9Wu0SSu6EI7zoZeioEjNlzAcFIr8B1Ns01VW8NEWyrQSPvu1PDXhU5tJ_4d6ji0Uo6TqyjzPKOO8eGrfgwURnnT11QozbXppfIiPe1z65N9llUHvNGjIqvIozhPdlhPtU1R4OA9yuM432_DIjbKAB8-SGBXVbUjpR8VYXhMgzTO9KQkCQlXozeq6nolmpEvHmWsGSWc3-TteHKNs3BVx3JM0wJ4vgP8AfmDTgA&action=scan	HTTP Parser: No favicon
Source: https://www.icloud.com/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: hybrid-web.global.blackspider.com
Source: global traffic	DNS traffic detected: DNS query: www.mailcontrol.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: setup.icloud.com
Source: global traffic	DNS traffic detected: DNS query: ckdatabasews.icloud.com
Source: global traffic	DNS traffic detected: DNS query: cvws.icloud-content.com
Source: global traffic	DNS traffic detected: DNS query: p110-calendarws.icloud.com
Source: global traffic	DNS traffic detected: DNS query: feedbackws.icloud.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128